Trending Security News

This week included the release of the Microsoft Security Intelligence Report (SIR) volume 11, which included some focused research to put “zero-day” exploits in context.  Dark Reading captured the essence of the research with the headline New Microsoft Data Puts Zero-Day Threat Into Perspective, while The Register provided the bottom-line messaging that Crims prefer old exploits: Microsoft.  I’ve got to say that my favorite headline from the SIRv11 coverage came from Tony Bradley’s tongue-in-cheek take on the research in PCWorld: Hide Your Children, It's a Zero Day!

Security Research & Intelligence

• New Microsoft Data Puts Zero-Day Threat Into Perspective – Dark Reading
• Zero-day bugs overrated, Microsoft says – Computerworld
• Zero-Days Account for Less Than 1 Percent of Attacks: Microsoft – eWeek.com
• Less than 1% of IT security problems are new threats, says Microsoft survey – Computer Weekly
• Zero day exploits account for just one per cent of threats --  V3.co.uk
• Zero-day vulnerabilities: They’re nothing special, says Microsoft – InfoSecurity UK
• Crims prefer old exploits: Microsoft – The Register
• Hide Your Children, It's a Zero Day! – PCWorld
• Many Security Pros In The Dark About Their Own Environments, Study Says – Dark Reading
• Survey finds dangerous gap in prevention – CSO Online
• Cellphones will become a way to attack otherwise protected devices: report – Network World
• Most Enterprises Face Increased Malware Risk From Social Media – Dark Reading
• Websites leak more info than most know: study – MSNBC

Cyber Threat

• Microsoft Targets SpyEye Trojan in Latest MSRT Update – Threat Post
• New style of attack can slip past firewalls, prevention systems – Government Computer News
• After Stuxnet, a Rush to Find Bugs in Industrial Systems – CIO
• Blackhole Crimeware Goes 'Prime Time' – Dark Reading
• Social net sites do wonders for crooks, spooks and bosses – The Register
• Suspect in "Hackerazzi" Case Says He Will Plead Guilty – Threat Post
• When a hacker deletes all your Gmail messages – CNET
• Get Hacked, Don’t Tell: Drone Base Didn’t Report Virus – Wired

Government, Legislation & Policy

• Hackers say German officials used backdoor – CNET
• SEC Issues Cyber-Incident Guidance – Bank Info Security
• White House Lays Out New Cybersecurity Guidelines – Dark Reading
• GAO: U.S. Still Lags on Terrorism Info Sharing – InformationWeek
• Lawmakers Disagree on Need for Online Privacy Legislation – CIO
• Federal Network Security Breaches Jump 650% in Five Years – eWeek.com
• GOP lawmaker says Scarlett Johansson hacking shows need for legislation – Hillicon Valley
• Government working to attract highly skilled IT staff for cyber defence – V3.co.uk
• German officials admit using spyware on citizens, as Big Brother scandal grows – MSNBC

Blog Picks

• Apple releases OS X 10.7.2 and iOS 5 with enormous security patch from Naked Security – Sophos
• Lesson from Apache flaw: Test everything – Roger Grimes/Infoworld
• National Cyber Security Month: Everyone Must Do Their Part - Microsoft On the Issues
• The Future of Cybersecurity: Understanding How the Next Billion Users Will Change Cyberspace

Microsoft Research, Papers and Media

• Cybersecurity/Internet Health
  • Rethinking the Cyber Threat (paper)
  • Collective Defense: Applying Public Health Models to the Internet (paper)
  • Video: Collective Defense: Enabling Healthy Devices (video)
• Security Intelligence
  • NEW: Lessons from Least Malware Infected Countries (series)
  • Battling the ZBot Threat (paper)
• Trustworthy Computing
  • Imagine Video: Microsoft Trustworthy Computing (video)
• Cybersecurity/Trusted Supply Chain:
  • Supply Chain Risk Management keynote at the East-West Institute’s Second Worldwide Cybersecurity Summit (video)
  • Cyber Supply Chain Risk Management: Toward a Global Vision of Transparency and Trust (paper)
  • Toward a Trusted Supply Chain: A Risk Based Approach To Managing Software Integrity (paper)