SeekSecurity

Security firms and the U.S. Computer Emergency Readiness Team (US-CERT) warned this week of a series of attacks that has compromised Web sites and then used the infected sites to spread malware.

IBM Researchers in Israel have developed a new data masking technology that filters sensitive data from unauthorised viewers on the fly.. before it reaches their computer screens.

Moth is a VMware image with a set of vulnerable Web Applications and scripts, that you may use for:

Testing Web Application Security Scanners
Testing Static Code Analysis tools (SCA)
Giving an introductory course to Web Application Security

Turkish hackers calling themselves m0sted were able to break into a U.S. Army server in January and previously hacked a server for the Army Corps of Engineers, according to InformationWeek.

Lens tool to test the security of ASP.NET applications. The site is pretty cool too.

Application security firm Fortify has warned that the end of mainstream support for Windows XP means that anyone working on XP-based applications should strengthen their code auditing procedures.

RBS WorldPay said Wednesday it is back on Visa Inc.'s list of service providers that are validated as compliant with the PCI Data Security Standard.

An analysis of the traffic patterns coming out of the Data Communication Company of Iran (DCI), Iran's state-run Internet provider, shows that the country has severely curtailed SSH, Flash and Bittorrent communications, a security researcher stated on Thursday.

Internal networks are notoriously insecure so why wouldn’t you encrypt PCI data end to end? What makes an Internal Network somehow so inherently secure that encryption is not needed?