SeekSecurity

The latest news and insights from Google on security and safety on the Internet

Apple today released QuickTime 7.6.2 with fixes for a variety of security vulnerabilities, some of which could lead to arbitrary code execution attacks.

IT professionals are under pressure from upper level executives to open the floodgates to the latest Web-based platforms, relaxing Web security policy, according to a new survey of 1,300 IT managers.

BM has purchased Ounce Labs, a privately held software security provider, the companies said Tuesday.
Ounce Labs uses its technology to scan the source code of an application, hunting for security holes and compliance failures. Ounce tries to track down problems early on in a product's development when they're easier and cheaper to fix.

A security researcher from nCircle says Microsoft is downplaying a vulnerability in its IIS (Internet Information Services) software.

Mobile Banking Security and Risk Assessment Considerations

Takeaway: Failing to secure your switch architecture is like sending hackers an engraved invitation to attack your network. Yet security administrators often neglect to lock down Layer 2 of their network infrastructure. This comprehensive guide explains the essential procedures that will enable you to properly configure and secure your switch infrastructure.

Moth is a VMware image with a set of vulnerable Web Applications and scripts, that you may use for:

Testing Web Application Security Scanners
Testing Static Code Analysis tools (SCA)
Giving an introductory course to Web Application Security

Lens tool to test the security of ASP.NET applications. The site is pretty cool too.