SecurityWeek

Microsoft released its first ever Security Development Lifecycle (SDL) Progress Report today, outlining nine years of progress developing, improving and adopting the SDL process.

A laptop computer belonging to oil giant BP containing the private information of approximately 13,000 individuals that had filed claims following the gulf oil spill was reported lost by the company.

Reports Show Significant Drops in Spam Levels Since Rustock Botnet Takedown - But Will Rustock Be Back?The Rustock Botnet was sending as many as 13.82 Billion spam emails each day before being taken down early this month by an effort headed by Microsoft in cooperation with authorities and the legal system.According to Symantec’s March 2011 MessageLabs Intelligence Report, the Rustock botnet had been responsible for an average of 28.5% of global spam sent from all botnets in March.

DNS Migration - Strategies for Changing DNS Providers Without Disruption

eBay announced today that it has agreed to acquire ecommerce and marketing services provider GSI Commerce for $2.4 billion in cash. It’s not a “done deal” yet, however, as under the terms of the merger agreement, GSI Commerce may solicit acquisition proposals from third parties for a 40-day “go-shop” period continuing through May 6, 2011.

NEI, a Canton, Massachusetts provider of solutions for software technology developers and OEMs, today announced that it has been awarded a US Patent for a technology that creates a new type of "digital fingerprint" that accurately validates software updates for physical and virtual servers and cloud-based application platforms.Patent #7900056 filed as "digital data processing methods and apparatus for management of software installation and execution," enables secure and reliable software update distribution.

BT today launched a Managed Secure Messaging Service for financial institutions, enabling the financial community to exchange messages securely and reliably over BT private networks and the Internet.

NETGEAR today introduced the NETGEAR ProSecure UTM150 – a Unified Threat Management (UTM) gateway targeting businesses with around 150 users. The new UTM150 was designed to deliver powerful security, reliability and performance in an affordable package for smaller businesses that typically lack "big IT" resources.

VeriSign today unveiled “Verisign Uptime Bundle,” a basket of services that combines protection from Distributed Denial of Service (DDoS) attacks with Domain Name System (DNS) hosting, and threat intelligence services -- all in one solution.

Change doesn’t come easy for many, but it may be time to stop and rethink your chosen path. Maybe change is exactly what your enterprise needs.

Cybercriminals in the underground economy are making serious money from stealing corporate intellectual property, which includes things such as source code, trade secrets, marketing plans, and research and development discoveries.According to the results of a study released today by McAfee and Science Applications International Corporation (SAIC), cybercriminals realize there is significant value in stealing corporate IP and the ability to that corporate information and trade secrets.

Updated with Statement from Oracle (03/28/11 1:48PM EST) Oracle issued the following statement to SecurityWeek on Monday afternoon: "Security is one of Oracle’s greatest priorities. It was recently reported that a number of sites on the MySQL.com domain may have been compromised. Oracle is currently investigating this incident to determine which systems and data may have been affected. We will continue to keep you updated."

The Android security model includes a sandbox-like environment that segregates applications and makes good use of shared memory. It also puts the user in control of the device, in part by making the user accept permissions for the installation of any widget.

Questions on Virtualization Security You Want Answered.While virtualization may not be a new topic, it’s still a hot topic. And what’s been heating up more and more is talk about virtualization security.

One of the Best ways to Secure Messaging Infrastructure is to Leverage the Power of the Corporate Directory Information Technology in the current economy is about doing more with less—efficiency and optimization are the rule in IT projects for 2011 and driving technology trends like cloud computing and virtualization initiatives. Securing the IT infrastructure is a cost that does not contribute to a firm’s competitive advantage; however, optimization is about lowering the cost for securing the IT infrastructure.