Google research team reveals three serious Mac OS flaws, after Apple fails to respond with fixes
News zero-day
5 Things That Are Freaking Out IT Security Pros This Halloween
Fred Touchette from AppRiver outlines the spookiest threats to businesses
Google Announces Project Zero To Hunt Bugs Across The Net
The project will employ security experts to search for ‘zero-day’ exploits in popular software
Microsoft Patches Windows XP With IE Update
Microsoft opts to rescue Windows XP users with an emergency patch for Internet Explorer
‘Heartbleed’ OpenSSL Bug Left HTTPS Servers Vulnerable For Two Years
Exploitation of the OpenSSL bug, introduced in 2012, leaves no trace - meaning organisations may already have had their encryption keys stolen
Dark Market Zero-Days ‘Selling Regularly For $50k-$100k’
Symantec researchers tell TechWeek that dark market crooks are getting big bucks from selling zero-days, despite the rise of legitimate bug bounties
Attackers Hit Microsoft Word Through Unpatched Flaw
A fresh attack on Microsoft Word uses an unpatched flaw to bypass protections and install backdoors on victims' systems
FireEye Discovers Flash Exploit Used To Target Non-Profits
‘Operation Greedy Wonk’ has a special interest in US organisations dealing with foreign policy, defence and socio-cultural issues
Fresh Microsoft Windows XP Flaw Exploited In Targeted Attacks
Zero-day exploit combines attack on patched Adobe vulnerabilities, just months before Microsoft kills support for Windows XP
Microsoft Fixes Internet Explorer Zero-Day Flaw
Microsoft's Patch Tuesday security update fixes a zero-day flaw with its IE browser, as well as other vulnerabilities
Microsoft Windows Zero-Day Exploited In Pakistan Attacks
Attacks linked to strikes on Pakistani government bodies
Internet Explorer Zero-Day Exploits Hit More Governments, Financial Bodies
Experts were right - IE zero-day attacks are escalating
Internet Explorer Zero-Day Exploit Code ‘Widely Available’
IE flaw "about to become as severe as any browser issue can be"
Black Hat 2013 To Focus On Mobile Security, Cryptography
The upcoming Black Hat conference will include the disclosure of 35 zero-day flaws across a number of sectors and the release of 98 security tools
Google Cuts Down Zero-Day Disclosure Period To 7 Days
If the company responsible for the software doesn’t fix zero-day vulnerabilities in seven days, Google will spread the word
US Labour Website Compromise Spreads Malware
Malware planted on the US Department of Labour's website attacked victims' systems using a zero-day bug in Internet Explorer 8
Malwarebytes Revamps Processes After Update Snafu
Malwarebytes has taken steps to ensure that its problematic update last week will not happen again
Pwn2Own Hackers Down Browsers, Java, Adobe Plug-ins
The annual hacking contest in Canada has successfully compromised Java, Adobe plug-ins, as well as IE10, Firefox and Chrome
Yet Another Java Flaw Exploited In Attacks
FireEye has discovered an unpatched Java bug that is being used to actively attack systems
Adobe To Patch New Zero-Day Code Flaws
Adobe is working on patches for critical vulnerabilities - currently being exploited on Reader and Acrobat
UAE Government Accused Of Using Java Flaw To Spy On Activist
UAE authorities are behind the spyware campaign against activists, alleges Bahrain Watch
Yet Another Java Zero-Day Exploited In The Wild
Another year, another Java zero-day
Microsoft’s Internet Explorer Zero-Day Fix Broken ‘With Ease’
Seems Microsoft's fix is not much of a solution at all
Microsoft Rushes Fix For Internet Explorer Vulnerability
Microsoft has rushed out a tool to repair a zero-day vulnerability in older versions of Internet Explorer
Poll: Do You Love Or Loathe Zero-Day Exploit Merchants?
Exploit sellers are dividing the security industry, but which side do you fall on? Let us know in this poll
Cisco Concocting Zero-Day Malware Catchers
One of the big boys looks to catch up with younger innovators in the security market
Microsoft Could Have Known About IE Security Flaw In Advance
TippingPoint ZDI may have tipped Microsoft off to IE security hole two months ago
Microsoft Patches Browser Hole
Microsoft has released a fix for an Internet Explorer security vulnerability that is being actively exploited by attackers
Microsoft Admits Attacks Hit IE Browser Zero-Day Flaw
Microsoft has said it is investigating a previously unknown Internet Explorer security flaw that attackers are using to infect Windows systems, but has not set a timetable for delivering a fix
Words Of War And Weakness: The Zero-Day Exploit Market
Feature: Exploit sellers arm governments and businesses, but are they harming security for everyone else? TechWeekEurope explores this controversial market