If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

Chinese-language blogs are detailing a zero-day vulnerability in Microsoft Works, the company’s lower-end office productivity suite, according to security vendor McAfee. The vulnerability is within an ActiveX control for the Works’ Image Server, wrote McAfee analyst Kevin Beets. A PC would need to visit a Web site engineered to exploit the flaw, Beets wrote.
A zero-day flaw is a software vulnerability that has become public knowledge but for which no patch is available. It is particularly dangerous since users are exposed from day zero until the day a vendor prepares a patch and notifies users it is ready. Proof-of-concept code was posted on a Chinese blog showing how the problem could cause Windows to crash, Beets wrote. Then, a few hours later, a working exploit appeared, which could allow malicious code to run on a machine.

View: The full story @ PCWorld

Google and Yahoo are reportedly moving closer to striking an advertising deal that could foil Microsoft’s takeover bid. The proposal would see Yahoo hand over its search advertising operation to Google in a deal that could yield Yahoo as much as $1bn in new revenues, according to reports in The Wall Street Journal.
The publication cited anonymous sources within Yahoo as saying that the outsourcing deal had been granted initial approval and will move forward. The arrangement would give Yahoo another weapon in its effort to ward off a takeover attempt by Microsoft. The Redmond giant has been attempting to push Yahoo’s board to accept its $42bn proposal since February.

View: The full story @ vnunet