• CSRF exploit could tarnish forensics
• Security Wire Weekly: Sizing up the NAC market
• Is the mobile malware threat overblown?
• Researcher behind Linux Kernel flaw explains motives
• Researchers trying to exploit latest Microsoft flaws
• FISA bill would prevent exposure of details of warrantless wiretapping
• Shrewd attackers bypass old security defenses with Web attacks
• Inside MSRC: Microsoft outlines Internet Explorer flaws
• Deloitte survey finds overconfidence, lack of planning on security
• Install Microsoft Office and IE patches first, experts say
• Linux Kernel attack code worries security experts
• Security360: Identity management market
• Panda latest AV firm trying to adapt with the times
• Microsoft to release critical updates for Windows Vista, IE, Office
• How money changed the face of flaw disclosure
• Check Point retools endpoint product, integrates encryption
• Microsoft's completion of Vista SP1 fails to excite users
• Google-Postini email services deliver security market message
• Microsoft touts security in Windows Server 2008
• IT pros mixed on merits of Windows attack code
• Security measures pose risk of government control of cyberspace
• Societe Generale: A cautionary tale of insider threats
• Former @stake researchers rekindle past, discuss Symantec spin-off
• Barracuda enlists open source help in Trend Micro patent fight
• Researcher warns of new do-it-yourself phishing program
• PDF spam reemerges in some inboxes
• NAC vendors stake future on manageability
• Security Squad: Beware of the mighty cyberattack
• McAfee merges encryption, DLP with new suite
• Arbor-Ellacoya deal melds security with broadband
• Cisco plugs serious UCM flaw
• Experts: NAC not dead, just immature
• Security Wire Weekly: Shrinking IT security budgets
• Oracle patches serious holes with latest CPU
• Microsoft warns of Excel zero-day flaw
• Stalled deployments lead to Windows Vista patch apathy
• Trojan toolkit infected 10,000 Web sites in December
• RSA's Coviello sees sweeping changes ahead for security pros
• Verizon UTM service reflects telecom security push
• McAfee plugs flaw
• Federal aid helps uncover open source flaws
• New rootkit threatens Windows users
• Microsoft patches Windows TCP/IP, LSASS flaws
• Inside MSRC: Critical Windows flaw affects XP, Vista
• Layoffs affect EMC's RSA security division
• Spam continues surge as spammers become clever in '07
• Vernier Networks quietly changes name, approach
• Microsoft plans two Windows security updates
• Top 10 security headlines of 2007
• Hardware-based encryption gains most innovation of '07
• Exploit code targets RealPlayer, researchers warn
• Security market consolidation a double-edged sword
• PING: Fyodor
• Bruce Schneier reflects on a decade of security trends
• Year of non-stop consolidation in information security market
• For data minders, 2007 was a year of living dangerously
• IE patch glitch sends admins in search of workarounds
• Virus spreads on Google's Orkut network
• Critical security patch for Adobe Flash Player
• Banks agree to settle lawsuits against TJX
• Storm, Nugache lead dangerous new botnet barrage
• Microsoft security update causes IE meltdown
• Java flaws haunt Mac OS X
• Apple updates QuickTime to plug serious flaw
• TJX data breach costs could be settled in court appeal
• IBM releases simplified Tivoli Identity Manager
• Inside MSRC: Message Block and queuing patches explored
• Firefox 3 security looks promising, testers say
• Microsoft fixes critical DirectX, Windows and IE flaws
• Top 10 access-related controls for PCI compliance
• Sophisticated spam, employee errors continue unabated
• Security fixes on tap for Windows, IE, DirectX
• Hospital: Vista just what the doctor ordered
• Cisco injects role-based access control into the network
• Grisoft acquires Exploit Prevention Labs for Web 2.0 defenses
• Cyber insurer hopes to boost business with pen testing
• Microsoft warns of Windows zero-day
• Trend Micro enters data loss prevention (DLP) market
• IT pros: SANS Top 20 still useful
• TJX offers $40.9 million breach settlement
• Data breach costs soar
• Product focus evolves in volatile data loss prevention market
• With data breach costs soaring, companies should review data sharing policies
• Mozilla plugs Firefox flaws
• IBM Lotus Notes critical flaw affects file viewing
• Webroot adds email security with SaaS acquisition
• Exploit code targets Apple QuickTime zero-day
• Audio codec flaw imperils multiple applications
• Solving the RFID Dilemma
• Group releases Java standards for secure development
• Experts: Privacy and security officers living in silos
• Cybersquatters, phishers sharpen tactics for holiday season
• Hefty security fix for Apple Mac OS X, Safari
• Attackers abusing trusted domain names
• Companies share identity management struggles
• VeriSign to shed businesses, return to security roots
• Survey finds thousands of database servers open to attack
• Instant Gratification: BIOS-level virtualization
• Sun acquiring Vaau for identity management
• Watchfire releases scanner update under IBM umbrella
• More