Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.


Reports Question Vista's Security

Security vendor PC Tools engages Microsoft in running battle of reports

Security software vendor PC Tools has issued multiple reports this month stating that Microsoft's Vista, touted as a more secure version of Windows operating system, is no more secure than previous versions of the OS.

In its latest report, which was published Monday, PC Tools cited a study of 58,000 Vista machines that use its Threatfire security software. In the study, PC Tools detected approximately 121,000 pieces of malware -- and at least one piece of malware actively running on on all of the Vista systems.

Seventeen percent of the threats found on the Vista machines were Trojans. Worms accounted for 5 percent, spyware for 3 percent, and viruses for 2 percent.

“PC Tools maintains that Vista is not immune from online threats," said Simon Clausen, CEO of PC Tools. "Further research and analysis has confirmed our contention that additional third-party protection is absolutely necessary for all Windows Vista users.”

PC Tools made its initial report questioning Vista's security on May 8, alleging that Vista is actually more vulnerable than two of its predecessors, Windows 2000 and Windows 2003. Microsoft security expert Austin Wilson refuted those allegations in a subsequent blog.

However, Wilson did not dispute PC Tools's assertion that third-party security software may be useful. "Does this mean that anti-malware software isn’t necessary? Absolutely not," he said. "No software is perfect."

— Tim Wilson, Site Editor, Dark Reading

  • Microsoft Corp. (Nasdaq: MSFT)
  • PC Tools Pty Ltd.

    Tim Wilson is Editor in Chief and co-founder of Dark Reading.com, UBM Tech's online community for information security professionals. He is responsible for managing the site, assigning and editing content, and writing breaking news stories. Wilson has been recognized as one ... View Full Bio

    Comment  | 
    Print  | 
    More Insights
  • Comments
    Newest First  |  Oldest First  |  Threaded View
    COVID-19: Latest Security News & Commentary
    Dark Reading Staff 4/7/2020
    The Coronavirus & Cybersecurity: 3 Areas of Exploitation
    Robert R. Ackerman Jr., Founder & Managing Director, Allegis Capital,  4/7/2020
    Register for Dark Reading Newsletters
    White Papers
    Cartoon Contest
    Write a Caption, Win a Starbucks Card! Click Here
    Latest Comment: This comment is waiting for review by our moderators.
    Current Issue
    6 Emerging Cyber Threats That Enterprises Face in 2020
    This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
    Flash Poll
    State of Cybersecurity Incident Response
    State of Cybersecurity Incident Response
    Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
    Twitter Feed
    Dark Reading - Bug Report
    Bug Report
    Enterprise Vulnerabilities
    From DHS/US-CERT's National Vulnerability Database
    PUBLISHED: 2020-04-08
    A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to upload a corrupted PAN-OS configuration and potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS 8.1 versions before 8.1.13; 9.0 versions be...
    PUBLISHED: 2020-04-08
    An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect Cor...
    PUBLISHED: 2020-04-08
    A format string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series devices with a Log Forwarding Card (LFC) allows remote attackers to crash the daemon creating a denial of service condition or potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS 9...
    PUBLISHED: 2020-04-08
    GitLab EE/CE 8.11 to 12.9 is leaking information on Issues opened in a public project and then moved to a private project through Web-UI and GraphQL API.
    PUBLISHED: 2020-04-08
    GitLab EE/CE 11.10 to 12.9 is leaking information on restricted CI pipelines metrics to unauthorized users.