PCMag.com Security Coverage

Microsoft's Big Patch Tuesday Begins

In one of the larger Patch Tuesdays ever, Microsoft issued 13 advisories covering 26 vulnerabilities in Windows and Office. Updates are available through the usual channels.

American Express: Strong Credit, Weak Passwords

American Express's policies for passwords for their customer logins require weak passwords. Why?

When Does Hacking Become Cyber Warfare?

There's plenty of evidence to assume that at least some of the recent hacking attempts on U.S. companies originated from China. But are they coordinated? And if so, do we return fire?

McAfee Total Protection 2010

With a totally new user interface and tough new technology, the latest McAfee suite is well equipped to protect your computer.

China Shuts Down Hacker Training Web Site

China has closed what it claims to be the largest hacker training website in the country and arrested three of its members, domestic media reported on Monday.

Researcher Details How 'JIT Spray' Exploits Windows

Dion Blazakis has provided a formal paper on the techniques used to bypass ASLR (Address Space Layout Randomization) and DEP (Data Execution Prevention) in Windows.

Unlucky 13 Microsoft Patches Due Next Week

Microsoft has released the company's advance notification for the February, 2010 Patch Tuesday, and it's a doozy.

New 'JIT Spray' Bypasses Best Windows Defenses

New attack techniques have proven capable of penetrating the state of the art in Windows systemic defenses, specifically DEP (Data Execution Prevention) and ASLR (Address Space Layout Randomization). A demonstration was made Thursday at the BlackHat conference in Washington D.C. and a proof of concept has been released.

Google, NSA May Team to Investigate Attacks

Internet search firm Google is finalizing a deal that would let the National Security Agency help it investigate a corporate espionage attack that may have originated in China, the Washington Post reported on Thursday.

Internet Explorer Bug Can Disclose Local Files

Microsoft has disclosed a vulnerability in Internet Explorer that can allow an attacker to cause local files on the system to be displayed as HTML.