• 1
• 2
• 3
• Next page

• Oracle releases critical security updates for Java

  19.06.2013

  Oracle released 40 new Java security fixes. 37 of the vulnerabilities may be remotely exploitable without authentication.

• Changes to the Java security model

  04.06.2013

  The upcoming security changes in Oracle Java address three long-standing issues with the Java security model.

• Multi-stage exploit attacks for more effective malware delivery

  03.05.2013

  Most drive-by exploit kits use a minimal exploit shellcode that downloads and runs the final payload.

• Exploit for recently patched Java flaw added to CrimeBoss exploit kit

  23.04.2013

  If you are still using Java, you insist on updating in manually and you haven't gotten around to installing the latest Critical Patch Update released a week ago, you are advised to do it now, as an exploit for one of the vulnerabilities it patched has been incorporated into a popular exploit kit and is being actively used in the wild.

• Oracle plugs a host of critical Java vulnerabilities

  17.04.2013

  Oracle’s Java SE Critical Patch Update for April 2013 contains 19 CVEs with CVSS base score of 10 (the highest you can go) indicating that exploiting the vulnerability is not particularly challenging and could give complete control of compromised systems.

• 1
• 2
• 3
• Next page

Spotlight

The security of WordPress plugins

Posted on 18 June 2013.  |  Checkmarx’s research lab identified that more than 20% of the 50 most popular WordPress plugins are vulnerable to common Web attacks, such as SQL Injection.

Information security executives need to be strategic thinkers

Posted on 17 June 2013.  |  George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.

Large orgs in denial about own security breaches?

Posted on 14 June 2013.  |  Over two thirds (66%) of large organizations said they either had not experienced a security incident in the last 12-18 months or were unsure if they had.

Vulnerability scanning with PureCloud

Posted on 12 June 2013.  |  nCircle PureCloud is a cloud-based network security scanning product built upon the companies' vulnerability and risk management system IP360.

Reactions from the security community to the NSA spying scandal

Posted on 11 June 2013.  |  Read on for comments on this scandal that Help Net Security received from a variety of security professionals and analysts.