The importance of vulnerability research; Google: Attack code more likely on Microsoft IIS

Opinion
Jun 6, 20072 mins

Latest security news.

The importance of vulnerability research, 06/05/07:  Testing in-house and vendor-built software for security holes should be an enterprise priority, said a group of vulnerability research experts speaking on a panel at the Gartner IT Security Summit held here this week. But Rich Mogull, the Gartner analyst who hosted the panel, questioned how practical it would be for companies to dedicate the dollars and resources required for this testing. Click here for more.

Google: Attack code more likely on Microsoft IIS, 06/05/07:  Web sites running Microsoft’s Web server software are twice as likely to be hosting malicious code as other Web sites, according to research from Google. Click here for more.

Study: U.S. government still lacking data protection, 06/04/07:  More than half of U.S. government employees unofficially work at home on nights or weekends, raising concerns about the security of the data they’re working on, according to a study released Monday. Click here for more.

Europe crafts computer security alert system for SMBs, 06/05/07:  The creation of a pan-European system to notify small and medium-size businesses of IT security threats came a step closer Tuesday, as security experts from industry and academia refined plans for the European Information Sharing and Alert System (EISAS) at a conference in Berlin. Click here for more.

NetIQ upgrades security information/event management software, 06/05/07:  NetIQ announced Tuesday an upgrade to its security information and event-management software that adds user-access monitoring, real-time auditing and threat detection. Click here for more.

IronPort releases high-performance e-mail security appliance, 06/05/07:  IronPort Systems on Tuesday announced a high-performance model in its family of e-mail security appliances designed for high-volume enterprises and ISPs. Click here for more.

From Whac-A-Mole to chess: The maturing of security, 06/04/07:  Companies that want to spend less of their IT budget on security and improve its effectiveness need to “bake in” security across their operations so it becomes a part of the business process, not an afterthought. Click here for more.

McAfee focuses on SMB security market, 06/04/07:  McAfee Monday pledged a renewed focus on the small-and-midsize business market, where the security firm said it’s beefing up its product line and sales support. Click here for more.