Vulnerability Risk Assessment
	Are Web application penetration tests still important?
	McAfee to acquire Solidcore Systems for whitelisting
	The Pipe Dream of No More Free Bugs
	Vulnerability test methods for application security assessments
	Free HP SWFScan tool detects Adobe Flash flaws
	PCI QSA assurance program penalizes assessors
	Information security book excerpts and reviews
	New York drafts language demanding secure code
	Security experts identify 25 dangerous coding errors
	Microsoft Windows XML flaw exploits test desktop antimalware
	Vulnerability Risk Assessment Research

	Web Application Security
	Adobe patches ColdFusion vulnerability blocking website attack
	nCircle statistics show rising Web application vulnerabilities
	Twitter bugs, DNSSEC and broswer security
	Month of Twitter Bugs project to document Twitter flaws
	Are Web application penetration tests still important?
	IT pros can detect, prevent website vulnerabilities, thwart attacks
	PCI compliance requirement 6: Systems and applications
	Trust eroding as social engineering attacks climb in 2009, says Kaspersky expert
	US-CERT warns of Gumblar, Martuz drive-by exploits
	XSS bugs, information leakage top list of website vulnerabilities

	Application Attacks (Buffer Overflows, Cross-Site Scripting)
	Adobe ColdFusion websites being compromised
	PCI management: The case for Web application firewalls
	Month of Twitter Bugs project to document Twitter flaws
	Adobe issues first quarterly patch release fixing 13 flaws
	Balancing security and performance: Protecting layer 7 on the network
	Adobe issues Reader update fixing zero-day flaw
	The Pipe Dream of No More Free Bugs
	Security Squad: Federal cybersecurity defenses
	Oracle issues 43 updates, fixes serious database flaws
	Attackers target new Microsoft PowerPoint zero-day flaw
	Application Attacks (Buffer Overflows, Cross-Site Scripting) Research