Robert Lemos

Under threat of further attacks on its service and users, an Israeli anti-spam startup decides to shutter its service.
SecurityFocus

[Read more →]

Concerns raised by a rural county in Utah helped an electronic voting watchdog discover a critical vulnerability in Diebold Election Systems’ touchscreen terminal–a flaw that state election officials and security experts warn could pose a risk to elections.
SecurityFocus

[Read more →]

Threatened by investigators’ ability to tap into chat-based command-and-control networks, bot masters increasingly look to peer-to-peer communications, encryption and other technologies to hide their tracks.
SecurityFocus

[Read more →]

A host of software companies, security firms and Internet service providers meet in Chicago to urge corporations and bulk e-mail senders to adopt authentication technologies.
SecurityFocus

[Read more →]

Citing an ongoing investigation into the deal by the U.S. Treasury Department, the companies decide to call it quits.
SecurityFocus

[Read more →]

A security researcher releases detailed information about a critical vulnerability in Oracle’s application and Web servers, taking the company to task for not fixing the issues quickly.
SecurityFocus

[Read more →]

The Windows Meta File incident suggests that open-source efforts can result in quicker fixes but pose larger issues of trust, and highlights that companies can no longer depend on patches to protect their systems.
SecurityFocus

[Read more →]

I interview Datarescue’s senior software developer Ilfak Guilfanov, the creator of the unofficial patch for the flaw in the Windows Meta File format that saw tens of thousands of downloads prior to the official patch release by Microsoft. Guilfanov explains why he decided to issue a patch for the vulnerability, how he created the patch, [...]

[Read more →]

After three years of modest or no gains, the number of publicly reported vulnerabilities jumped in 2005, boosted by easy-to-find bugs in Web applications. Yet, questions remain about the value of analyzing current databases, whose data rarely correlates easily.
SecurityFocus

[Read more →]

A federal database of software vulnerabilities funded by the U.S. Department of Homeland Security has decided on a common method of ranking flaw severity and has assigned scores to the more than 13,000 vulnerabilities currently contained in its database, the group announced this week.
SecurityFocus

[Read more →]