When suffering from compliance fatigue, you may have only one option to getting the funding you need to do your job

Is Visa's program to eliminate the requirement for assessments in lieu of EMV (chip and pin) transactions the death knell for PCI? Not yet, but the writing is on the wall

Sabu's traitorous ways reminds us of the sage advice to keep your friends close and your enemies closer

Kaspersky Lab's public request for help on an unsolved mystery surrounding Duqu serves as a case study about the power of technology evangelism

Shockingly the responsible disclosure debate rears its head once again, and amazingly enough some vendors still don't get it. Guess we'll never learn

What security folks need to learn from RIM's rapid and accelerating downfall...

Limited government support of intellectual property helps, but not the strong protections in SOPA/PIPA

As we look towards 2012, it's time to have more fun at work. Integrating some fun, games, and contents into your security program may pay dividends.

HDMoore's Law and those leveraging tools like Metasploit will make many security professionals go the way of brick and mortar retailers.

Concerns over the legality and ethics of security organizations that profit from their sinkhole operations

McAfee's Nitro Security Merger creates a better company and stronger security suite.

Israeli case brings to light that these risks are in actuality threats

Intel kills passwords by 2025 and makes them obsolete 10 years earlier.

If Oracle wants to bitch about anything, they should bitch about how things get done in the halls of government. Veracode is only trying to accelerate its growth.

Leaks largely cost HP the ability to protect their valuation this week. This showcases how important securing a company’s voice is.

The haters came out of the woodwork regarding Defcon Kids. What are they scared of?

McAfee’s Shady Rat report indicates the bigger problem is the related cover-up.

Suggesting plans for the coming massive security backlash from a privacy breach using News Corp as the example

Simplicity never scales. It's time to admit security is hard, and to stop blaming the victims for being human.

The attackers are changing (again), but security fundamentals remain the same. We still suck at them.

LulzSec and Anonymous may be doing the world a favor by showcasing how secure critical systems are and how easily they can be breached.

apple's new headquarters appears to be very secure

We seem to have a problem in the security space. Telling the truth, which makes the crisis communications a pretty valuable skill moving forward.

Avoiding Sony's Suicidal Security Mistakes

crimeware installation lifecycle