Friday, March 31, 2006

Don't accept "home-grown" security fixes

Today's SANS "Newsbites" newsletter has a cautionary comment about security fixes. Sometimes third parties announce "fixes" to security problems. Such is the case with a recently announced Internet Explorer vulnerability. But the editorial comment by Pescatore warns, in a cuttingly humorous way, not to accept "fixes" from other than the original vendor.
 
You can subscribe to get these semi-weekly "SANS Newsbites" by email or you can view them online in the Newsbites Archive. Subscribiing requires that you set up a login account.
 
Another related newsletter for end-users is Ouch!, a monthly security awareness newsletter.

No comments: