For more information about the site, see the Site Index

• DDoS attacks growing in size, break attack bandwidth barrier, Arbor Networks says
• 'Anonymous' hackers take out HBGary, pilfer sensitive emails
• Security B-Sides brings its buzz back to San Francisco and RSA Conference
• Microsoft to address 22 flaws in Patch Tuesday updates
• Waledac botnet showing resurgence with thousands of stolen email credentials
• NetWitness' CSO on targeted malware, Spectrum malware analysis tool
• Cost of non-compliance outweighs cost of maintaining compliance, report finds
• Attack code surfaces for new Windows MHTML zero-day vulnerability
• Ignoring mobile hype? Don't overlook growing mobile device threats
• Malicious hosting provider taken down crippling botnet networks
• TippingPoint Zero-Day Initiative fixes record number of vulnerabilities
• Cybercriminals offer new sales tactics for stolen data
• Mozilla proposes Firefox Do Not Track feature to boost browser privacy
• Bredolab Trojan attack uses job applications, nets hackers $150K
• Cisco says attackers will take aim at Apple, Android mobile devices
• Sandboxing technology bolsters security, but it has weaknesses, expert says
• Microsoft releases Attack Surface Analyzer to developers
• Adobe to overhaul Flash Player interface to improve security, privacy
• PCI survey finds more compliance spending planned to meet guidelines
• Microsoft repairs critical Windows flaws, issues temporary IE fix
• Testing firm finds increase in IPS security performance
• Researcher breaks Adobe Flash sandbox security feature
• Microsoft to patch critical Windows flaw to block ongoing attacks
• Sourcefire buys Immunet for cloud-based antivirus
• Dell to acquire SecureWorks for managed security services
• Researcher uncovers browser vulnerabilities with cross_fuzz
• Microsoft issues advisory on new Windows Graphics Rendering zero-day
• IBM predicts rising mobile threats, critical infrastructure attacks in 2011
• Microsoft produces workaround for IE zero-day vulnerability
• Attack code surfaces for Internet Explorer zero-day vulnerability
• Microsoft Outlook 2007 update caused email authentication issues
• DDoS mitigation expert predicts more serious application-layer attacks
• Information security 2011: Next-gen threats demand layered defense
• Mozilla extends bug bounty to Web application vulnerabilities
• Core Security launches CISO-level pen testing software
• Microsoft repairs critical Explorer flaws, Stuxnet malware vulnerability
• Microsoft December 2010 patches to fix 40 flaws
• TDL4 rootkit copies Stuxnet, targets Windows users
• Computer security awareness training could prevent some data loss, experts say
• Compliance burdens hamper vulnerability management processes, survey finds
• Consortium to certify integrated endpoint security software
• Juniper acquires Altor for virtual machine security
• New variant of the Zeus Trojan spotted by Trend Micro
• Siberia exploit toolkit gets update to evade antivirus
• Sophos: Mobile device security pressuring antivirus vendors
• New Adobe Reader X fortifies PDF viewer against attacks
• SEO poisoning, online shopping risks and threats will greet holiday shoppers
• Researchers warn of impending Ares Trojan infections
• Security awareness strategy: Weighing optimism vs. pragmatism
• PCI encryption requirements driving widespread adoption, survey finds
• Microsoft repairs flaws in Forefront UAG, critical Office flaw
• Hoglund: Malware protection and defense needs fresh approach
• Rare pay drop for information security certifications, but skills in demand
• More PCI encryption, tokenization options emerge for compliance
• Microsoft to fix PowerPoint, Forefront vulnerabilities
• Microsoft issues advisory on Internet Explorer drive-by attack
• Google extends bounty program for Web application bugs
• SecTor 2010: Mobile application security flaws a repeat of past mistakes
• PCI SSC finalizes PCI DSS 2.0
• Google antimalware efforts rely on website malware detection
• Bredolab Trojan botnet crippled by Dutch cybersecurity teams
• PCI tokenization guidance nearing completion
• Microsoft's Internet access control plan deserves a chance
• Adobe warns of critical Shockwave Flash Player zero-day
• Attackers getting creative, thwarting botnet detection, research finds
• Microsoft: Botnet infection plague continues despite wins
• HD Moore, Rapid 7 release Metasploit Pro
• PCI encryption: PCI Council calls point-to-point encryption immature
• McAfee to reassure customers, release product updates at Focus 10
• At McAfee Focus 10, customers await integrated chip security
• Microsoft patches 49 security vulnerabilities in massive release
• Microsoft to address 49 flaws in record patching cycle
• Following Stuxnet Trojan, NERC security chief calls for rugged software
• Adobe fix plugs dangerous attack holes in Reader, Acrobat
• New Verizon report connects PCI non-compliance and data breaches
• Symantec encryption strategy expands PGP, nixes GuardianEdge brand
• Study finds overconfidence in disaster recovery, continuity plans
• Stuxnet Trojan attacks could serve as blueprint for malware writers
• Microsoft plans emergency update for ASP.NET encryption flaw
• Microsoft issues rushed patch for ASP.NET encryption flaw
• State CISOs lack authority to manage risks across agencies
• Researchers develop malware detection for hypervisor security
• Sick of news about the monthly patch process? You need it; here's why
• Invincea virtual browser hopes to eliminate browser malware infections
• Attackers target flawed ASP.NET encryption implementations
• Cross-site scripting Twitter attack causes chaos
• Adobe fixes Flash Player zero-day vulnerability
• University data breach stats show more data losses
• Microsoft issues security advisory on ASP.NET encryption flaw
• Forrester: The simple, two-year plan for security program maturity
• Hacking tool exploits faulty AES cookie encryption implementations
• IBM to acquire OpenPages for GRC, operational risk management
• China-based IMDDOS botnet offers DDoS services for hire
• Microsoft addresses Stuxnet Trojan-related printing flaw
• HP buys ArcSight for security information event management in $1.5 billion deal
• Adobe issues warning about zero-day vulnerability in Flash Player
• September 2010 Microsoft security bulletins to fix 13 vulnerabilities
• Snort creator remains guiding force behind network detection system
• Phishing attacks target users of Facebook, other social networks
• Adobe warns of critical zero-day flaw in Reader, Acrobat



• More