Robert Lemos

A working group of security researchers, digital-rights activists and government prosecutors discuss whether bug hunters can find vulnerabilities in Web sites without violating laws.
SecurityFocus

[Read more →]

A security analyst tries his hand at selling two vulnerabilities and finds that economics and time are against him.
SecurityFocus

[Read more →]

A security researcher warns that an insecure update mechanism for some of the open-source browser’s third-party add-ons could allow an attacker the ability to install malicious code.
SecurityFocus

[Read more →]

Only a few weeks after researchers raised the design issue in the next-generation Internet protocol, two drafts to the Internet Engineering Task Force propose different fixes.
SecurityFocus

[Read more →]

Researchers use a previously unknown flaw in Apple’s Safari browser to compromise a MacBook Pro and win the PWN to Own contest, but does the hack actually prove anything?
SecurityFocus

UPDATE: More on the vulnerability, which is a Java flaw in QuickTime.

[Read more →]

On the same day that Apple releases an update for its Mac OS X, security professionals at a conference in Canada show little initial interest in attempting to crack the security of two MacBook Pros.
SecurityFocus

[Read more →]

Latest malicious software throws in more obfuscation and works harder to foil defenders’ attempts at reverse engineering.
SecurityFocus

[Read more →]

A flaw in the way many asynchronous JavaScript and XML (AJAX) frameworks use the scripting to communicate data between a server and client allows malicious sites to hijack the conversation.
SecurityFocus

[Read more →]

A security researcher unveils a project that aims to identify sources on the pro-privacy network, but does the initiative help track down criminals or just hurt legitimate users?
SecurityFocus

[Read more →]

The misnamed Storm Worm, actually a Trojan horse, underscores the difficulties that evolving tactics pose for defenders. The second article in a two-part series.
SecurityFocus

[Read more →]