Risk
6/18/2009
06:13 PM
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

Microsoft Security Essentials Beta Coming Tuesday

Previously code-named "Morro," the free software will replace Windows Live OneCare, which included both security and utility services for $49.95 per year.

Microsoft has confirmed plans to release a beta version of Microsoft Security Essentials, its new free anti-malware software, on Tuesday, June 23, at about 9 a.m. Pacific.

Microsoft Security Essentials, previously known by the project name "Morro," will replace Windows Live OneCare, which included both security and utility services for $49.95 per year.

Last November, Microsoft explained its decision to phase out Windows Live OneCare by saying that a product more focused on security would serve consumers better. The company will stop selling Windows Live OneCare through retail channels at the end of June.

Microsoft Security Essentials works with Windows XP, Windows Vista, and the forthcoming Windows 7 operating system, according to the company. It's designed to require less space and fewer computing resources in order to be useful on less-powerful PCs and in situations with constrained bandwidth.

But the software, Microsoft claims, offers the same protection as the company's enterprise malware products, which provide, or attempt to provide, protection against viruses, spyware, rootkits, and Trojans.

Amy Barzdukas, senior director of product management for the Online Services and Windows Division at Microsoft, said in November that customers want "comprehensive, ongoing protection from new and existing threats" and that this new free offering will enable the company to reach more customers, particularly in emerging markets.

Free seems to the way the consumer security market is going. Panda Security began offering Panda Cloud Antivirus for free in April. AVG Technologies and Symantec also have free security products.

The goal of such products is often to convince users to pay for more-comprehensive protection. There's also value to be gained from analyzing the data available from large number of users about active threats.

J.R. Smith, CEO of AVG, says Microsoft's new offering will be good for consumers and good for the security market overall because it will raise awareness that security products are necessary. He expects that companies like AVG, Kaspersky, and Symantec will be able to provide more extensive protection than Microsoft is offering.

"There's room for Microsoft to come in and protect the platform but there's a lot more to be done," he said. "Antivirus is the least of the worries these days. The Web threats are where we see 90% of the problems come through."

The Microsoft Security Essentials Web page isn't working at the moment, but it should be by Tuesday.


InformationWeek Analytics has published an independent analysis on what executives really think about security. Download the report here (registration required).

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-6117
Published: 2014-07-11
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.

CVE-2014-0174
Published: 2014-07-11
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

CVE-2014-3485
Published: 2014-07-11
The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue.

CVE-2014-3499
Published: 2014-07-11
Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

CVE-2014-3503
Published: 2014-07-11
Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Marilyn Cohodas and her guests look at the evolving nature of the relationship between CIO and CSO.