Symantec: Vista Fairly Secure but Still Full of Holes
303691
There are still many ways attackers can exploit Windows Vista and leave users open to threats, according to a Symantec study.
254458
Microsoft is taking security risks with its forthcoming Vista operating system, says software firm McAfee.
640060
"MelindaGates" hack allows users to activate Vista without alerting Microsoft.
268137
What was not supposed to happen in Windows Vista apparently has: Despite a layer of protection that was supposed to prevent against processes elevating their own privileges, Microsoft now says someone found a way to do it.
39873
With all the talk about Microsoft's stepped up efforts to curb piracy through Vista's new activation methods, it may all be for naught after some crafty hackers figured out a way to crack the Vista Activation Server.
667495
SEATTLE/SAN FRANCISCO  - Computer hackers are off  and running trying to find vulnerabilities in Microsoft Corp.'s  new Windows Vista operating system, putting to test the  software maker's claim that it is the most secure Windows  program ever.
145780
Symantec&#39;s Security Response has issued a warning about three new &quot;serious&quot; vulnerabilities discovered in the Windows operating system.
646349
A status report released yesterday by the director of Microsoft's Security Technology Unit contends that, over the first six months of its shelf life, Windows Vista was proven more secure than its competitors during their first six months, and more secure than Windows XP after its debut, by virtue of the sole fact that fewer Vista vulnerabilities were entered into the National Vulnerability Database.
634090
Much ado has been made about whether or not Linux is truly more secure than Windows. The results were not unexpected. Even by Microsoft&#39;s subjective and flawed standards, fully 38% of the most recent patches address flaws that Microsoft ranks as Critical.
62609
With viruses, worms, spyware, spam and phishing, running a computer this year -- especially one with Windows -- has often been a colossal headache. -Rob Pegoraro
515247
Symantec has released a patch for its Veritas NetBackup software, saying it had discovered a buffer overflow vulnerability in the application. The flaw exists in the web programming language PHP used within NetBackup.
123278
But some progress has been made Review Microsoft has gone out on a limb to promote Vista not merely as "the most secure version of Windows ever" (every recent version is marketed with that tired slogan), but for the first time as an adequately secure version of Windows. "We've got the message and we've done our homework", the company says. So let's see if the reality lives up to the marketing hype.â¦
58499
(InfoWorld) - When Windows Vista ships next year, customers might have a tougher time getting their security software to work properly, executives from Symantec said Wednesday. At issue are two new features being introduced with Vista: an enhanced Windows Security Center as well as a feature in the 64-bit version of Vista called PatchGuard. Microsoft says it is adding these features to lock down the operating system, but Symantec believes that they will be harmful to customers by making it harder for them to use third-party software. "There's no question that they're leveraging a monopolistic position to limit customer choice," said Chris Paden a Symantec spokesman. While Symantec executives did accuse Microsoft of being more difficult to work with on Vista than with previous operating system introductions, they stopped short of accusing Microsoft of antitrust violations. "It's not anti-competitive behavior, because Vista hasn't even hit the market yet, " Paden said. Security vendors like Symantec are in a state of heightened sensitivity these days as they've begun to compete with Microsoft head-on, and the specter of further antitrust actions looms over Microsoft's every move in the security space. Last week the European Union's spokesman on competition, Jonathan Todd, warned that theÂ market could be threatenedÂ if Microsoft doesn't allow security vendors a fair chance of competing. Symantec and other security vendors dislike PatchGuard because it prevents them from accessing the Windows kernel. They say it will stop them from delivering important features like Symantec's "anti-tampering" technology, which prevents malicious programs from modifying Symantec's own software. PatchGuard will also make it more difficult for security vendors to protect against malicious software that takes advantage of kernel-level bugs, said Eric Sites, vice president of research and development with Sunbelt Software. "There are a lot of new exploits coming out that exploit kernel-level drivers, " he said. "If we're able to get into the kernel, we can watch for things like that, but with what Microsoft is doing we can't do that." Microsoft declined to be interviewed for this article, but in an interview with IDG News last week a Microsoft executive said that PatchGuard was simply an effort toÂ prevent the kernel from being misused. "We think that there's a significant amount of confusion around... certain security features in the product that we think raise the foundation," said Stephen Toulouse a senior product manager in the Security Technology Unit. "What we're doing is we're walling off the kernel from attackers, because the functionality that is currently there was never meant to be used by anybody -- by software vendors or attackers." But PatchGuard is enabled only in the 64-bit version of Windows. Because there are few 64-bit applications written for Vista, most of Vista's initial users are expected to run the operating system in 32-bit mode, and their security software will still be able to access the kernel. A more immediate issue for Symantec is many Vista users will find that both the Windows Security Center and Symantec warnings will pop up simultaneously. This doesn't happen with Windows XP because Symantec's software is able to automatically disable the Windows warnings, but with Vista users will have to turn off the Security Center themselves. This will make things unnecessarily complicated for many customers, said Rowan Trollope, Symantec's vice president of consumer engineering. "Most users can't figure out how to do that," he said. With two warnings popping up, each with different wording, users will be confused at best, and may simply begin ignoring security warnings altogether, said Sites. Some observers have speculated that Symantec may press the EU for action against Microsoft in this matter, but Trollope and Paden wouldn't say what Symantec planned to do to address these problems. "We're looking at all the possibilities now," said Trollope, "And none of them are good for customers."ADVERTISEMENTMAKE SOA REAL WITH IBM WEBSPHERE PODCASTStreamline processes and maximize efficiency within a proven service oriented architecture. Take back control of your business processes with IBM WebSphere.
16785
InfoWorld - The honeymoon ended early for Microsoft's Vista operating system, after word spread Wednesday about a flaw that could allow remote attackers to take advantage of the new operating system's speech recognition feature.
418922
Malware blocking credentials questioned Windows Vista has only just left the starting blocks but security watchers have wasted no time in challenging claims that it provides improved security defences.â¦
273635
Security software vendor Symantec claimed this week that Microsoft is withholding information about its new Vista operating system in an attempt to create an unfair advantage for its own security software.
489145
Software bundled with memory sticks leaves systems vulnerable, according to F-Secure.