Even if a solution seemed like a good idea a few years ago, that is no reason to perpetuate something which is now known to be a security vulnerability.

Controlling endpoint applications (installation, patching, hardening, etc.) is a difficult but necessary component of safeguarding your data and your network.
Even if we don't use Linux, there are lessons to learn from what happened to Apache.
Failing to validate data causes several serious Web application vulnerabilities.
Obama's new cyber-car position is still empty, waiting for someone willing to work with no authority and to be a target for all the blame.
Security is not about compliance; it's about a comprehensive approach to protecting sensitive and critical information assets.
A large part of social engineering defense must be a set of interlocking, mutual supporting controls which help identify or thwart unauthorized access, even when assisted by unwary employees.
Meet Henry, whose exploits prove that all the technical security controls in the world will not protect your business from an attacker who gains physical access to your network.
When executives say the right things and act in ways which show clear support for security, then they are setting the right tone for the organization.


