Security Corner:

Firefox


March 6, 2009  1:35 AM

Firefox 3.0.7 Released, Addresses Multiple Vulnerabilities



Posted by: Ken Harthun
Critical update, Denial of Service, Exploits, Firefox, insecure, Security, Vulnerabilities

Mozilla Foundation released Firefox 3.0.7 today to address multiple vulnerabilities. According to the Security Advisories, the vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, obtain sensitive information, or spoof the location bar. Mozilla says...

February 14, 2009  3:54 PM

There is no "Super Secure" Browser



Posted by: Ken Harthun
Browsers, Firefox, Internet Explorer, Malware, Microsoft Windows, Opera, Secure Computing, Vulnerabilities, Zero-day vulnerability

Security is a complicated process, leaving many to desire a magic bullet. Unfortunately, there isn't one. No matter how much security developers build into software, the behavior of the person seated in the chair will always be the weak link. Truth be told, all of the major browsers are safer than...


December 21, 2008  11:19 PM

No More Security Updates for Firefox 2



Posted by: Ken Harthun
Anti-malware, Browsers, Firefox, Internet Explorer, Opinion, Phishing, Security, Vulnerabilities

Security Fix reports that on December 16, Mozilla released its final update to Firefox 2, and plans no...


December 12, 2008  9:44 PM

Internet Explorer Targeted by Zero-day Attack



Posted by: Ken Harthun
Critical update, Firefox, Internet Explorer, Malware, Opinion, Remote Code Execution, Security, Security bulletin, Vulnerabilities, Zero-day exploit, Zero-day vulnerability

Even though Microsoft released the biggest batch of patches ever on Tuesday--28 flaws affecting Windows, Office, Internet Explorer, Visual Basic Active Controls and Windows Media Player, 23 of them rated “critical”--there's no fix for a zero-day XML parser vulnerability that surfaced the same...


October 30, 2008  3:13 PM

Clickjacking Attacks Are Ocurring in the Wild



Posted by: Ken Harthun
Browsers, Clickjacking, Firefox, Internet Explorer, Malware, Security

Less than a month after the clickjacking exploit came to light, sporadic reports of users falling victim to the attack are beginning to surface.


October 27, 2008  9:29 PM

Software for Secure Computing: Firefox & NoScript



Posted by: Ken Harthun
Browsers, Clickjacking, Firefox, Internet Explorer, Microsoft Windows, Secure Computing, Security

Everyone agrees that it just isn't safe out there on the Wild, Wild, Web and while Microsoft has made huge strides in securing Internet Explorer, the fact that IE continues to use ActiveX scripting technology makes it the least secure browser. I often recommend that people not use IE unless they...


September 28, 2008  4:39 PM

Clickjacking: The Latest Criminal Tactic



Posted by: Ken Harthun
Browsers, Clickjacking, Cybercrime, Firefox, Internet Explorer, Phishing, Security, Vulnerabilities

According to US-CERT's latest alert, "Multiple Web Browsers Affected by Clickjacking," there's a new cross-browser exploit technique called "Clickjacking." One


August 8, 2008  3:44 AM

Software for Secure Computing: Secure Browsers



Posted by: Ken Harthun
Browsers, Firefox, Internet Explorer, Microsoft Windows, Secure Computing, Security

Two of the biggest mistakes Microsoft ever made were tying Internet Explorer into the Windows OS and ActiveX. Exploits took advantage of both and some of the nastiest malware ever written entered millions of PCs through these...