Today's bulletin covers one vulnerability in Embedded Web fonts and one vulnerability in Microsoft Outlook and Microsoft Exchange. The most severe of these vulnerabilities, MS06-003, has two exploit scenarios involving both the client side, with vulnerable version...

McAfee has announced that its President, Gene Hodges, has submitted his resignation from his position as President, effective immediately, to pursue the role of chief executive officer of Websense. Hodges' team will work directly with George Samenuk, chairman an...

'Security update MS06-001,' originally planned to be released on Tuesday, January 10, as part of its regular monthly release of security bulletins, has been released early. Testing 'for quality and aplication compatability' has been completed earlier than anticipated, said Microsoft.

Consumer customers who use Automatic Updates will receive the update automatically and do not need to take any additional actions. Consumers can also manually download and deploy the update by visiting Microsoft Update or Windows Update. Consumers can also get m...

McAfee has reached a settlement agreement with the U.S. Securities and Exchange Commission (SEC) resolving charges filed against the company in connection a formal investigation launched in 2002 in connection with its results in the year 2000 and prior. Under the ...

'Microsoft has been carefully monitoring the attempted exploitation of the WMF vulnerability since it became public last week,' the company said in a recent statement, 'through its own forensic capabilities and through partnerships within the industry and law enfo...

The Finnish-based antivirus company F-Secure is recommending that systems administrators block access to all WMF files at HTTP proxy and SMTP level, as the WMF vulnerability reported on Monday is confirmed as still applying to all the main versions of Windows: W...

The 'vacation ownership' division and subsidiary of Marriott International has reported that backup computer tapes containing data pertaining to approximately 206,000 associates, timeshare owners and timeshare customers are missing from the corporate office in Orlando, Florida.

'We have a number of sites that we have found with this exploit,' said Alex Eckelberry, CEO of Sunbelt Software, as a new exploit emerged yesterday in the wild, capable of affecting fully patched Windows XP SP2 systems. The vulnerability in the WMF graphics render...

About 20,000 systems were infected by a worm written by Anthony Scott Clark, 21, of Beaverton, OR, who pleaded guilty to launching DoS attacks against eBay and other companies in 2003. He faces as many as 10 years in prison and a $250,000 fine.

Astaro Corporation has announced that the company's Astaro Security Gateway Firewall has entered the second phase of the Common Criteria certification process. Common Criteria for IT Security Evaluation (CC), also known as ISO standard 15408, was developed by the ...

Imation Corp, a provider of removable data storage media, has announced it is finalizing the development of both HD DVD and Blu-ray optical recordable media, with plans to utilize its proprietary hard coat protective disc coating in the development of both formats.

Forum XWall Web Services Firewall Service-Oriented Architecture security solution integrates market-leading Web services security policy enforcement with CA's eTrust TransactionMinder for transactional identity management; CA's eTrust Antivirus for virus managemen...

Coraid has announced that Fiberlink Communications Corp., a leading innovator and trusted enterprise partner for secure mobile workforce solutions, has selected the Coraid 3U SATA-RAID EtherDrive Storage appliance to archive its stand-by offsite cold databases.

The recent detection of additional, severe security flaws in Internet Explorer is apparently helping drive record downloads of Opera 8.51, the latest version of Opera's award-winning Web browser - which, since its debut less than one week ago, has been downloaded ...

QuickSec Unified Anti-Virus is seamlessly integrated into QuickSec Unified, the only integrated OEM security platform on the market that enables networking equipment manufacturers to build complete unified security appliances that include SSL VPN, IPSec VPN, Firew...

GridApp Systems, a provider of database automation software and solutions, has appointed William Clifford and John Stevenson to its Board of Directors. The executives bring deep expertise in IT strategy and infrastructure management with more than 50 years combine...

SafeNet, setting the standard for information security, has announced that it was ranked Number 228 on the 2005 Deloitte Technology Fast 500, a ranking of the 500 fastest growing technology companies in North America. Rankings are based on percentage revenue growt...

'Dear Sir/Madam,' opens the latest e-mail atempting to wreak Sober-worm havoc across the Internet, 'We have logged your IP-address on more than 30 illegal Websites.' It is signed Steven Allison, Federal Bureau of Investigation-FBI...and it's in reality an in-the-wild worm.

LiveTime Software, a leading provider of Java 2 Enterprise Edition based service management software, has announced the general availability of the LiveTime Appliance, the industry's first service management appliance. Designed exclusively for 64 bit operation, th...

Imation, a worldwide leader in removable data storage media, laid out its competitive strengths across the four pillars of storage before financial analysts and investors in New York City. Operating income for the fourth quarter is targeted between $23 million and...

OAKDALE, a worldwide leader in removable data storage media, will feature a full range of its premium business data storage products at SC|05Imation's LT0 Ultrium 3 media was selected to be used as part of the on-site StorCloud SC|05 initiative to build a High P...

Tacit Networks, the leader in enterprise-wide remote office IT solutions, and Softricity, the leader in desktop virtualization and application management solutions, has announced that they have certified a joint solution that gives branch office users across the...

SafeNet has announced that it has signed a definitive agreement to acquire all equity interests of Eracom Technologies AG. Under the terms of the agreement, SafeNet will pay a cash consideration of approximately $25 million. This transaction is expected to be ac...

SurfControl has announced that John Dillon has been appointed to the role of chief marketing officer. As CMO, Dillon is responsible for SurfControl's global field marketing, corporate communications, product marketing and product management efforts. Dillon brings ...

eEye Digital Security has announced details for two new critical vulnerabilities related to Microsoft Windows. Both flaws involve metafile overflows and affect the Windows 2000 Operating System, which is currently found in a large percentage of business systems running Windows today.

SurfControl, a provider of enterprise threat protection solutions, has announced its membership in the Anti-Phishing Working Group.

'thawte in-a-box was developed in Flash to address the need for a light-weight, rapid integration mechanism which specifically focuses on the enrollment processes enabling end customers to purchase and renew our products,' said Ilse Baxter, Director of Business St...

Ubuntu has successfully gone through the stringent process whereby IBM ensures that DB2 Universal Database for Linux operates in the Ubuntu environment.

InterSystems Corporation has announced that Partners HealthCare System, has gone live with a new Enterprise Master Patient Index system built on InterSystems'CACHÉ post-relational database.

DataMirror's low-risk change data capture technology provides real-time data integration, data auditing and high availability software solutions for iSeries. DataMirror solutions for iSeries capture changes and perform transformations to move high volumes of dat...

Both Secunia and F-Secure have reported an exploit targeting a vulnerability in the XML-RPC for PHP 1.x system, which is common in many Wiki systems.

Enterprise management solutions provider BMC Software has announced that its most current release of BMC Marimba Desktop/Mobile Management and BMC Marimba Server Change Management product suites have been awarded Common Criteria Evaluation Assurance Level 3 (EAL3) certification.

After a successful trial, during which Black Hat found that it was indeed simple to integrate SecureDoc with its existing Rainbow tokens, the encryption solution was purchased. Black Hat is very pleased with the security benefits of combining two-factor authentica...

Realtimepublishers and Klocwork Inc., have announces the immediate availability of The Tips and Tricks Guide to Software Security Assurance. Written in an easy-to-read question and answer format, security expert Kevin Beaver addresses tools, techniques, and best ...

In the hope of opening the eyes to software vendors to not repeat these kinds of mistakes, security expert Cesar Cerrudo has published an advisory describing a mistake made by Microsoft on patch MS05- 018 where it failed to properly fix a vulnerability, necessitat...

Imation has released its new Swivel Pro Flash Drive featuring Imation's unique 'never lose' swivel cap design, a 50 percent increase in read speed, and a quick release lanyard.

SurfControl has announced that SurfControl Web Filter 5.0 has achieved OPSEC certification from Check Point Software Technologies.

CA and Sun have announced an expanded relationship under which CA will port Unicenter and BrightStor solutions to the Solaris 10 Operating System for x64 (x86, 64-bit) platforms.

Aperi, derived from the Latin word for 'to open' -- will take an open approach to build a common platform for managing all brands of storage systems, with community members contributing code and taking advantage of a common platform for building storage software applications.