Jonathan's team from MSRC, researches potential mitigations and workarounds as part of the comprehensive investigations they do for each security bulletin. They regularly discover information that could help customers better understand how to protect...

Code signing is a mechanism whereby publishers of software and content can use a certificate-based digital signature to verify their identities to users of the code, thus allowing users to decide whether or not to install it based on whether they trust...

A very good structured and complete quick guide to MS PKI. Also includes many references and examples. http://www.windowsecurity.com/articles/Microsoft-PKI-Quick-Guide-Part1.html http://www.windowsecurity.com/articles/Microsoft-PKI-Quick-Guide-Part2...

Junk email distributors are much more vulnerable at the receiving end than at the sending end, research finds. A given spam campaign may use thousands of mail relay agents to deliver its millions of messages, but it may use only a single server to...

Many people believe that when they dispose of their old computer, the files they've erased from the hard drive are gone forever. Wrong. ConsumerReports.org bought a handful of drives on eBay and tried to recover old files by running simple and inexpensive...

Christopher Smith, nicknamed "Rizler", was sentenced to 30 years in prison. Experts at IT security firms have welcomed news that a notorious spammer who made millions of dollars selling medications online has been sent to jail. A lot less of these...

The third party kernel mode driver named “Atsiv” provides a mechanismto load code that conflicts with the Kernel Mode Code Signing (KMCS) policy included in Windows Vista x64 editions. In Windows Vista x64 editions, the default KMCS policy is to only...