A mass attack ongoing for the past month against Linux Apache Web servers has become increasingly successful because its break-in method makes use of an automated password and installation process, according to a security researcher monitoring its progress.

In view of mass defacements of hundreds of thousand of web pages - with the intent to misuse them to launch drive-by download attacks - security researchers from ETH Zurich, Google, and IBM Internet Security Systems were interested in looking at the other side of the attack: the web browser.

There are two stories posted on Linux Today that I knew I was going to rant about as soon as I saw them: Nominum Solves Kaminsky Attack, and Novell's iPrint Open to Attack, Say Researchers. What do these stories have in common? I was thinking perhaps institutionalized delusional thinking and incompetence, but maybe I'm being too harsh.

Hopefully, you understand how important it is to thoroughly validate all user input accepted through a web form; after all, if you neglect this task, your data could be stolen or damaged via a SQL injection attack, or your users could be spoofed via a cross-site scripting attack.

Security researchers have warned that a new class of vulnerabilities dubbed "clickjacking" puts users of every major browser at risk from attack.

Computer scientists at Rutgers University have shown how a familiar type of personal computer security threat can now attack new generations of smart mobile phones, with the potential to cause more serious consequences.

The latest examples of Microsoft's misbehaviour and harms to the consumer

Online attack code has been released targeting a critical, unpatched flaw in the Firefox browser.

Microsoft partners continue to attack GNU/Linux (on IBM mainframes) for its dominance that poses a threat to Windows Server