NTA Monitor

Latest News

Will IE6 be the next NT4?

1st October 2009 All penetration testers will remember the long tail of Windows NT 4.0, and how this operating system continued to be used long past the point when security updates stopped at the end of 2004. For many years the presence of an unpatchable NT4 server was a common issue in a penetration test report, and it is only now, almost five years after security support ended, that finding an NT4 system on a network is becoming a rare event. Read More

One in four web applications susceptible to high risk security flaws

7th September 2009 NTA Monitor has reported a 10% increase in the total number of web applications found to have at least one high-risk security issue... Read More

Organisations facing a changing threat landscape

20th July 2009 According to NTA Monitor's 2009 Annual Security Report, the average number of Internet security vulnerabilities is on the rise... Read More

The Return of the Insider Threat

1st July 2009 When NTA started security testing twelve years ago, the main focus was on the insider threat. There were many reports with statistics showing that most security breaches were due to insiders. By contrast there was very little focus on the external threat via Internet and third-party network links. Back then many companies did not even have a firewall. Read More

May 2007

Welcome to May's edition of Internet Security News, the monthly risks bulletin detailing the latest Internet software and system vulnerabilities from NTA Monitor, a leading IT security testing company. It provides a convenient way to keep up to date with the fast changing world of IT security; this month's edition includes a total of 9 risk issues: 5 High, 2 Low and 2 Informational .

Buffer overflow vulnerability in Roxio's CinePlayer

(High risk) Roxio's CinePlayer contains a buffer overflow vulnerability, which if exploited, could permit malicious users to execute arbitrary code on affected machines 1st May 2007 Read More

Critical Linux wifi flaw found

(High risk) A critical Linux wifi flaw has been discovered that can enable attackers to gain remote control of a machine, even when it is not on a wifi network 1st May 2007 Read More

Microsoft resumes Patch Tuesday

(High risk) Microsoft has resumed Patch Tuesday, after having omitted the monthly bulletin in March. Six flaws have been fixed in the latest patch update, five of which are critical and one important 1st May 2007 Read More

Yahoo! Messenger buffer overflow flaw

(High risk) A highly critical buffer overflow vulnerability has been discovered in Yahoo! Messenger, which if successfully exploited, could result in system compromise 1st May 2007 Read More

Oracle patches 37 vulnerabilities

(High risk) Oracle has issued patches for 37 vulnerabilities in its database and e-business suite as well as JD Edwards and PeopleSoft products 1st May 2007 Read More

Multiple Cisco wireless vulnerabilities patched

(Low risk) Cisco has released a security bulletin addressing multiple vulnerabilities found in its Wireless Control System prior to version 4.0.96.0 1st May 2007 Read More

Skype IM worm on the loose

(Low risk) The Pykse-A worm is spreading through Skype IM sessions, masquerading as a link to an adult website 1st May 2007 Read More

MP has keylogger installed by six year old

(Informational) Guildford MP Anne Milton agreed to leave her computer unattended for 60 seconds as part of a test of House of Commons' IT security by the BBC's Inside Out programme. It took a six year old girl just 15 seconds to install a keylogger onto the PC 1st May 2007 Read More

WEP encryption cracked in three seconds

(Informational) It has been reported that 128-bit WEP encryption can now be cracked in just three seconds 1st May 2007 Read More

About NTA Monitor

This bulletin is produced as a by-product of ongoing research carried out to develop NTA Monitor's Internet security testing service, Regular Monitor. NTA are a full-service Internet security testing company with a comprehensive range of testing services including:

For more information on the above services please see our services page.