Compromised and backdoored websites are frequently used interchangeably to act as conduit, redirector, and malware host.

The latest round of headline grabbing SQL injection attacks aren't new, and they aren't very effective. In fact, Lizamoon might as well be called the little injection that couldn't.

We tend to think of malvertising as short lived, one-oft attacks that somehow managed to momentarily breach the ad network's defenses. The reality is, malvertising is more norm than anomaly and can easily persist on major ad networks for months, even years, at a time.

Trend Micro reports there are 3.5 new malware released every second, up from 1 new malware every 1.5 seconds a year ago. But what's your actual risk?

Passwords are only 50% of the defense against compromise. Unfortunately, the other 50% is being crippled by the login policies of many online providers.

Pirated installations of free Avast software included two in Vatican City

I recently saw a provocative tweet from @mikkohypponen that reminded me malware is still quite often politically motivated.

It's been interchangeably called spam, or a targeted attack that spun out of control, or a form of cyber-jihad with alleged geopolitical implications. But regardless of what you call it, the "Here You Have" email worm is an excellent example of just how well today's security can work. Here are a few justifications for that optimism.