Those Crazy Internet Security Questions - TIME

Read More

The Microsoft Windows GDI+ API (Gdiplus.dll) is vulnerable to multiple buffer overflows that could result in remote code execution. Read More

Multiple vendor DNS protocol implementations could allow a remote attacker to poison the DNS cache.  Patches that resolve the vulnerability on the DNS may be rendered ineffective if the DNS is behind a NAT device that does not randomize ports. Public exploit code was made available on July 24, 2008.  At the time of this update, neither X-Force nor IBM MSS has witness any active exploitation nor the integration of this exploit into any exploit toolkits. Read More

"National Security" has been burned indelibly into the vocabulary of average Americans ever since 9/11. Of course, prior to 9/11 we had enemies- even enemies who attacked us. We knew... Read More

In the wake of Republican Vice Presidential nominee Sarah Palin's Yahoo email account being compromised by hackers last week, Yahoo's VP of Mail, John Kremer, wrote a brief article highlighting... Read More

Microsoft Office is vulnerable to remote code execution through specially-crafted OneNote URLs. Read More