Vulnerability Assessment
	Tracing malware's steps with RE:Trace
	Screencast: Penetration testing with Metasploit
	Worst practices: Learning from bad security tips
	Misconfigured networks create huge security risks
	RE:trace framework aids in OS X, Unix flaw discovery
	Survey: Security Pros Identify Priorities for 2008
	Information security book excerpts and reviews
	Getting the best bargain on network vulnerability scanning
	Making the case for Web application vulnerability scanners
	Automated app scanners simplify security
	Vulnerability Assessment Research

	Web Application Security (Also see Web Access Control)
	Kaminsky on DNS rebinding attacks, hacking techniques
	Webmail security: Best practices for data protection
	Tracing malware's steps with RE:Trace
	SQL injection attack infects hundreds of thousands of websites
	PCI Council issues clarification on Web application security
	Web security gateways keep Web-based malware at bay
	IBM's Watchfire halts network research, focuses on Web apps
	Web scanning and reporting best practices
	How to prevent software piracy
	NAC, disk encryption gaining attention, survey shows

	Application Attacks (Buffer Overflows, Cross-Site Scripting)
	Kaminsky on DNS rebinding attacks, hacking techniques
	Yahoo, McAfee to warn users of dangerous websites
	Botnets and ethics
	SQL injection attack infects hundreds of thousands of websites
	HP customers vulnerable to software update tool flaw
	New hacking technique exploits common NULL programming error
	What are the dangers of cross-site request forgery attacks (CSRF)?
	Stopping malware in its tracks
	Shrewd attackers bypass old security defenses with Web attacks
	What software development best practices can prevent input validation attacks?
	Application Attacks (Buffer Overflows, Cross-Site Scripting) Research