- Windows and other OS security best practices
- Vulnerability and patch management
- Secure application development and coding
Email Alerts
-
Patch Tuesday: Five critical bulletins, Exchange Server fix expected
In addition to Exchange Server, updates fix flaws in Internet Explorer, Microsoft Office and Microsoft Word.News | 06 Dec 2012
-
Analysis: Windows 8 security features improve on Windows 7 security
Expert Michael Cobb says Windows 8's security features, like Windows Defender and Secure Boot, are a step forward for desktop and BYOD security.Tip
-
US-CERT warns of new Samsung, Dell printer threat
Hard-coded passwords on some Samsung and Dell printers could enable an attacker to take control of an affected device.News | 27 Nov 2012
-
November 2012 Patch Tuesday to include Windows 8 patch
Microsoft's November 2012 Patch Tuesday release will include four critical bulletins to fix flaws in Windows 8 and other products.News | 08 Nov 2012
-
Mobile impacting cloud security issues, says panel
Bring-your-own-device (BYOD) makes securing cloud services complex, say experts. Enterprises should set mobile guidelines consistent with cloud policies.News | 07 Nov 2012
-
Public Wi-Fi hotspots pose real threat to enterprises, survey finds
Public Wi-Fi usage has gone up significantly in the past year, and many people are using insecure hotspots to access work information.News | 18 Oct 2012
-
Google no longer playing with Android malware
Some say the Android malware problem is out of hand, and it appears Google is taking additional steps to block attacks in its Google Play store.News | 18 Oct 2012
-
Web app design at the core of coding weaknesses, attacks, says expert
When addressing Web application threats and vulnerabilities, security teams need to look out for design flaws, says Mike Shema of Qualys, Inc.News | 16 Oct 2012
-
Microsoft addresses critical Word flaws, new RSA key length
The new requirements for digital certificates kicks in with the October update, which includes one critical bulletin and six important bulletins.News | 09 Oct 2012
-
Oracle issues Java security update fixing dangerous zero-day vulnerabilities
The latest update fixes widely exploited zero-day vulnerabilities. Metasploit manager praises company for fast turnaround.News | 30 Aug 2012
- VIEW MORE ON : Windows and other OS security best practices
-
Patch Tuesday: Five critical bulletins, Exchange Server fix expected
In addition to Exchange Server, updates fix flaws in Internet Explorer, Microsoft Office and Microsoft Word.News | 06 Dec 2012
-
Cutwail botnet spam campaign tied to Zeus banking Trojan
The cybercriminals connected to the notorious Zeus Trojan are using the Cutwail botnet to distribute spam designed to steal account credentials.News | 05 Dec 2012
-
Analysis: Windows 8 security features improve on Windows 7 security
Expert Michael Cobb says Windows 8's security features, like Windows Defender and Secure Boot, are a step forward for desktop and BYOD security.Tip
-
Study finds spear phishing at heart of most targeted attacks
Malicious file attachments are typically used as the payload, according to a report issued this week by Trend Micro.News | 29 Nov 2012
-
Mitigate phishing attacks in the cloud: A how-to
As Indian enterprises increasingly move to the cloud, so are phishing attempts. Here are some ways to mitigate the risks of phishing in the cloud.Tip
-
US-CERT warns of new Samsung, Dell printer threat
Hard-coded passwords on some Samsung and Dell printers could enable an attacker to take control of an affected device.News | 27 Nov 2012
-
Phishing attack, stolen credentials sparked South Carolina breach
A phishing attack and stolen credentials gave an attacker access to the systems of the South Carolina Department of Revenue for two months.News | 21 Nov 2012
-
After antimalware: Moving toward endpoint antivirus alternatives
Is it time to "cut the cord" with endpoint antimalware? Matthew Pascucci discusses possible antivirus alternatives.Tip
-
NASA to deploy whole-disk encryption following breach
Stolen laptop contained the sensitive data on a large number of employees and contractors. The information was not encrypted.News | 15 Nov 2012
-
November 2012 Patch Tuesday to include Windows 8 patch
Microsoft's November 2012 Patch Tuesday release will include four critical bulletins to fix flaws in Windows 8 and other products.News | 08 Nov 2012
- VIEW MORE ON : Vulnerability and patch management
-
Using ESAPI to fix XSS in your Java code
Customized validation routines are the norm in Indian organizations for fixing vulnerabilities. OWASP’s ESAPI framework may prove to be a better option.Tip
-
Web app design at the core of coding weaknesses, attacks, says expert
When addressing Web application threats and vulnerabilities, security teams need to look out for design flaws, says Mike Shema of Qualys, Inc.News | 16 Oct 2012
-
Vulnerabilities in JavaScript: Secure coding insights and tips
JavaScript vulnerabilities are on the rise in India with the entry of HTML5 and faster JavaScript engines. Here are some key problem areas along with antidotes.Tip
-
Static code analysis tools gain traction in India as SDL models mature
Static analysis tools are gaining popularity with Indian companies as software development models and perspectives mature. Here are some popular choices.Feature
-
Intro: How big data benefits enterprise information security posture
Andrew Hutchison explains how big data benefits enterprise information security posture by merging the security and operational data landscape.Tip
-
Why static code analysis’ benefits go beyond mere VA/PT
While everyone has joined the VA/PT bandwagon, few Indian organizations consider static code analysis viable. We look at where static code analysis scores.Tip
-
Mobile application security issues and threat vectors in enterprises
As mobile application security threats take on serious proportions, we explore the issues and risks involved for users and enterprises.Tip
-
Apple's AuthenTec purchase may pave way for iOS biometrics
In addition to fingerprint technology, AuthenTec provides mobile security software licenses. One of its customers is Samsung, a main rival of Apple's.News | 27 Jul 2012
-
Cloud computing architecture security part 1: Physical and intrinsic controls
Proper design of cloud computing architecture is essential for security. Learn about the physical and intrinsic controls for effective cloud architecture.Tip
-
Comparing enterprise data anonymization techniques
Compare data anonymization techniques including encryption, substitution, shuffing, number and data variance and nulling out data.Tip
- VIEW MORE ON : Secure application development and coding