web security

Wordfence, a security plugin in WordPress, helped a very big, very neglected site get back on its performance and security feet. Continue reading...

Hello, When i log in sites Microsoft Edge he ask me if i want to save the user and password. If i answer "YES", everything OK. If i answer "NO" he never more ask me to save the password. This is a problem for me, because in future i would like to say "YES". How can i configure for every time i...

Malwarebytes has been a really terrific program for me for many years. Lately, it's been acting up and their tech support dept. has not been responsive to their customers. One of the posters on their site said they posted a need for help on Oct 8 and as of this morning -- Oct 13, have not...

I am writing to explain my issue that I installed ssl certificate, then I decided to delete the ssl certificate but after I deleted it I found that my site fails to signing in. The attached error is appear when I try to sign in by any user but the site still working normally if i use it without...

Revision Note: V1.0 (May 9, 2017): Advisory published. Summary: Beginning May 9, 2017, Microsoft released updates to Microsoft Edge and Internet Explorer 11 to block sites that are protected with a SHA-1 certificate from loading and displays an invalid certificate warning. This change will only...

With secure browsing in mind, I've been experimenting with various browsers that are advertised to offer good security in the Internet. I'm currently trying Yandex, which is Russian designed. Knowing how adept the Russians are, do you think I should have any concerns about their software, as far...

We are happy to introduce support for Content Security Policy Level 2 (CSP2) in Microsoft Edge, another step in our ongoing commitment to make Microsoft Edge the safest and most secure browser for our customers. CSP2, when used correctly, is an effective defense-in-depth mechanism against cross...

Severity Rating: Critical Revision Note: V1.0 (December 13, 2016): Bulletin published. Summary: This security update resolves a vulnerability in Windows Uniscribe. The vulnerability could allow remote code execution if a user visits a specially crafted website or opens a specially crafted...

:eek:

Most modern software have tools built in for detecting threats as we browse the web and download files, but typically, we do not get to see them in action. If you would like to see how your Microsoft Edge, Internet Explorer and Windows Defender reacts to these types of threats, then there are a...

Continue reading...

Severity Rating: Critical Revision Note: V1.0 (May 10, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet...

Severity Rating: Critical Revision Note: V1.0 (January 12, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Internet Explorer. The more severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet...

Revision Note: V1.0 (January 12, 2016): Advisory published. Summary: Microsoft is releasing a new set of ActiveX kill bits with this advisory. These ActiveX kill bits are included in the Internet Explorer cumulative update released on January 12, 2016. Continue reading...

I am very angry right now because I have tried to connect to proxies via proxy over and over again for YEARS possibly, I've looked for so many online tutorials, but it NEVER works for me on my end and I have NO idea why. I really need to use a proxy right now and for it to actually work. What...

Hi All I had a weird behaviour opening a xls. I have on my webserver a repository with some xls (no macro, no formulas etc, just plain text), thoise xls are accessible without loogin to all visitors. I have a web firewall before web. It happen that waf spam alert message as LOIC attack, i...

Link Removed In May, we announced that Microsoft Edge was saying goodbye to binary extensibility models such as ActiveX and Browser Helper Objects. This change made browsing in Windows faster, more secure, and more stable than ever, while paving the way for better interoperability with other...

Severity Rating: Critical Revision Note: V1.1 (September 8, 2015): Revised bulletin to correct the security impact and the vulnerability information for CVE-2015-2506 (from denial of service to elevation of privilege). This is an informational change only. Summary: This security update resolves...

Severity Rating: Important Revision Note: V1.0 (September 8, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Skype for Business Server and Microsoft Lync Server. The most severe of these vulnerabilities could allow elevation of privilege if a user clicks a...

Severity Rating: Critical Revision Note: V1.0 (August 11, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft...