security firms

Facebook has announced an improvement to its antivirus marketplace. At the same time, the social networking site also announced it will begin working closely with security companies to build a database of dangerous, rogue websites. The security ... software will be featured in Facebook's antivirus marketplace, which launched this past April. The marketplace allows security firms to promote their products and allows users to choose one antivirus product for a free trial, then extend their coverage with a paid subscription. Facebook says 30 million users have visited the marketplace since it ... (view more)

Microsoft suffered a significant security setback last weekend, with a guideline for fixing a major software vulnerability being leaked to a Chinese hacking website. The guideline is known as a "proof-of-concept" code, and is essentially an outline ... of how hackers might exploit a specific security flaw. In this case, the guideline was related to a recently patched Remote Desktop Protocol (RDP) issue. If exploited, the flaw it covers could allow hackers to infiltrate a remote computer system. Prior to issuing the patch, Microsoft had rated the RDP flaw "critical," its highest security rating. ... (view more)

A new survey appears to confirm what most would suspect: people who discover security flaws make more money selling the details to criminals than to legitimate security companies. Research firm "Unsecurity" has carried out a survey of people who ... have discovered zero-day vulnerabilities and them sold them to security companies that then use the data to improve their products. Zero-day vulnerabilities occur when the original software manufacturer is unaware of a security risk in a software program. The name comes from the idea that once the manufacturer discovers the problem, there's ... (view more)

Both McAfee and Symantec have recently countered claims that Microsoft has provided security firms with enough information to get their products working its upcoming operating system, Windows Vista. McAfee's Worldwide Corporate Communications Vice ... President Siobhan MacDermott released a statement explaining that the information is inadequate. MacDermott says that although McAfee has received a document that contained the SDK (Software Development Kit) for Windows Security Centre, requests for both clarifications and meetings have been ignored. "To date, we have not had any cooperation from MS ... (view more)