Google will pay open source vulnerability finders
Google is going to start paying the security community for discovering open source software vulnerabilities and will pay bug bounty rewards up to $3,133.7
Microsoft pays out $28K to IE bug hunters in its first-ever bounty program
Microsoft paid more than $28,000 in rewards to researchers for its first bug bounty program, a one-month special it ran during the summer for the preview version of Internet Explorer 11.
Update for Internet Explorer Flash Player
Microsoft has released an update for Internet Explorer Flash Player for Windows 8/8.1 and Server 2008/R2
70 percent of business users vulnerable to latest Internet Explorer Zero-Day
According to Microsoft, a zero day flaw in Internet Explorer (IE), which impacts all versions of the browser, is being actively exploited in the wild. Reports of exploitation, according to Microsoft, seem to have criminals focused on IE versions 8 and 9.
Latest iOS 7 bug allows calls to be made from a locked iPhone
An iOS 7 user has discovered a worrying security flaw within the software, which enables calls to be made while the iPhone is locked
Microsoft issues fix to stop active attacks exploiting serious IE bug
Temporary "fix it" plugs remote execution hole being used in targeted attacks.
Microsoft Security Updates 10/09/13 #2
Microsoft has published the second round of today's security updates:
Microsoft Security Updates 10/09/13
Here a roundup of today's Microsoft security updates:
Microsoft Security Bulletin Advance Notification for September 2013
Microsoft published the Security Bulletin Advance Notification for September 2013
New York Times and Twitter DNS registrar hacked by Syrian Electronic Army
The domain name servers of the New York Times, Twitter and Huffington Post UK have been hacked by the Syrian Electronic Army
Microsoft Security Bulletin Re-Releases for August 27, 2013
Microsoft published the Microsoft Security Bulletin Re-Releases for August 27, 2013
Microsoft will craft XP patches after April '14, but not for you
Just because Microsoft doesn't plan on giving Windows XP patches to the public after April 8, 2014, doesn't mean it's going to stop making those patches.
Hackers may cash in when XP is retired
Hackers may bank their Windows XP zero-day exploits and cash them in after Microsoft stops patching the aged operating system next April.
Microsoft Security Bulletin Re-Releases for August 19, 2013
Microsoft published the Security Bulletin Re-Releases for August 19, 2013
XP Z: Microsoft scares Windows XP users straight with undead bug warning
Microsoft warned Windows XP customers that they face never-patched, never-dead "zero-day" vulnerabilities if they don't dump the 12-year-old operating system before its April 2014 retirement.
Microsoft Security Bulletin Summary for August 2013
Microsoft published the Security Bulletin Summary for August 2013
Microsoft Security Bulletin Re-Releases for August 13, 2013
Microsoft published the Security Bulletin Re-Releases for August 13, 2013
Bug hunters spot security flaw in Microsoft Yammer open authorisation procedures
V3 reports that vulnerability laboratory researchers discovered a flaw in Microsoft Yammer open authorisation procedures
Targeted attacks exploit now-patched Windows bug revealed by Google engineer
Microsoft this week said a pair of vulnerabilities, including one publicly disclosed by a Google security engineer in May, had been exploited in the wild before they were patched on Tuesday.
Microsoft Security Updates 07/09/13
Microsoft just released 40 updates
