Oracle

(get it in RSS or Atom)

SSCC 130 - Botnets, banking, breaches, patching and the Mavericks controversy [PODCAST]

by Paul Ducklin on January 14, 2014 | 5 Comments

What's the best way to deal with botnets? Should you use your bank's mobile app? Why all these data breaches? What about Patch Tuesday? Do you really *have* to update your Mac to Mavericks?

Listen as Chet and Duck dissect and explore the week's security stories...

Patch Tuesday - get ready for the January 2014 Security Trifecta!

by Paul Ducklin on January 13, 2014 | 7 Comments

In January 2014, Patch Tuesday coincides for Oracle, Adobe and Microsoft.

Here's what you'll be up against in the opening fixture of the 2014 Patching Season...

Sophos Techknow - Understanding Botnets [PODCAST]

by Paul Ducklin on January 9, 2014 | Leave a comment

Botnets, short for "robot networks", are more than just malware: they're the money making machinery of modern cybercriminals.

Paul Ducklin and James Wyke help you to understand the What, How and Why of this troublesome topic...

SSCC 120 - Vulnerabilities, backdoors, crypto done right, and crypto done wrong [PODCAST]

by Paul Ducklin on October 22, 2013 | 1 Comment

Ah, the irony! Good crypto from the bad guys, and bad crypto from the good guys...

Chet and Duck turn the latest security news into an insightful, amusing and educational discussion in the latest episode of their two-weekly podcast.

Oracle releases 127 security fixes, 51 for Java alone

by Chester Wisniewski on October 16, 2013 | 7 Comments

Oracle has released its quarterly software update fixing more than 100 security vulnerabilities in its products. Java is at risk from more than 50 flaws, so it is time to update immediately if you still use it.

Sophos Techknow - Understanding Vulnerabilities [PODCAST]

by Paul Ducklin on September 18, 2013 | Leave a comment

Make sense of vulnerability jargon by listening to this 15 minute podcast...

With recent updates from Microsoft (three times), Adobe, Oracle, Apple and Firefox, the timing could scarcely be better.

Oracle Java fails at security in new and creative ways

by Chester Wisniewski on September 17, 2013 | 20 Comments

Oracle is about to release a new "feature" in its Java Runtime Environment (JRE) that allows enterprises (or anyone else) to turn off security features for backward compatibility.

Monday review - the hot 18 stories of the week

by Anna Brading on July 22, 2013 | Leave a comment

Get yourself up to date with everything we've written in the last seven days - it's weekly roundup time.

Oracle ships giant raft of patches - but none of them for Java

by Paul Ducklin on July 17, 2013 | 1 Comment

Oracle's latest Patch Tuesday has come and gone, with the database-and-more behmoth putting out patches for 89 vulnerabilities.

This is the last time that Java and the rest of Oracle's product set will get scheduled updates separately...

Monday review - the hot 20 stories of the week

by Anna Brading on June 24, 2013 | Leave a comment

Missed anything last week? Don't worry, here's a little roundup of everything we wrote.

LinkedIn unhacked, Microsoft bounties, Java in your browser - 60 Sec Security [VIDEO]

by Paul Ducklin on June 22, 2013 | Leave a comment

It's that time again - time for this week's 60 Second Security, our fun-but serious "security news with a conscience" video series.

Give it a spin...it'll only take a minute.

Oracle and Apple update Java - zapping browser Java would already have blocked 92.5% of the risk

by Paul Ducklin on June 20, 2013 | 15 Comments

As promised last week, Oracle shipped a Critical Patch Update for Java on Tuesday 18 June 2013.

Apple, which offers its own builds of Java, updated at the same time.

Paul Ducklin takes a look...

Monday review - the hot 16 stories of the week

by Anna Brading on June 17, 2013 | Leave a comment

Get yourself up to date with everything we've written in the last seven days - it's weekly roundup time.

Get ready! Oracle to fix 40 holes in Java on Tuesday, 18 June 2013

by Paul Ducklin on June 15, 2013 | 14 Comments

There's a Java update coming next Tuesday, 18 June 2013, and you might as well get ready for it now if you haven't already.

Oracle has fixed 40 holes, all but three of them remotely exploitable.

Botnet smackdown, Oracle on Java, Passwords you can eat - 60 Sec Security [VIDEO]

by Paul Ducklin on June 8, 2013 | 1 Comment

Here's our latest 60 Second Security video.

From botnet takedowns to authentication tokens you swallow...here's the latest security news in a easily digestible format!

Not good enough, Oracle - promises to secure Java are too little, too late

by John Hawes on June 3, 2013 | 6 Comments

In a big fat blog post, Oracle has promised to work harder to make Java more secure. But given the flood of high-profile, heavily-exploited vulnerabilities that have bobbed to the surface, can Oracle save this piece of software from drowning in bad vibes?

Yet another unpatched security hole found in Java

by Graham Cluley on April 23, 2013 | 7 Comments

Just last week you were congratulating yourself for patching your computer against a Java security hole.

Now another zero-day unpatched vulnerability has been found in Oracle's widely used software.

Oracle and Apple ship critical Java updates - get yours today!

by Paul Ducklin on April 17, 2013 | 12 Comments

The security-beleaguered Java ecosystem usually gets updates just once every four months, in February, June and October.

But this year, Oracle has adapted that schedule a number of times, and this is one of them...

PWN2OWN results Day Two - Adobe Reader and Flash owned, Java felled yet again

by Paul Ducklin on March 8, 2013 | 6 Comments

PWN2OWN 2013 finished off today.

A second scheduled attack on IE 10 didn't happen, so IE 10 didn't get owned again, but Flash and Reader fell once each, and Java was exploited for the fourth time in two days...