Security News

Microsoft Issues Patches For Severe Flaws, Including Office Zero-Day & DNS Attack
2017-10-11 02:06

As part of its "October Patch Tuesday," Microsoft has today released a large batch of security updates to patch a total of 62 vulnerabilities in its products, including a severe MS office zero-day...

Bugs in Windows DNS client open millions of users to attack
2017-10-11 01:00

In this month’s Patch Tuesday, Microsoft has included fixes for multiple critical memory corruption vulnerabilities in the Windows DNS client, which could be exploited by attackers to gain access...

Microsoft Patches Critical Windows DNS Client Vulnerabilities
2017-10-10 18:00

Microsoft patched three memory corruption vulnerabilities in the Windows DNS client that could be abused by a man-in-the-middle attacker to run arbitrary code.

Week in review: Email tracking, DNS exfiltration, and secure coding in Java
2017-10-09 01:10

Here’s an overview of some of last week’s most interesting news and articles: Leaving employees to manage their own password security is a mistake Despite the clear and present danger that weak...

Widely used DNS forwarder and DHCP server Dnsmasq riddled with flaws
2017-10-03 16:53

Google researchers have discovered seven serious vulnerabilities in Dnsmasq, a lightweight, widely used DNS forwarder and DHCP server for small computer networks. Dnsmasq is mainly written and...

Most companies are unprepared for DNS attacks
2017-10-03 13:30

DNS security is often overlooked when it comes to cybersecurity strategy, with most companies inadequately prepared to defend against DNS attacks. Dimensional Research surveyed over 1,000 security...

Many Companies Unprepared for DNS Attacks: Survey
2017-10-03 10:33

Many companies are not prepared to deal with DNS attacks, and a quarter of the ones that have already been hit reported significant losses, according to a survey conducted by Dimensional Research...

Protecting networks from DNS exfiltration
2017-10-02 14:00

Everyone around the globe has heard about the colossal Equifax breach last month. Its implications haven’t yet been fully calculated except now that the CEO has resigned from his job, we know it’s...

ICANN Postpones Scheduled DNS Crypto Key Rollover
2017-09-29 15:00

ICANN, the overseer of the Internet’s namespace, announced this week that it was postponing a scheduled change to the cryptographic key that protects the Domain Name System.

Authentication Bypass Flaw Patched in BIND, Knot DNS (Security Week)
2017-06-30 09:39

The developers of the BIND and Knot DNS software have released updates to patch a potentially serious vulnerability that can be exploited to bypass authentication mechanisms. read more