David Litchfield news on CNET

Oracle critiqued again over patching speed

January 26, 2006 Bug hunter David Litchfield releases details on a flaw in Oracle products on a mailing list. TAGS: David Litchfield, Oracle Corp., application server, flaw, server

Oracle plans to patch peck of flaws

August 4, 2004 The database software maker has worked to fix more than 30 bugs for seven months, a security researcher says. TAGS: David Litchfield, Oracle Corp., database software, database company, flaw, patch management, database, researcher, security, software company, password, Microsoft Corp.

Gadfly zeroes in on Oracle bugs

March 6, 2007 update The Oracle community, says David Litchfield, shouldn't be so smug when it comes to database security. TAGS: David Litchfield, Oracle Corp., database software, SQL injection, Microsoft SQL Server 2005, database server, database, Microsoft SQL Server, security, SQL, bug, organization, IBM Corp., Microsoft Corp.

New hacker trick may expose Oracle databases

March 1, 2007 update Technique lets intruders exploit flaws previously thought to be insignificant, security researcher says at Black Hat DC. TAGS: David Litchfield, SQL injection, Oracle Corp., Black Hat, paper, technique, Oracle Database, flaw, attacker, trick, database software, database, vulnerability, researcher, SQL, security

Patched Oracle database still at risk, bughunter says

April 26, 2006 Latest updates don't sew up a hole exploited by attack code out on the Web, a security researcher has warned. TAGS: David Litchfield, Oracle Corp., DBMS, Oracle Application Server 10g, business software company, Oracle Database, researcher, business software, flaw, security, database, software company

Microsoft to lift lid on hacker conference

March 17, 2006 It plans to publish findings from its third Blue Hat confab, where hackers give tips to Microsoft execs. TAGS: David Litchfield, SQL injection, SQL, conference, blog posting, Web application, hacker, security, Oracle Corp., Microsoft Corp., event, speakers, researcher, database

Flaw hunters pick holes in Oracle patches

October 27, 2005 Software maker is coming under increased fire from security researchers who say its patch process is "years behind" other companies. TAGS: David Litchfield, Oracle Corp., patch management, researcher, enterprise software, security, bug, software company, CEO, Microsoft Corp., database

Better tools let hackers strike more quickly

July 28, 2004 The bottom line for administrators is that they can't sit around and "wait for the next quarterly patch anymore," one specialist says. TAGS: Paul Watson, Black Hat, David Litchfield, worm, flaw, network administrator, vulnerability, attacker, patch, attack, threat, security, Microsoft Corp., Microsoft Windows

Oracle to 'Fortify' its source code

December 20, 2005 Software maker is using technology from Fortify to analyze source code for potential security vulnerabilities. TAGS: David Litchfield, Oracle Corp., source code, security, researcher, code, server

Vista plays hide-and-seek with hackers

June 1, 2006 Windows update beta aims to foil attacks by loading key system files in different locations each time the PC starts. TAGS: David Litchfield, buffer, malicious code, Microsoft Windows Vista, Microsoft Windows Update, malware, location, attack, security, Microsoft Corp., open source, Linux, Microsoft Windows, PC

David Litchfield

News Stories