Gates pushed change in security culture at Microsoft   25 Jun 2008 04:16 GMT
In January 2002, then-Microsoft CEO Bill Gates launched the company's "Trustworthy Computing" effort to bolster security in Microsoft products. While the move set the company on the right path, analysts say more work is needed.

Source: Computerworld

AV in the cloud... wait, what?   25 Jun 2008 03:02 GMT
So, in a move that I can't currently understand, Trend Micro CEO Eva Chen has thrown out some buzz words claiming that they will move their anti-virus software into the cloud.  Wait... she said what now?  I'm not really sure what that actually means, because the article is very vague...
Source: ZDNet

Securing data at E-Loan   24 Jun 2008 23:44 GMT
Jay Shah, CIO of E-Loan describes the company's security and privacy model which gives more choice to customers about how information is shared with third party vendors. by Andrew Mager
Source: ZDNet

200,000 sites spreading web malware, China's hosting the most   24 Jun 2008 22:16 GMT
Yesterday, the Stopbadware.org initiative released a report entitled "May 2008 Badware Websites Report" summarizing the findings out of analyzing over 200,000 sites spreading malware. With recent data for malicious sites provided by Google's Safe Browsing diagnostic, Stopbadware.org also received responses from affected parties such as Google itself, The Planet, SoftLayer...
Source: ZDNet

Microsoft ships free code auditing tools to thwart SQL injection attacks   24 Jun 2008 20:34 GMT
On the heels of a dramatic rise in SQL injection attacks linked to drive-by malware downloads, Microsoft has released aimed at helping Webmasters and IT administrators block and eradicate this attack class. According to a security advisory from the Redmond, Wash. software giant, the tools are available...
Source: ZDNet

Spam attack shut downs Marshall Islands email service   24 Jun 2008 16:07 GMT
Marshall Islands National Telecommunications Authority is reporting that a sustained spamming attack during the past 24 hours managed to cause a successful Denial of Service attack on the email services of the islands only Internet Service Provider. More info on the attack : More...
Source: ZDNet

Adobe ships critical PDF Reader, Acrobat patch   24 Jun 2008 14:28 GMT
Adobe has shipped a critical update to patch a code execution vulnerability affecting multiple versions of its Reader and Acrobat products. According to Adobe's advisory, the flaw "could potentially allow an attacker to take control of the affected system." If you have Adobe...
Source: ZDNet

Researcher slams Adobe for 'epidemic' of JavaScript bugs   24 Jun 2008 13:00 GMT
Adobe Systems has patched its free Reader and commercial Acrobat software to fix the latest in what one researcher called an "epidemic" of JavaScript vulnerabilities in the popular apps.

Source: Computerworld

Trojan exploiting unpatched Mac OS X vulnerability in the wild   24 Jun 2008 12:24 GMT
The source code of a trojan horse exploiting last week's uncovered local root escalation vulnerability in Mac OS X 10.4 and 10.5 has been released in the wild, allowing malicious attackers to take advantage of the ARDAgent-based trojan in what appears to be a very short vulnerability-to-malware cycle, since the...
Source: ZDNet

CNET employees notified after data breach   24 Jun 2008 07:49 GMT
A firm retained by online publisher CNET Networks (but in the process of closing up shop) suffered a burglary that may have exposed more than 6,500 CNET staffers and family members to data breaching.

Source: Computerworld