Roger's Security Blog

As Chief Security Advisor of Microsoft EMEA - lets share interesting security information
Tags

Browse by Tags

TechNet Blogs » Roger's Security Blog » All Tags » vulnerabilities
Related Posts

  • Blog Post: Security Intelligence Report v9 is online

    rhalbheer
    Usually I blog intensively on the release of the Security Intelligence Report. However, this time I am out of office and have just little time to give you insight. We spent a lot of work to make it more comprehensive and give you a more stable view over quite some time. So there is a great opportunity...
    on 13 Oct 2010

  • Blog Post: Secunia: Apple makes the most vulnerable software in the market today

    rhalbheer
    And everybody tells me how secure they are….. So,according to this article Secunia: Apple makes the most vulnerable software in the market today, apple hast most vulns, then Oracle and then us (and then the rest). And you know, the interesting thing is that the comparison is not “apples with apples”...
    on 21 Jul 2010

  • Blog Post: The Importance of Application Security

    rhalbheer
    I think I told the story thousands of time and everybody knows it but I will do it the 1001 st time now . When I joined Microsoft and became what is the Chief Security Advisor for Switzerland today, we had an airlift for Windows Server 2003. The Product Manager in Switzerland asked me to keynote the...
    on 24 Aug 2010

  • Blog Post: Microsoft and Adobe: Collaboration Against Threats

    rhalbheer
    You know my opinion on collaboration between countries, on public-private-partnerships as well as on collaboration between companies. Since quite a while we run a program called MAPP – the Microsoft Active Protections Program , where we share vulnerability information with security vendors to...
    on 28 Jul 2010

  • Blog Post: Advisory for the ASP.NET Vulnerability

    rhalbheer
    We are basically asking the industry to follow a Coordinated Vulnerability Disclosure and are therefore not in favor of public vulnerability disclosure as it puts the industry unnecessarily at risk. Recently there was a vulnerability in ASP.NET publically disclosed. We released an advisory and you...
    on 19 Sep 2010

  • Blog Post: Assessing the risk of the August security updates

    rhalbheer
    This month it is pretty important to read the Security Research and Defense blog post: Assessing the risk of the August security updates It might help you to get an overview on the biggest release ever Roger
    on 10 Aug 2010

  • Blog Post: How to Detect a Hacker Attack

    rhalbheer
    This title immediately caught my attention and probably yours as well: How to detect a hacker attack – something I definitely want to know. And then I realized that the article a) is written from a techie and b) does not really cover the attacks I am worried of most. But I will address this toward the...
    on 30 Sep 2010

  • Blog Post: A Security Comparison: Microsoft Office vs. Oracle Openoffice

    rhalbheer
    Actually, there is not much to say about this. It is a blog post by CanegieMellon called A Security Comparison: Microsoft Office vs. Oracle Openoffice and just does what it says. However, I do not particularly like the security comparison of products built solely on vulnerabilities as this shows only...
    on 19 Apr 2011

  • Blog Post: Stuxnet: Future of warfare? Or just lax security?

    rhalbheer
    What is your view?: Stuxnet: Future of warfare? Or just lax security? Roger
    on 27 Sep 2010