Secunia Logo  


Secunia PSI WorldMap
 
Media Coverage

Adobe tries to explain Acrobat patch woe, July 2009  According to Secunia, using its free Personal Software Inspector (PSI) tool with program monitoring turned on, the user would be alerted immediately, and before a bogus PDF could be opened.

 

Adobe ships insecure version of Reader from official site, July 2009  Adobe is surprisingly shipping the insecure Adobe Reader 9.1.0 version from its official site, potentially exposing users to previously fixed flaws in the latest 9.1.2 version.

 

Adobe doles out bug-filled PDF Reader to users, July 2009  Danish vulnerability tracking vendor Secunia first noticed that Adobe was offering an outdated Reader when users of its Personal Software Inspector (PSI) utility - which scans Windows PCs for unpatched applications - started complaining when the tool said they were running a vulnerable version, even though they had just downloaded the PDF viewer.

 

PC World logo

10 Free, Must-Have Windows Security Downloads, July 2009  Some of the biggest security holes in your PC aren't directly related to Windows — instead, they're in the applications you run.

 

SF Gate logo

Another year of handwringing on cybersecurity, April 2009  Computer security would be better if all the vendors got together, admitted that their products have flaws and developed a standard way to fix them, said Niels Henrik Rasmussen, CEO of Secunia.

 

The Register

MS blames non-Redmond apps for security woes, April 2009  Microsoft has blamed common third-party desktop applications, rather than Windows, for the majority of security threats in a new report. The finding might appear surprising at first but is backed by independent security notification firm Secunia.

 

Computerworld logo

Virtually every PC at risk, says Secunia, December 2008  Almost all PCs scanned by patch tool have an unpatched app; 46% have 11-plus.

 

Secunia tool helps surfers to keep up to date with patches, November 2008 Security notification firm Secunia released the final version of its software inspector tool on Tuesday, 17 months after the first beta of a product that aims to help surfers to keep up to date with security patches.

 

USA Today logo

Even seemingly reliable e-mail vulnerable to hackers, March 2008 "It's not just Microsoft," says Secunia Chief Technical Officer Thomas Kristensen. "Crooks now use many different ways to gain control of computers."

 

Secunia: Fully patched PCs are a rare breed, January 2008 Just five per cent of newly-registered users of an online security inspection service Secunia came out with a clean bill of health, while more than 40 per cent have at least 11 insecure applications installed.

 

SF Gate logo

Unpatched software flaws put PCs at risk, security vendor finds, January 2008 Ninety-five percent of personal computers are vulnerable to attack by hackers due to unpatched flaws in their software applications, according to data released on Wednesday by Secunia, a Danish security vendor.

 

Secunia: backup product 'inherently insecure', January 2008 Some CA products containing antivirus components have "inherent code problems," according to vulnerability-testing company Secunia, which published its annual report on security vulnerabilities on Monday.

 

Microsoft Outlook also caught in the URI trap, October 2007 According to an advisory by security service provider Secunia, Outlook Express and Outlook 2000 are also affected by the Windows URI problem.

 

Browser Blame Game Wages Over Windows Flaw, July 2007 Other security experts, including Thomas Kristensen, chief technology officer at Danish vulnerability tracker Secunia, said otherwise.

 

IE or Firefox: Who's to blame for newest browser zero-day?, July 2007 Thomas Kristensen, chief technology officer at Danish bug tracker Secunia, did not dispute Larholm's findings but did have a problem with his conclusion: "This is in fact not an IE issue, it is a Firefox issue".

 

SC logo

Apple offering Windows users unpatched QuickTime version, January 2007 Researchers with Secunia reported on Thursday that Windows users who download the latest version of the QuickTime are still vulnerable to attack - less than a week after Apple patched the flaw.

 

SANS Top-20 Internet Security Attack Targets, November 2006 A proactive approach to maintaining the security of any DNS server is to subscribe to one of the customized alerting and vulnerability reports, such as those available from SANS, Secunia, and others.

 

Microsoft spars with security analysts over IE 7 bug, November 2006 Microsoft is reacting to a report that the just-released Internet Explorer 7 contains a bug by saying the flaw is actually in Outlook Express, the free e-mail program included with Windows 2000 and XP. The security company that issued the original alert, however, said that didn't matter: attackers could use IE 7 to grab users' data.

 

Secunia claims second IE7 flaw, October 2006 Just one week after claiming that users of Microsoft Corp.'s Internet Explorer 7 browser could be at risk to an online attack, Danish security vendor Secunia ApS is reporting a new bug in the browser.

 

Information disclosure bug blights IE7 release, October 2006 Security researchers have already discovered an information disclosure vulnerability in IE7 hours after the release (story here) of Microsoft's long-awaited browser software upgrade.

 

Erste Sicherheitslücke im Internet Explorer 7, October 2006 Microsoft hat den Internet Explorer 7 gerade erst veröffentlicht, da meldet der Sicherheitsdienstleister Secunia schon die erste Sicherheitslücke im neuen Browser.

 

Microsoft Patches Record Number of Flaws, October 2006 One of the most critical flaws patched in the latest round of software fixes from Microsoft is in the Windows Shell, which, on unpatched systems, can be exploited to take complete control of a PC.

 

Critical Security Flaw Found in Microsoft Excel, June 2006 According to Secunia, the flaw is caused from what is called a "boundary error" in an Excel-related Windows file named "hlink.dll."

 

Computer attackers increasingly target Web services, June 2006 Statistics detailing the rise of websites as security targets are hard to come by because companies such as Secunia and Symantec, which track computer attacks, generally don't break them out that way.

 

Cyper Criminals Target Web Services, June 2006 Users of Yahoo Inc.'s e-mail service, Google Inc.'s Orkut social networking site and eBay Inc.'s PayPal online payment service were among the targets of attacks in recent weeks.

 

Web Services Increasingly Under Attack, June 2006 As more people turn to Web applications for everyday tasks like e-mail, friendship and payments, cyber criminals are following them in search of bank account details and other valuable data, security researchers said.

 

Web Services Increasingly Under Attack, June 2006 Over time, computer security experts said, Web site designers will get better at anticipating the ways their code can be exploited, but by then criminals are likely to move on to newer targets.

 

Web Services Increasingly Under Attack, June 2006 One of the latest discoveries, announced earlier this month by FaceTime Security Labs, is a worm attacking Orkut.

 

Microsoft flaw affects XP Server 2003, June 2006 A new flaw found in Microsoft Corp.'s software could be exploited to cause a denial-of-service attack on certain applications although the bug isn't viewed as being severe. The flaw could be exploited through a buffer overflow attack, security vendor Secunia reported yesterday.

 

New IE bug puts patched Windows systems at risk, April 2006 Danish security firm Secunia, which maintains a vulnerability database, flagged the bug as "highly critical," noting that "successful exploitation allows execution of arbitrary code."

 

Second bug threatens Internet Explorer users, April 2006 Last Sunday, researcher Michael Zalewski posted details of a similarly critical bug in IE to Full Disclosure. Security firm Secunia rates Zalewski's bug as "highly critical."

 

Cisco Reports Critical Vulnerability, April 2006 Cisco Systems has warned its customers about a handful of security vulnerabilities in one of its networking hardware product lines that researchers said could leave the devices open to attack.

 

Hole found in open source encryption software, March 2006 Developers of the open-source GnuPG encryption software have reported a security flaw that could allow an attacker to sneak malicious code into a signed e-mail message.

 

Apple Patches Mac OS X Security Flaws, March 2006 "Malware writers love to reach as many people as possible," said Thomas Kristensen, chief technology officer at security firm Secunia. "They don't want to spend their time creating a virus that targets 1 or 2 percent of users.

 

IE worries continue with critical bug, March 2006 Microsoft is working on a patch for the bug, according to Secunia Inc., which has also published an advisory on the vulnerability. Secunia rates the issue "highly critical."

 

Critical security flaws fixed in Firefox update, February 2006 The new release's eight security fixes have been cumulatively rated as "highly critical" by Copenhagen-based security firm Secunia.

 

IBM preps patches for security flaw, February 2006 According to the Secunia security advisory, the vulnerability is caused due to an error within the LDAP server when handling certain requests, and "this can be exploited to crash the server via specially-crafted request sent to port 389/tcp."

 

More Mac malware: Two OS X vulnerabilities detected, February 2006 "This can be exploited to trick users into executing a malicious shell script renamed to a safe file extension stored in a ZIP archive," Secunia warns”.

 

Third flaw hits Mac OS X, February 2006 “There are just different attack vectors," said Secunia chief technology officer Thomas Kristensen. "Mac OS X users should be really careful these days."

 

IBM patches Lotus flaw, February 2006 The vulnerabilities affect versions of Lotus Notes 6.5.4 and 7.0 or earlier, according to an advisory released Friday by security firm Secunia, which discovered the flaws.

 

Bluetooth flaw found in Sony Ericsson phones, February 2006 Kristensen said: "I don't think the phone's user would even know the attack occurred until they tried to use their phone again."

 

Winamp gets critical patch, January 2006 The company posted version 5.13 of the media player online on Monday after Secunia and other security companies issued alerts about the problem.

 

Flaws in Windows trail behind open source vulnerabilities, January 2006 Secunia's figures offer more detail, though they tally up vulnerabilities differently from US-CERT. Secunia counted 45 vulnerabilities affecting Windows XP for 2005, up from 29 in 2004.

 

Apple patches critical OS X security flaws, December 2005 Secunia has rated Apple's updates to Safari, Apache and other apps as 'highly critical'.

 

Alarm bells over exploit for "extremely critical" IE flaw, November 2005 The exploit code, made public on Monday, aims to take advantage of the "extremely critical" vulnerabilities in IE 5.5 and IE 6 running on XP Service Pack 2 (SP2), and IE 6 running on Windows 2000 SP4, security researcher Secunia said in an advisory.

 

Macromedia Flash has critical vulnerability, November 2005 "The Flash Player plug-in is used by more people than Internet Explorer," said Thomas Kristensen, Secunia's chief technical officer.

 

Does Firefox Contain an Old Security Flaw? June 2005 New versions of the Mozilla Foundation's browsers have reintroduced a seven-year-old flaw that makes them vulnerable to spoofing attacks, security advisory company Secunia says.

 

Linux users still at risk from KDE flaw, May 2005 Such problems can mean a major headache for system administrators, but they seem to be on the wane, according to Thomas Kristensen, CTO of Danish security firm Secunia.

 

Novell issues critical SuSE patches, February 2005 A number of 'highly critical' flaws in SuSE applications have been patched by Novell, but the company's methods have been criticised by Secunia.

 

Massive IE phishing exploit discovered, December 2004 According to security company Secunia, Paul from Greyhats -- a research group -- has published details of a vulnerability that can be exploited to spoof the content of any Web site.

 

Pop-up Loophole Opens Browsers to Phishing Attacks, December 2004 Security firm Secunia has warned that most Web browsers are vulnerable to a simple "phishing" technique that could make fraudulent content appear genuine.

 

Major browsers bitten by security bugs, October 2004 That seemed to be Wednesday's lesson from security information provider Secunia for the developers of the major Internet browsers.

 

Real patches more critical Player holes, June 2004 RealNetworks has patched two highly critical holes in its media player. The bugs could allow an attacker to run malicious code by directing users to a specially-crafted Web page, via an email message for example, according to security experts.

 

Apple tackles Mac security flaw, May 2004 Apple users have been updating their software to close a security hole which could, in theory, expose their computers to attack.

 

Mac OS X still vulnerable, security firm warns, May 2004 Apple Computer Inc.'s Mac OS X operating system remains vulnerable to attacks by hackers, even after the Mac computer maker issued a software update to fix the problem, security firm Secunia said in an updated warning issued Tuesday.

 

 

Mac Hole Has Users, Hackers Abuzz, May 2004 Malicious script kiddies are reportedly rushing to exploit the first serious security hole discovered in Apple Computer's Mac OS X.

 

Critical Flaws Found in IE, November 2003 A set of new security vulnerabilities have been discovered in Microsoft's Internet Explorer Web browser. If used together, these flaws could allow hackers to compromise user PCs, researchers warned Tuesday.

 

New Explorer 6 active scripting flaw reported, November 2003 Security researchers in Denmark are warning users to disable "active scripting" in Microsoft Corp.'s Internet Explorer 6.0 Web browser to prevent attackers from targeting and taking remote control of their PCs.

 

Critical IE Flaws Invoke Debate on Bug Reporting, November 2003 Secunia indicated that the Explorer vulnerabilities - which could involve redirection of the browser and the ability to run script that would execute code by a malicious attacker - could be used in concert to compromise affected systems.

 

Unpatched Microsoft browser hole a gold mine for hackers, September 2003 A long-ignored security hole in Microsoft Corp.'s Internet Explorer is proving to be a gold mine for hackers, providing an easy way for them to plant malicious programs on vulnerable machines through hacker Web sites and instant messaging applications, security experts warn.

 

Bugtraq competitor opens its doors to all, March 2003 Bugtraq has drawn enough flak over the years to down an entire airforce. Now Secunia thinks it has gone too far and has decided to launch a competing service.

 

Conspiracy theories abound in security mailing list launch, March 2003 Danish security service outfit Secunia this week launched an independent mailing list for security vulnerabilities.