Articles by Sean Michael Kerner

Flash Player Sandbox Comes to Firefox

Adobe debuts new beta Flash Player with security sandbox for Firefox. Will it make the web more secure?

Glass Box: The Next Phase of Web Application Security Testing?

IBM's latest AppScan release combines static and dynamic testing methods.

Sourcefire FireAMP Brings Big Data Analytics to Enterprise Security

Large data sets offer new ways to track malware across a network.

Pwn2Own 2012 Gets Serious About Security Vulnerabilities

The HP-sponsored hacking challenge revises its rules in an effort to expose even more vulnerabilities.

U.S. DOJ: The Cloud Provides No Legal Cover for Criminals

Crooks and their data cannot hide from the long arm of the law, even in the cloud.

Oracle Patches 78 Security Flaws

The first Critical Patch Update of 2012 tackles a long list of issues, but only two patches apply to Oracle's namesake database.

RSA Chief: Conventional Security Defenses Are Inadequate

Speaking from recent experience, RSA's Art Coviello says the question now is not whether your defenses will be breached -- it's whether you are equipped to respond when it happens.

Microsoft Patches SSL BEAST

In the first Patch Tuesday of 2012, Microsoft fixes an old issue and warns about a new security bypass risk.

Protecting Against SQL Injection Attacks with Oracle Database Firewall

New release gains support for MySQL, helps shield enterprise databases from attack.

The Future of Firefox Security

New efforts in 2012 could make the open source browser even more secure.

Exploit of Wi-Fi Protected Setup Flaw Poses Risks for Consumers, Not Enterprises

Many home Wi-Fi networks are at risk thanks to an exploit released over the holidays, but enterprise organizations are generally unaffected by the vulnerability.

A Silver Bullet for Application Security?

Symantec teams up with universities on a research project to make code more secure.

Microsoft Patches Duqu, Leaves BEAST

Final Patch Tuesday release of 2011 tackles 13 bulletins, three rated as critical.

Sourcefire Debuts Next Gen Firewall System

Next Generation Firewall market moves forward with new release.

Finding Attack Patterns at the Digital Crime Scene

Using scientific methods, Symantec researchers aim to profile the IT threat landscape.

Sourcefire Immunizes 2 Million PCs with Immunet

Leveraging open source ClamAV and the cloud, Sourcefire layers its antivirus tech on top of other vendors solutions.

Apache Server Hit by Reverse Proxy

Dangerous flaw puts internal Web servers at risk, but there is a fix in the works.

Public Cloud Keys Too Easy to Find

If you put the keys to your cloud infrastructure in plain sight, don't be surprised if you get hacked.

Chrome Gets 2nd Critical Fix in a Week

In a rare move, Google is updating Chrome for a single security fix.

Microsoft Issues Patch for Font Flaw, Not Duqu

November's Patch Tuesday update delivers four security advisories including a fix for a font issue that is similar to the one that enables the Duqu zero day attack.

Microsoft Partly to Blame for Spread of Duqu

The TrueType font parsing engine is to blame but Microsoft views the risk as low ... for now.

Secunia Jumps Into Vulnerability Disclosure Market

Security research firm provides another option for researchers looking to co-ordinate vulnerability disclosure.

Google Sanitizes Chrome 15 for Memory Flaws

In one of its largest security payouts ever, Google pays over $26,000 in bounties to security researchers.

Penetration Testing Shows Unlikely Vulnerabilities

Enterprises need to dig deeper than just automated scanning to find the really interesting and dangerous cyber security flaws.

Taiwan Tops List for Attack Traffic

New Akamai report points the finger at Asia-Pacific for most attack traffic.