SearchSecurity: Security Wire Daily News

Microsoft patches SMB flaws, Hyper-V problem in big update

Robert Westervelt — Tue, 09 Feb 2010 16:22:07 EST

Microsoft issued 13 bulletins, patching more than two dozen flaws across its product line, including critical Server Message Block flaws and a hypervisor DoS vulnerability.

CISOs take measured steps to reduce social media risks

Matthew DeBarros — Mon, 08 Feb 2010 11:09:08 EST

With sales and marketing teams using social networks to connect with clients and potential customers, CISOs need to meet business needs while addressing risks.

Microsoft to fix 26 flaws in Windows, Office

Robert Westervelt — Fri, 05 Feb 2010 08:45:05 EST

The Microsoft Advance Notification warns of five critical bulletins across its product line. A total of 13 bulletins address 26 vulnerabilities.

Microsoft warns that IE zero-day vulnerability causes data leakage

Robert Westervelt — Thu, 04 Feb 2010 09:13:28 EST

A new Microsoft advisory warns of a zero-day vulnerability that could result in information disclosure for users of Windows XP.

Tripwire enters tumultuous SIEM market

Robert Westervelt — Wed, 03 Feb 2010 15:17:01 EST

With companies driven to SIEM by PCI and other compliance projects, Tripwire is the latest vendor to emerge. Analysts like SIEM technology, but predict vendor consolidation ahead.

Microsoft extends SDL program, adds Agile development template

Robert Westervelt — Tue, 02 Feb 2010 16:16:47 EST

Microsoft is adding support for Agile Development Methodologies to its Security Development Lifecycle program. A simplified SDL white paper is also being introduced.

Google to pay for Chrome browser vulnerabilities

Robert Westervelt — Mon, 01 Feb 2010 14:52:38 EST

Google follows Mozilla's FireFox vulnerability reward program, offering a base reward of $500 for eligible browser bugs.

SCADA system, critical infrastructure security lacking, survey finds

Robert Westervelt — Thu, 28 Jan 2010 17:10:09 EST

IT and security executives at firms that own critical infrastructure facilities are concerned about the lack of security protecting underlying management systems from attack.

MA 201 CMR 17 enforcement less likely with prompt reporting, cooperation

Eric B. Parizo — Thu, 28 Jan 2010 12:43:21 EST

The official charged with enforcing the MA 201 CMR 17 data protection law says early reporting of potential breaches and cooperation will help firms avoid enforcement action.

No major PCI DSS revision expected in 2010

Robert Westervelt — Wed, 27 Jan 2010 11:15:29 EST

The next revision of PCI DSS will contain clarifications, but no major revisions, according to Bob Russo, general manager of the PCI Security Standards Council.