Network Security, Patch/Configuration Management, Vulnerability Management

Microsoft patch may not work

March 12, 2009

By Chuck Miller

One of the patches issued by Microsoft this week does not fix one of the vulnerabilities it was meant to, according to PandaLabs. Bulletin MS09-008 was supposed to patch four flaws, but one of them -- related to Web Proxy Autodiscovery Protocol (WPAD) registration -- was not resolved, Panda said in a news release. Even with the patch, the bug is still active and can be used to launch man-in-the-middle attacks on Windows DNS servers, allowing an attacker to possibly access sensitive information, Panda said. — CAM

An In-Depth Guide to Network Security

Get essential knowledge and practical strategies to fortify your network security.

Chuck Miller

Related

Modern Esports Venue with Neon Lighting and Screens for International Gaming Competitions

Network Security

Leveling-up against DDoS attacks in the Esports industry

Gary SockriderDecember 5, 2024

Attackers know there’s big money in Esports – and that’s why the industry has to step-up its security against DDoS attacks.

Magnifying glass found the Russia map among computer binary code

Network Security

Meta: Russia tops disinformation ops, followed by Iran and China

Shaun NicholsDecember 4, 2024

Russia still tops the world in disinformation campaigns, even as other countries are stepping up their own operations.

Hacking the security. The threat of information leakage and the security of the system. Red open padlock among closed black ones. Close the gap, fix the problem.

Network Security

Without validation, exposure management is just a half measure

Sponsored by CymulateDecember 4, 2024

As CTEM practices become increasingly widespread, security vendors have rushed to position themselves as exposure management providers — but a closer examination reveals that many of them have adopted a partial approach.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Related Terms

ACK Piggybacking Cache Poisoning Circuit Switched Network Collision Crossover Cable Demilitarized Zone (DMZ)Distance Vector Domain Domain Name System (DNS)Dynamic Routing Protocol