Open Source Articles

OpenOffice.org releases update to fix database vulnerability

Frank Washkuch Jr. December 06, 2007

OpenOffice.org released a new version of its productivity suite this week, fixing a flaw that could allow arbitrary code execution attacks.
 

Grisoft acquires Exploit Prevention Labs

Frank Washkuch Jr. December 05, 2007

Anti-virus vendor Grisoft announced today that it has acquired web-browsing security provider Exploit Prevention Labs.
 

Apple releases monster patch bulletin for OS X

Frank Washkuch Jr. November 15, 2007

Apple on Wednesday released security updates for Mac OS X and Safari Beta 3, patching nearly 50 vulnerabilities.
 

News briefs

November 01, 2007

Clothing retailer Gap Inc. revealed that a laptop containing the Social Security numbers of 800,000 job applicants was stolen from a third-party vendor. The laptop contained info of job applicants who applied to the company's Old Navy, Banana Republic, Gap and Outlet stores. The vendor, not identified by Gap, contacted law enforcement authorities about the breach. The data was not encrypted.
 

SC Magazine survey - Preventing a data breach

October 24, 2007

A legion of data exposures have occurred over the past year, with many affected companies not only being forced to address customer and investor concerns, but also pay fines and adhere to prolonged sets of requirements administered by the Federal Trade Commission. So just how is news of such breaches, exposures and possible thefts affecting the way organizations -- large and small -- focus on information security plans?
 

Endace buys MSSP Applied Watch for $5 million

Frank Washkuch Jr. October 15, 2007

New Zealand-based network monitoring provider Endace has acquired Applied Watch Technologies, a managed security services provider, for $5 million.
 

Firefox plagued by unpatched QuickTime flaw

Jim Carr September 13, 2007

Mozilla on Thursday acknowledged that a year-old vulnerability in the QuickTime media player plug-in for Firefox could let a hacker break into the open-source browser.
 

Hot or not: Open Vulnerability Assessment Language

Amol Sarwate August 20, 2007

The open standard OVAL promises to ease the integration of security applications and help organizations develop security checks for highly-customized networks and applications.