Web Security Advisor
	DNS rebinding defenses still necessary, thanks to Web 2.0
	New defenses for automated SQL injection attacks
	PCI compliance and Web applications: Code review or firewalls?
	Worst practices: Bad security incidents to avoid
	Web scanning and reporting best practices
	Social networking Web site threats manageable with good enterprise policy
	Enterprise security in 2008: Building trust into the application development process
	PCI DSS Section 6: A plan for tackling application security
	Making the case for Web application vulnerability scanners
	Preparing for uniform resource identifier (URI) exploits

	Infrastructure and Network Security
	VPNs: IPsec vs. SSL
	Sensitive student data cracked at U. of Georgia
	Geer slams Windows dominance, calls for government intervention
	IE update clears up spoofing issue
	Countdown begins for Mydoom DDoS attacks
	Microsoft patches IE spoofing problem
	Microsoft to disable spoofing syntax in IE
	Mydoom variant targets security features, Microsoft
	IE flaw could fool users in illicit downloads
	Hackers scanning for ports opened by Mydoom

	Web Servers
	The best of SearchSecurity.com
	Infosec Know IT All Trivia: Web server security
	Banish .htaccess from your Apache server
	Comparing Microsoft IIS and Apache Web servers
	Getting IIS patched fast!
	Securing Web servers
	Securing servers: Vendors offer everything from common sense to rocket science
	Security Top 10 Update