IBM to acquire Watchfire for risk, compliance

	Web Application Security
	nCircle statistics show rising Web application vulnerabilities
	Twitter bugs, DNSSEC and broswer security
	Month of Twitter Bugs project to document Twitter flaws
	Are Web application penetration tests still important?
	IT pros can detect, prevent website vulnerabilities, thwart attacks
	PCI compliance requirement 6: Systems and applications
	Trust eroding as social engineering attacks climb in 2009, says Kaspersky expert
	US-CERT warns of Gumblar, Martuz drive-by exploits
	XSS bugs, information leakage top list of website vulnerabilities
	How to find and stop automated SQL injection attacks

	Vendor Management: Negotiations, Budgeting, Mergers and Acquisitions
	Sophos CEO on Symantec, McAfee after Utimaco acquisition
	EMC adds configuration management with Configuresoft acquisition
	Know when you need IDS, IPS or both
	Symantec acquires Mi5 Networks, bolsters Web security
	RSA Conference 2009 shines spotlight on security vendor innovation
	Oracle to buy Sun Microsystems for $7.4 billion
	Entrust to be acquired by investment firm
	Enrique Salem takes charge at Symantec
	Countdown: Top 5 most important questions to ask endpoint security vendors
	Flaw disclosure debate polarizes SOURCE Boston panel

	Business Management: Security Support and Executive Communications
	RSA council addresses growing security risks in the cloud
	How to write a risk methodology that blends business, security needs
	Risk management must include physical-logical security convergence
	New partnerships, creative thinking help security bust recession
	How to align an information security framework to your business model
	Service-focused security offers best value to organization
	Cybersecurity Act of 2009: Power grab, or necessary step?
	Information security skills must include communication, expert says
	Mimic the IBM approach to security at RSA
	Sell the business on virtualization security