The UltraTech Zone

In today's story of immense irony, we find a vendor taking time to bash another vendor for a security flaw, only to have diligent 3rd parties point out that the flaw exists for the bashing vendor as well. What a waste of time.  If folks would focus more on the issues they need to address, and less on showmanship and one-up-manship, they ...

It's been a while since we've had a massive worm outbreak, but the potential for such an occurrence has increased significantly over the weekend with word that a wormable exploit has been made available for the recent animated cursor vulnerability in Windows. Microsoft has issued several status updates over the past few days via the Microsoft ...

As if we needed another reason... A security researcher has found a way hackers can make PCs of unsuspecting Web surfers do their dirty work, without having to actually commandeer the systems. That's possible with a new security tool called Jikto. The tool is written in JavaScript and can make PCs of unknowing Web surfers hunt for flaws in Web ...

The folks at eEye Digital Security have put together a website that tracks various zero-day vulnerabilities, and offers analysis and remediation recommendations.  The site is called Zero-Day Tracker, and can be found at the following URL: http://research.eeye.com/html/alerts/zeroday/index.html Welcome to eEye Research Team's Zero-Day ...

The folks at eEye Digital Security have put together a website that tracks various zero-day vulnerabilities, and offers analysis and remediation recommendations. The site is called Zero-Day Tracker , and can be found at the following URL: http://research.eeye.com/html/alerts/zeroday/index.html...(read more)

One of the hardest concepts to emphasize concerning Information Security is that people and processes are more critical to your overall security posture than products are.   That is not to say that products are unimportant. Certainly, any deficiency in one of the three P's will necessitate compensation from the other two P's.  But ...

October 2006 is going to be a major month for Oracle.  First, the database and middleware powerhouse has made some significant changes to its patch management process. Secondly, it released its quarterly set of database and application patches on October 17th.  The full list of patches is available on Oracle's website, but interestingly ...