Security Strategy, Plan, Budget

Mozilla has addressed a notorious zero-day vulnerability discovered Wednesday that could have caused execution of malicious code if exploited. With the flaw, attackers could have modified Firefox source code. In its release notes for version 3.0.8, Mozilla identified the problem as an XSL parsing "root" XML tag remote memory corruption vulnerability, and lists the bug as "Resolved." — CAM

A new torrent of spam, disguised as a message from package carrier DHL, is making its way into inboxes.

The Internet Explorer 8 vulnerability demonstrated at the CanSecWest hacker conference on the beta version of the browser also exists in the final version.

As Heartland works to become compliant again with the PCI standard, Visa plans to hold off on issuing fines.

To avoid hacking and malicious alteration of the application, software companies are turning to new anti-tamper solutions that will protect the entire application, as well as maintain code integrity.

Strong security is all about reducing the attack surface available to hackers and malicious users.

The official release of Internet Explorer 8 is scheduled to be available at noon EST on Thursday. The new browser "offers leading-edge security features," including a cross-site scripting filter, clickjacking prevention, and per-site ActiveX, which enables users and administrators to manage where an ActiveX Control can run, Microsoft said. The download, in 25 languages, is at https://www.microsoft.com/ie8. — CAM

Security researchers have warned that Conficker worm's newest variant, which kills protective security processes, is set to activate on April 1.