Apple defuses Safari “Carpet Bomb”

Friday, June 20th, 2008

Apple has closed four security holes in the Windows version of its Safari browser with the release of version 3.1.2. The fixes include the browser's "Carpet Bomb" behaviour of placing downloaded files on the desktop by default and without asking the user's permission. In association with with Internet Explorer – ...

Desktop virtualisation gets military-grade security

Friday, June 20th, 2008

Tresys Technology has released a desktop virtualisation platform with a difference - it is designed from the ground up for organisations needing tight security, including military bodies. Tresys, which has a track record of providing military systems, said its VM Fortress can cut costs for organisations which would like to implement ...

The Extended HTML Form attack revisited

Wednesday, June 18th, 2008

"HTML forms (i.e. <form>) are one of the features in HTTP that allows users to send data to HTTP servers. An often overlooked feature is that due to the nature of HTTP, the web browser has no way of identifying between an HTTP server and one that is not an ...

YouTube Addicts Beware

Monday, June 16th, 2008

From Web sites related to online banking, credit unions, financial departments, and social networking sites, phishers are chucking their rods into relatively new territory: video streaming sites. Trend Micro Content Security team learned about this latest (and very interesting) phishing technique a few days back. Several phishing domains (see Figure 1) ...

Details emerge of Safari “carpet bomb” flaw

Monday, June 16th, 2008

The vulnerability known as the Safari carpet bomb has still not been fixed, despite Microsoft releasing a security update for Internet Explorer last Tuesday evening. The consensus is that Microsoft's browser is the main cause of the problem, which can create a security hole in combination with Apple's Safari. When Internet ...