For more information about the site, see the Site Index

• Microsoft, Symantec reports mirror global information security trends
• PCI security compliance experts share ways to get compliance 'done right'
• Researchers demonstrate cell phone vulnerabilities to track user movements
• Researchers aim to smarten Web application security scanners
• Windows-based attack bypasses file restrictions, network detection
• Feds must take action on Cyber Storm exercise lessons, expert says
• Companies falling behind on IT access governance, survey finds
• Active drive-by attacks target new Java zero-day flaw
• Adobe fixes 15 flaws in Reader, Acrobat
• Microsoft fixes critical drive-by media handling flaws
• Metasploit creator sees no end to software security vulnerability issues
• Secure software development lifecycle still lacking at dev firms
• Microsoft to repair 25 flaws in Windows, Office and Exchange
• Outsourced security extends to wealth of services, study finds
• PCI Council readying end-to-end encryption guidance
• Security spending survey finds misaligned IT security budgets
• Botnet research suggests progress in cybercrime war
• Google researchers out kernel bugs in Windows, Linux and VMware
• Microsoft emergency patch addresses IE vulnerabilities, zero-day
• Stolen portable media device blamed in breach of 3.3 million
• Emergency Microsoft patch fixes IE zero-day vulnerability
• TJX hacker gets 20 years in prison in Heartland case
• Researcher develops new technique for SQL injection defense
• Twenty-year prison sentence in TJX hacking case
• Researcher's fuzz testing finds dozens of Apple, Microsoft flaws
• Hackers to target mobile phones, Web browsers in Pwn2Own contest
• Apple iPhone, Microsoft IE 8 get hacked in Pwn2Own contest
• Static analysis tools boost security, but integration still an issue
• Despite IE6 security concerns, browser use still high at enterprises, study finds
• Patch for Microsoft Virtual PC weakness unlikely
• The pros and cons of cyber identity and attribution on the Internet
• Major ISPs can remove botnets, malware, CISO says
• Microsoft Virtual PC zero-day flaw weakens virtual sessions
• Survey stresses need for information security career plan
• Social networks, financial firms getting used in phishing, brand abuse
• MD5 hash vulnerability is expert's top Web security flaw
• Zeus botnet temporarily disrupted, but back in full force
• Experts see DNSSEC deployments gaining traction
• Social networking risks, benefits for enterprises weighed by RSA panel
• Microsoft repairs Excel flaws, warns of new IE vulnerability
• FBI asks for more private-sector help reporting cybercrime cases
• Experts laud IPS virtual patching, but warn against misuse
• Medical identity fraudsters target health care info, experts say
• PCI tokenization push promising but premature, experts say
• Trustwave seeks SIEM technology upgrade with Intellitactics deal
• At RSA Conference, experts dismiss end-to-end encryption claims
• Microsoft to address eight security vulnerabilities in Windows, Office
• Social networking threats put new pressure on healthcare CSOs
• Companies urged to share data breach information
• Customer gets say during responsible vulnerability disclosure panel
• Privacy protection essential in fight against cybercriminals, experts say
• Three security themes to watch for at the 2010 RSA Conference
• White House declassifies CNCI summary, lifts veil on security initiatives
• Microsoft's Charney details new botnet protection, IdM technology at RSA
• NSA, cryptoexperts jab at RSA Conference 2010 Cryptographers' Panel
• Nigerian 419 scam messages are not from Africa, experts say
• Microsoft issues advisory on new IE security vulnerability
• Microsoft takes legal action to shut down Waledac botnet
• Cloud security issues, targeted attacks to be hot-button topics at RSA
• Voice data security risks on the rise, say experts
• Interest in data leakage protection, event log management rises
• Secure software development is difficult, but tools, techniques improving, expert says
• Zeus Trojan continues reign infecting 74,000 PCs in global botnet
• Adobe issues emergency update, repairs critical Reader flaw
• MAAWG documents spam statistics stalemate
• Adobe addresses critical Flash flaw, plans Reader security update
• SANS Institute, MITRE release new top 25 dangerous coding errors list
• Windows blue screen may be result of rootkit infection
• Microsoft blue screen affecting few corporate PCs
• Knowledge-based authentication treads lightly on privacy issues
• Microsoft patches SMB flaws, Hyper-V problem in big update
• CISOs take measured steps to reduce social media risks
• Microsoft to fix 26 flaws in Windows, Office
• Microsoft warns that IE zero-day vulnerability causes data leakage
• Tripwire enters tumultuous SIEM market
• Microsoft extends SDL program, adds Agile development template
• Google to pay for Chrome browser vulnerabilities
• MA 201 CMR 17 enforcement less likely with prompt reporting, cooperation
• SCADA system, critical infrastructure security lacking, survey finds
• No major PCI DSS revision expected in 2010
• PCI QSAs, certifications to get new scrutiny
• Data breach costs continue to rise in 2009, Ponemon study finds
• PhoneFactor bolsters authentication using voiceprint identification
• Adobe issues alert on Shockwave Player 3D graphics flaws
• Microsoft issues critical security update, blocks IE 6 attacks
• Security architects fear savvy botnet attacks, IPv6 security issues
• Microsoft emergency IE update to block latest corporate attacks
• Microsoft to release emergency Internet Explorer update
• Latest zero-day attacks only target IE 6, Microsoft says
• Social networking security: Twitter, Facebook hacker attacks climbing
• Microsoft issues advisory on Internet Explorer zero-day
• Hackers used IE zero-day in Google, Adobe attacks, McAfee says
• Adobe issues patch fixing month-long PDF zero-day vulnerability
• Chinese hacker attacks target Google Gmail accounts, top tech firms
• Facebook, McAfee partner to fix social network security issues
• Microsoft releases Windows OpenType Font Engine patch
• Social networks face user content risks, Web application vulnerabilities
• Facebook attacks prompt investments in social networking security
• Another PDF attack targets Adobe zero-day vulnerability
• Microsoft to patch single Windows 2000 vulnerability



• More