While speaking at the RSA security conference in San Francisco, Microsoft Corporate Vice President for Trustworthy Computing Scott Charney told attendees that the technology industry needs to change in the way its approaches security issues.
The speech comes at the heels of Microsoft's recent attempt to shut down the Waledac botnet through the court system. Microsoft has also spent millions to combat hackers and their devious programs slipping through minuscule OS and browser cracks.
Another bug was found in Internet Explorer. Oh yay.
The Microsoft Security Response Center Friday indicating that users of Internet Explorer 6, 7 and 8 are vulnerable to malware through an un-patched bug in VBScript. The exploit was originally uncovered by Polish security analyst Maurycy Prodeus of iSEC Security Research. He said that the flaw only resides within Windows XP SP3--all other versions of Windows are not affected by the vulnerability.
According to , it's possible to invoke winhlp32.exe from Internet Explorer which in turn might lead to remote code execution. Attackers could execute malicious code when their fake web pages convince visitors to press the F1 key. The good news is that Microsoft has not received reports on attackers actually using this exploit.
Despite recent privacy issues, there's another blatant flaw in Google's new Buzz service.
Google has come under fire since the debut of its «Buzz» service last week. The company launched the «Twitter-killer» with the intent of providing a social networking experience, but instead exposed the email addresses and physical locations of its participants.