Stories about: X-Force

Microsoft this week released six security bulletins that patched nine vulnerabilities in Windows, Internet Explorer (IE), Microsoft Word, Outlook Express and SharePoint. But for the second time in two months, it yanked an update at the last minute.

IBM has reported an increase in malware volume and sophistication as part of its security statistics report for the first half of the year.

Microsoft has issued four security bulletins that patched just four vulnerabilities in Windows, Visual Studio and the MSN and Windows Live Messenger software, setting a 2007 record for the fewest flaws fixed in a monthly scheduled update.

A self-proclaimed hacker crew calling itself "clpwn" -- as in "clown" -- that's been bragging about how it's defaced sites such as CNN and Playboy Casino isn't doing anything earth-shattering, said a security researcher Wednesday. But the group is a reminder of how things once were, when true hackers plied their trade for notoriety rather than profit.

The man who launched both of the security industry's major bug bounty programs Thursday defended the idea of paying for vulnerabilities, but also said he has responded to critics by putting a tighter lid on bug details to make sure they don't fall into the wrong hands.

Cisco this week has identified vulnerabilities in its Unified Communications Manager -- formerly CallManager -- IP-telephony software that could cause denial of service or allow the execution of arbitrary code.

Microsoft Tuesday issued six security updates for Windows, Office and the .Net Framework, patching a total of 11 vulnerabilities -- five of them rated critical.

At IBM Internet Security System's, the company's primary security research organization is called X-Force. Kris Lamb, director of X-Force, says his group is charged with knowing where potential threats will arise and deliver product, services and education to customers about how to stay ahead of the risk. Recently Lamb discussed with Network World Senior Editor Denise Dubie what he sees as the most critical challenges and opportunities facing enterprise IT security managers today.

Exploits appeared within hours for two of the bugs that Microsoft fixed Tuesday.

As Microsoft Tuesday patched 15 vulnerabilities in its operating system, browser, and other software, security experts argued over which should be fixed first.

The recent spate of malware attacks propagating throughout the user base of the Skype Internet calling system illustrates a broader trend toward cyber-criminals moving to take advantage of VOIP platforms as they become increasingly popular.