Unbelieveable but I seem mess up with links at the moment. Here is the one: http://www.microsoft.com/downloads/details.aspx?familyid=df6a6e6e-21af-4786-ad1d-a38e8bfda82f&displaylang=en Roger

I just got a message about an absolutely business critical application - at least starting from 11 days. Here you will find the Microsoft Soccer Scoreboard for the Soccer World Championship :-) http://blogs.technet.com/controlpanel/blogs/posteditor...

Now it gets scary: I knew that you can buy pretty small keystroke logger to be placed between the keyboard and the PC. Now, the keystroke loggers are even offered to be placed into normal keyboards - and that to be bought via the internet... They are...

Do you really want the link :-)? http://www.microsoft.com/downloads/details.aspx?familyid=570dccd9-596a-44bc-bed7-1f6f0ad79e3d&displaylang=en&displaylang=en Roger

We just released Version 2 of our Threat Modelling tool - for free :-) Microsoft Threat Analysis & Modeling tool allows non-security subject matter experts to enter already known information including business requirements and application architecture...

I just want to start to make you aware of the fact the Windows XP SP1 will get out of support on October 10. From this point we will no ship any security updates anymore for this servicepack. Our normal lifecycle policy says that we are supporting...

At the moment we are investigating reports about 0day attacks on Microsoft Word. The best source to get up-to-date information is the MSRC-Blog (Microsoft Security Incident Response Center) on http://blogs.technet.com/msrc/ Roger

It has been a busy week - preparing the Swiss Security Day. Back in November we launched www.security4kids.ch - a web portal helping parents, children, and teacher to understand what they shall do to protect our kids form the dark side of the Internet...

If you are doing patch management, there are a few things you should be aware of in my opinion. Christopher Budd details them in his article have a look at it: http://www.microsoft.com/technet/community/columns/secmgmt/sm0506.mspx Roger

How Microsoft Built a Unified Approach to Windows Security. An inside look at the internal teams and processes behind the security efforts at Microsoft. http://www.microsoft.com/technet/technetmag/issues/2006/05/BehindTheScenes/ Urs

Guidance to organizations on managing the security risks of peripheral access devices, such as USB data keys and personal music players. http://www.niscc.gov.uk/niscc/docs/re-20060508-00337.pdf?lang=en Urs

Technical overview of the different types of penetration test and how these can be used within wider information security assurance activities. It also provides guidance on how organisations should plan for, procure and manage such tests http://www...

“What if we could authenticate by thinking a password?” http://eureka.carleton.ca/2006-03/60.htm But what if I can't remember the password?! ;-) Urs

ISA Server 2006 is the next step in Microsoft’s Security Strategy. ISA Server 2006 is the successor of ISA Server 2004. ISA Server 2006 RTM is expected to be released at end of June 2006. Do you wan't to have a look into the beta? http://www.isaserver...

...In the practice of security we have accumulated a number of “rules of thumb” that many people accept without careful consideration. Some of these get included in policies, and thus may get propagated to environments they were not meant to address....

You know Bruce Schneier? He is not too big a fan of Microsoft. Now he wrote about the new Windows Vista feature called Bitlocker (boot protection and full disk encryption). Read yourself: http://www.schneier.com/blog/archives/2006/05/bitlocker.html ...

...no, I'm just kidding, but fun anyway! ...The LEGO Group today announced that for the first time it will release as open source the firmware of the LEGO® MINDSTORMS® microprocessor – the new NXT brick – the core component of its next generation robotics...

...A project focused on automating the process of classifying malicious software found that many programs have similar ancestors but that the names assigned by security firms don't always highlight common code. http://www.securityfocus.com/brief/200...