More Malware and Vulnerabilities In Depth

Security Manager's Journal: Upgrading, and looking for the best we can afford

Several of the company's security technologies are reaching end of life. It's a new experience for our manager to be improving security measures instead of closing gaps.

Targeted attacks up over 2012, SMBs increasingly at risk: Symantec

The number of targeted attacks almost doubled in 2012 compared to the prior year.

At RSA, specious arguments against security awareness

A debate requires intelligent dialogue from representatives on both sides of an issue. That's not what happened at the RSA conference panel on security awareness.

IT Concerns About Targeted Malware Rising

IT and security professionals are increasingly concerned about targeted malware and data breaches. What's worse is that their confidence in their ability to identify and stop them is waning.

Security Manager's Journal: R&D's new security lab is a promising step

For once, security isn't an afterthought, as the R&D department plans its own sandbox for testing the company's software products.

Kenneth van Wyk: Staying out of the belly of the Internet beasts

It's true: The Internet really is out to get us all. Here are a few steps you can take toward being safer every time you use the Web. (Insider; registration required)

Microsoft to roll out Windows Store app patches quickly

Microsoft will release security updates for applications in its Windows Store as those patches are available in order to speed up the updating process.

Security Manager's Journal: Spam makes a comeback

Out of the blue, phishing attacks previously caught in the spam filter are getting through to employee inboxes.

Chinese Government's Link to Cyber Espionage Clearer Than Ever

It's a common belief in the information security world that the Chinese government is behind many of the advanced persistent threats that target companies around the world in an effort to steal their IP and trade secrets. Now one security firm has come forward with years of evidence to link a prolific APT group to a unit inside the Chinese government.

Three charged with distributing Gozi virus

Three people allegedly involved for years in cybercriminal activities in Eastern Europe have been charged in a U.S. court for creating and distributing the Gozi virus that infected more than 1 million computers and allowed cybercriminals to steal millions of dollars over a five-year period.

There's no magic pill for security

Too often, New Year's resolutions to get into better shape are derailed because of a lack of realistic planning. The same thing happens in the security sphere.

Mobile Attacks Top the List of 2013 Security Threats

For years, information security experts have predicted a spike in mobile malware. Will 2013 be the year of mobile attacks? And what other security threats are on the horizon?

How to talk security so people will listen (and comply!)

Sure you want users to comply with security edicts, but would you phish your own employees or share your company's hack history? At least some CIOs say yes.

When in China, don't leave your laptop alone

If you travel to China or Russia, assume government or industry spooks will steal your data and install spyware. Here's how to thwart them

Security Manager's Journal: Not-so-innocent email distribution lists

When an externally available list is spammed with a phishing attack, our manager has to wonder how many such lists exist.

Security Manager's Journal: New ransomware attack hurts trustworthiness of Web

When an infection can result from just calling up a mainstream website, malware becomes harder to battle.

Security Manager's Journal: Security has to extend to your customers

When a security manager's company sells software, he can't ignore the potential vulnerability of those products.

Security Manager's Journal: A new look at vulnerability scanners

They've improved, which raises some interesting possibilities for shoring up security defenses.

Security Manager's Journal: Handling zero-days with zero staff

A managed security service might be the answer, our manager thinks.

Security Manager's Journal: Closing off a hole in Outlook

With Outlook Anywhere, users can download their mail to untrusted PCs and leave sensitive documents behind.