Open Source Security

HijackThis Released as Open Source Software

Trend Micro has published the code on SourceForge.

Piwik Web Analytics Software Gets Security Update

The update addresses cross-site scripting and click-jacking vulnerabilities.

Google Wallet Hack Raises Concerns Over Mobile Payment Security

Following the disclosure of security vulnerabilities with Google Wallet on Android, Google disables prepaid cards and advises users to enable screen locks.

Free Malware Analysis Tool Released

The 'Malwr' tool is a front end for the Cuckoo malware analysis sandbox.

Joomla! Open Source CMS Gets Security Update

Version 2.5.0 fixes two medium priority XSS vulnerabilities and two low priority information disclosure flaws.

OpenSSL Update Patches DoS Security Flaw

Versions 0.9.8t and 1.0.0g patch a vulnerability that was introduced with the release of a previous security update on January 6.

Wireshark Updates Patch Several Security Flaws

Versions 1.4.11 and 1.6.5 of the open source network protocol analyzer were recently released.

OpenSSL Updates Patch Six Security Vulnerabilities

Versions 0.9.8s and 1.0.0f were recently released.

Apache Struts Gets Security Update

Version 2.3.1.1 of the open source web application framework was recently released.

Exploit of Wi-Fi Protected Setup Flaw Poses Risks for Consumers, Not Enterprises

Many home Wi-Fi networks are at risk thanks to an exploit released over the holidays, but enterprise organizations are generally unaffected by the vulnerability.

Denial of Service Vulnerability Found in Ruby

The flaw was discovered by security researchers Alexander Klink and Julian Waelde.

FreeBSD Releases Five Security Advisories

One of the flaws was being actively exploited in wild, according to FreeBSD security officer Colin Percival.

A Silver Bullet for Application Security?

Symantec teams up with universities on a research project to make code more secure.

MyBB Software Gets Security Update

Version 1.6.5 patches three security flaws.

Open Source FFmpeg Project Gets Security Updates

Versions 0.7.8 and 0.8.7 patch several vulnerabilities.

Centrify Updates Active Directory Integration Solution

Centrify Express 2012 seeks to ease the pain of IT professionals tasked with integrating Unix, Linux and Mac with Active Directory.

Joomla Open Source CMS Gets Security Updates

The updates patch a vulnerability that could be exploited to change a user's password.

Security Flaw Found in BIND

The vulnerability can cause the open source DNS software to crash unexpectedly.

Serendipity 1.6 Patches Security Flaw

The update addresses an XSS vulnerability.

PacketFence Open Source NAC Gets Security Update

Version 3.0.2 addresses two vulnerabilities that could have been exploited to conduct XSS attacks.

Piwik 1.6 Patches Several Security Flaws

Because the release is rated critical, all users are advised to upgrade as soon as possible.

WineHQ Hacked

The attackers downloaded all the login information of users of the Wine Application Database and the bug tracking system.

Debian 6.0 Gets Security Update

The update addresses vulnerabilities and bugs found in the previous versions.

Review: Kaspersky Adds Cloud, Smartphones to Its Updated Offering

The first major overhaul in four years of Kaspersky's business antivirus software, Kaspersky Business Space Security, is out.

Security Flaw Found in LibreOffice

The vulnerability could allow attackers to inject hostile code into vulnerable systems.