Security Management Strategies for the CIO
Email Alerts
-
How can an enterprise-wide network prevent denial-of-service attacks?
Denial-of-service (DoS) attacks are often associated only with one type of flood attack, but there are many to look out for. Information security threats expert John Strand weighs in. Ask the Expert
-
Microsoft warns of attacks against Microsoft Access zero-day flaw
Microsoft is investigating active attacks against its Snapshot Viewer ActiveX control for Microsoft Access. Article
-
Tips for SQL injection protection
In this podcast, Scott Matsumoto, a secure coding expert with Cigital Inc. explains the tools available to software developers and security pros to protect against SQL injection. Article
-
Microsoft addresses XSS in Internet Explorer
A cross-site scripting filter and additional security features for developers will help defend against attacks. Article
-
Internet Explorer open to spoofing, scripting attacks
A zero-day vulnerability in Internet Explorer (IE) leaves the browser open to an attack that could allow someone to capture the keystrokes of a victim. Article
-
Software still plagued with security holes, researcher says
In this podcast, noted security researcher Greg Hoglund, who specializes in Windows rootkits and secure coding, explains why software is just as vulnerable today as it was in 1999. Article
-
Microsoft tools won't be quick fix for SQL injection attacks
Microsoft's security advisory will help raise awareness about secure software coding, but it won't stop the onslaught of SQL injection attacks, experts say. Article
-
Microsoft identifies tools to address SQL injection attacks
On the heels of a tidal wave of SQL injection attacks in recent months, Microsoft issued an advisory to identify tools that could help stave off the attacks. Article
-
New defenses for automated SQL injection attacks
By automating SQL injection attacks, hackers have found a way to expedite the process of finding and exploiting vulnerable websites. The old defense of testing and patching Web app code may not be enough to stop the threat. Michael Cobb explains how ... Tip
-
Adobe Flash Player flaw previously patched, Symantec says
Security researchers said the threat is minimal, because attacks in the wild are targeting previous versions of Adobe's media player. Article