Risk
6/18/2009
06:13 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Microsoft Security Essentials Beta Coming Tuesday

Previously code-named "Morro," the free software will replace Windows Live OneCare, which included both security and utility services for $49.95 per year.

Microsoft has confirmed plans to release a beta version of Microsoft Security Essentials, its new free anti-malware software, on Tuesday, June 23, at about 9 a.m. Pacific.

Microsoft Security Essentials, previously known by the project name "Morro," will replace Windows Live OneCare, which included both security and utility services for $49.95 per year.

Last November, Microsoft explained its decision to phase out Windows Live OneCare by saying that a product more focused on security would serve consumers better. The company will stop selling Windows Live OneCare through retail channels at the end of June.

Microsoft Security Essentials works with Windows XP, Windows Vista, and the forthcoming Windows 7 operating system, according to the company. It's designed to require less space and fewer computing resources in order to be useful on less-powerful PCs and in situations with constrained bandwidth.

But the software, Microsoft claims, offers the same protection as the company's enterprise malware products, which provide, or attempt to provide, protection against viruses, spyware, rootkits, and Trojans.

Amy Barzdukas, senior director of product management for the Online Services and Windows Division at Microsoft, said in November that customers want "comprehensive, ongoing protection from new and existing threats" and that this new free offering will enable the company to reach more customers, particularly in emerging markets.

Free seems to the way the consumer security market is going. Panda Security began offering Panda Cloud Antivirus for free in April. AVG Technologies and Symantec also have free security products.

The goal of such products is often to convince users to pay for more-comprehensive protection. There's also value to be gained from analyzing the data available from large number of users about active threats.

J.R. Smith, CEO of AVG, says Microsoft's new offering will be good for consumers and good for the security market overall because it will raise awareness that security products are necessary. He expects that companies like AVG, Kaspersky, and Symantec will be able to provide more extensive protection than Microsoft is offering.

"There's room for Microsoft to come in and protect the platform but there's a lot more to be done," he said. "Antivirus is the least of the worries these days. The Web threats are where we see 90% of the problems come through."

The Microsoft Security Essentials Web page isn't working at the moment, but it should be by Tuesday.


InformationWeek Analytics has published an independent analysis on what executives really think about security. Download the report here (registration required).

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7392
Published: 2014-07-22
Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/.

CVE-2014-2385
Published: 2014-07-22
Multiple cross-site scripting (XSS) vulnerabilities in the web UI in Sophos Anti-Virus for Linux before 9.6.1 allow local users to inject arbitrary web script or HTML via the (1) newListList:ExcludeFileOnExpression, (2) newListList:ExcludeFilesystems, or (3) newListList:ExcludeMountPaths parameter t...

CVE-2014-3518
Published: 2014-07-22
jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform 5.2.2, and Red Hat JBoss SOA Platform 5.3.1, does not properly implement the JSR 160 specification, which allows remote attackers to exec...

CVE-2014-3530
Published: 2014-07-22
The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote attackers to read arbitrary code and possibly have other unspecified impact via...

CVE-2014-4326
Published: 2014-07-22
Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Where do information security startups come from? More important, how can I tell a good one from a flash in the pan? Learn how to separate ITSec wheat from chaff in this episode.