NTA Monitor

Latest News

60% of UK website tests revealed Internet encryption and cross-site scripting vulnerabilities

10th April 2008 60% of web application tests performed for UK organisations showed that their websites contain weak encryption or cross-site scripting (XSS) vulnerabilities Read More

Demilitarised Zone most secure option for BlackBerry device

28th February 2008 Recent BlackBerry testing by IT security consultancy, NTA Monitor, has revealed that organisations are still not configuring these mobile devices correctly Read More

Retailers should put security top of their Christmas list

13th November 2007 With British consumers spending more than £6.6 billion online in the last two months of last year, the 2007 festive season is set to be one of great cheer for online retailers Read More

Businesses warned not to have skeletons in cupboards

13th November 2007 For many organisations, the festive season is an opportunity to heave a corporate sigh of relief and enjoy the brief respite in frenetic business activity as countless people all over the world, go home to celebrate Christmas Read More
Welcome to February's edition of Internet Security News, the monthly risks bulletin detailing the latest Internet software and system vulnerabilities from NTA Monitor, a leading Internet security testing company. It provides a convenient way to keep up to date with the fast changing world of Internet security; this month's edition includes a total of 10 risk issues: 3 High, 2 Medium, 0 Low and 5 Informational.

February 2007

Cross site scripting Adobe flaw

(High risk) A vulnerability discovered in Adobe Reader 7.0.8 could permit malicious people to inject arbitrary JavaScript into a browser session Read More

No MS patches for zero-day Word flaws

(High risk) Microsoft released its January patches and updates, but without supplying one for zero-day flaws that are being actively exploited Read More

Oracle patches 51 flaws

(High risk) Oracle has issued patches for 51 vulnerabilities in various Oracle products Read More

Fake emails about recent storms circulate virus

(Medium risk) The recent storms experienced in northern Europe have prompted some spammers to circulate a virus called Small.DAM Read More

New Opera flaws discovered

(Medium risk) Two flaws recently discovered in Opera can enable malicious users to gain remote system access Read More

Google XSS flaw patched

(Informational) Google has patched a cross site scripting flaw that could permit cross site scripting in Google documents and spreadsheets Read More

Hackers look forward to the release of Apple's iPhone

(Informational) Shortly after Steve Jobs announced that Apple's newest product would be the iPhone, hackers started to get excited about what they'd be able to do with it Read More

Insecure MI5 email subscription service now secure

(Informational) An investigation into MI5's terror alert emails at the beginning of January discovered that they were not secure, with details apparently being sent unencrypted to a US-based server Read More

Majority of organisations unaware of WEEE responsibility

(Informational) According to a recent survey, 74% of organisations are unaware of their obligations under the Waste Electrical and Electronic Equipment (WEEE) directive, which was introduced on 1st January this year Read More

Spammers masquerade as hitmen to con victims

(Informational) Spam emails have taken a disturbing new turn, with spammers posing as hitmen in order to extract money from victims Read More

About NTA Monitor

This bulletin is produced as a by-product of ongoing research carried out to develop NTA Monitor's Internet security testing service, Regular Monitor. NTA are a full-service Internet security testing company with a comprehensive range of testing services including:
  • VPN Testing
  • Onsite Auditing
  • Web Application Test
  • War Dialling
  • Wireless Infrastructure Testing
  • RM Vulnerability Testing
For more information on the above services please see our services page.