Database server giant Oracle is joining Microsoft and Adobe this Patch Tuesday.As part of its Critical Patch Update schedule, Oracle plans to ship 24 security patches on January 12 to cover a wide range of serious vulnerabilities in its database and application server products.
Heartland Payment Systems on Jan. 8 announced that it has agreed to pay up to $60 million to Visa to cover losses to credit and debit cardholders affected by the massive data breach Heartland suffered in 2008. Read the full article. [eWEEK]
Ryan Naraine and Dennis Fisher discuss all of the news and
criticism concerning Adobe this week, including their release of a silent
updater and the company becoming a top target for attackers.
Here, in chronological order, are the top 10 security and privacy
stories concerning Facebook and Twitter from the past year. Read the full article. [Network World]
Adobe has released a critical patch to cover two serious security vulnerabilities in the Adobe Illustrator CS3 and CS4 products. The vulnerabilities could lead to arbitrary code execution.
Microsoft and its endless portfolio of products have been the favorite targets of attackers for more than a decade now. But if the events of the past year or so are any indication, it looks like that dubious distiniction now belongs to Adobe.
Microsoft’s first Patch Tuesday for 2010 will be very light: A solitary bulletin addressing a vulnerability that is rated critical only for Windows 2000 users.According to Redmond’s advance notice for the next batch of patches due on January 12, the bulletin is rated “low” for every other affected version of Windows, meaning it is “extremely difficult” to exploit or has minimal impact.
In an advisory sent Wednesday afternoon, Juniper said a
variety of devices could be forced to reboot by sending them internet
packets with maliciously formed TCP options. Read the full article. [The Register]
By Andrew StormsThe year was 2001. Code Red, the Microsoft Web Server worm was running rampant and underscored every security professional’s perception that Microsoft products were both a necessary evil and a serious security liability.
Fast-forward to nine years later. Microsoft products still contain more than a few nasty bugs, but the company is more likely to be considered a valued partner than a security liability by the security community.
US CERT advises upgrading PowerDNS
Recursor 3.1.7.2 to address multiple vulnerabilities; Exploitation of
these vulnerabilities may allow an attacker to execute arbitrary code,
cause a denial-of-service condition, or spoof DNS information. Read the advisory. [US CERT]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
