Microsoft announces industry alliance, $250k reward to combat Conficker

Microsoft has announced an alliance of various industry partners whose goal is to fight the Conficker worm. The announcement is short on actionable methods for stopping the worm, but it does include one gem: a $250,000 (US) bounty for information leading to the capture of those responsible for the worm.

Microsoft is taking the [...]

Should Microsoft decouple IE from Patch Tuesday?

A security researcher wants Microsoft to follow the lead of other browser makers and start fixing Internet Explorer security problems outside of the Patch Tuesday cycle to help contain the Windows malware epidemic. [ Microsoft: ‘Consistent exploit code likely’ for IE vulnerabilities ] According to Wolfgang Kandek, chief technology officer at vulnerability management firm [...]

Endpoint security: Is the future in software suites?

Symantec, McAfee and Trend Micro remain market leaders in endpoint security in an era when the race is pointed toward security-software suites that combine antimalware, network access control and systems management functionality

Read entire article

Apple Patch Day: Gaping Mac OS X, Safari holes

It’s Apple’s turn on the Patch Day treadmill and, for Mac OS X users, it’s quite ugly. As I write, Apple has released four different bulletins to cover 48 documented vulnerabilities in the Mac OS X ecosystem, a solitary code execution flaw affecting Safari for Windows and four different security problems in Java for Mac [...]

Fake Infection Warnings Can Be Real Trouble

Michael Vana knew something was up when he saw the pop-up from “Antivirus 2009″ in the middle of his screen. The former Northwest Airlines avionics technician guessed that the dire warning of a system infection was fake, but when he clicked on the X to close the window, it expanded to fill his screen. To [...]