Security


Microsoft Releases Office File Validation Tool, Windows Loader Update

Microsoft released two security advisories that included solutions yesterday as part of its massive April security update.

Microsoft's April Patch Arrives, Targeting 64 Flaws

Another historic patch is here: 17 security bulletins from Microsoft, patching a total of 64 vulnerabilities.

Study: Security IT Pros Have Higher Earning Average Than Other IT Fields

According to a recent study by Clearancejobs.com and Dice.com, cybersecurity and other qualified IT security skills are in high demand, especially in the federal government.

Microsoft Preparing 'Ugly' Security Patch on Tuesday

Windows security experts had been expecting a large April security update after last month's thin offering, and Microsoft's advance notice appears to meet those expectations.

E-Mail Marketing Firm Hacked, Customer Data Accessed

Epsilon, a worldwide marketing service firm, reported on Friday that its clients' customer data, used in e-mail campaigns, have been compromised.

Cloud Security: Understanding Security Account Management in Windows Azure

Cloud computing relieves some of the security burden, but you still have an active role in managing access, securing communications and ensuring data protection.

Review: Cyber-Ark Privileged ID Management Suite

The suite manages to win over our reviewer despite his cynical view of network-management tools.

Microsoft Issues Alert on Fraudulent Digital Certificates

Nine fraudulent digital certificates are circulating and could be in use by hackers, Microsoft warned yesterday.

RSA Issues Customer Guidelines After SecurID Hack

RSA, after its SecurID was hacked, temporarily halted distribution of the token used for two-factor authentication and warned customers to take addition precautions.

Microsoft Launches Windows Intune, Plans MDOP Updates

Microsoft announced the availability of its Windows Intune PC management and security service today.

Microsoft Helps Shut World's Largest Spam Network

In conjunction with federal law enforcement agencies, Microsoft's Digital Crimes Unit (DCU) announced on Thursday that it had helped pulled the plug on the Rustock spybot network.

RSA SecurID Security Tokens Compromised by Hackers

An "extremely sophisticated" ongoing attack that appears to have harvested information about the RSA's SecurID two-factor authentication product, often used for bank accounts and network access, was disclosed to the public on Thursday.

Adobe Confirms Zero-Day Hole Exploited by Hackers

Adobe has released a security advisory on a "critical" vulnerability in its Flash Player that could cause a system crash and allow for remote access by an attacker.

Microsoft Rolls Out Light Security Update for March

Microsoft's March security update arrived today, just as forecast, with one "critical" item and two "important" fixes for IT pros to consider.

Social Networking Compliance: A Guide for IT Teams

Social media has opened a whole new can of worms for companies, just as they were getting e-mail under control. Despite the challenges, it's possible to get social networking applications under control, too.

Report: Corporate Software Security Not Taken Seriously

According to a report by Creative Intellect Consulting, 59 percent of enterprise application departments are not following quality and security processes "rigorously" when developing new software.

Microsoft Starts Death Watch for IE 6

Microsoft wants to kill Internet Explorer 6, or at least squeeze down the use of its browser to one percent worldwide.

Microsoft Gives IT Staff Break with Light March Patch Update

Staying true to form and pattern, Redmond once again follows last month's large patch load with a small rollout for the month of March.

Approved Execution: The Security Mentality that Really Works

It may seem draconian at first (and a lot of work), but security policies based on 'approved execution' can be worth it.

Microsoft Fixing Malware Engine Flaw With Latest Update

Microsoft started pushing an "important" fix to its Malware Protection Engine yesterday, addressing a privately reported vulnerability.

Subscribe on YouTube