Threat Monitor
	Hidden endpoints: Mitigating the threat of non-traditional network devices
	Protecting exposed servers from Google hacks (and Google 'dorks')
	Countermeasures against targeted attacks in the enterprise
	Windows registry forensics guide: Investigating hacker activities
	More built-in Windows commands for system analysis
	Tracing malware's steps with RE:Trace
	Worst practices: Learning from bad security tips
	Worst practices: Encryption conniptions
	Stopping malware in its tracks
	Built-in Windows commands to determine if a system has been hacked

	Application Attacks (Buffer Overflows, Cross-Site Scripting)
	Microsoft warns of attacks against Microsoft Access zero-day flaw
	Tips for SQL injection protection
	Microsoft addresses XSS in Internet Explorer
	Internet Explorer open to spoofing, scripting attacks
	Software still plagued with security holes, researcher says
	Microsoft tools won't be quick fix for SQL injection attacks
	Microsoft identifies tools to address SQL injection attacks
	New defenses for automated SQL injection attacks
	Alarming SQL injection attacks
	Adobe Flash Player flaw previously patched, Symantec says
	Application Attacks (Buffer Overflows, Cross-Site Scripting) Research

	Database Security
	Oracle releases 45 database, application fixes
	Microsoft to issue Windows, SQL Server updates
	Fortinet acquires database vulnerability scanner from IPLocks
	Information security book excerpts and reviews
	Product review: Symantec Database Security 3.1
	New SQL injection technique threatens Oracle databases
	Oracle fixes 41 flaws in April CPU
	The ins and outs of database encryption
	Product Review: Imperva's SecureSphere Database Gateway
	Product review: Application Security Inc.'s DbProtect
	Database Security Research