Feeds

Apple updates to defend against OS, app and QuickTime flaws

Take that, Windows

Combat fraud and increase customer satisfaction

Apple last week advised users to upgrade following the discovery that various versions of Mac OS X, Safari web browser, Apple Mail, and other products are affected by multiple security vulnerabilities. Users of Apple Mac OS X version 10.3.9 (Panther) and version 10.4.5 (Tiger) are confirmed to be at risk.

Older versions of Mac OS X might also be exposed to various security flaws, the most serious of which creates a means for hackers to load malicious code onto vulnerable computers. Although the flaws are not the current subject of hacking attacks, it still makes sense to upgrade.

Users who haven't had their OS software updated automatically through the Apple Update service are advised to apply security patches, as explained in an Apple's technical advisory here. Security clearing house US CERT further advises Safari fans to disable the "Open 'safe' files after downloading" option on their browser as an added precaution.

QuickTime aficionados - whether they use the popular media viewer software on Mac or Windows platforms - also needs to upgrade, again because of security flaws. Apple QuickTime 7.1 corrects several image and media file handling vulnerabilities that create a means for hackers to run hostile code on vulnerable systems.

Apple users are covered by Apple's Update service, but Windows users will need to apply a separate update, as explained in a US CERT advisory here and (in more detail) by Secunia here. ®

SANS - Survey on application security programs

Whitepapers

Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.