Our coverage of the Pwn2Own contest has received a lot of attention, so I thought it would make sense to go straight to the source of the Adobe Flash exploit to get some first-hand accounts of what went down.

continue reading.....

Why are we still talking about the value of PCI Compliance? Now we can all get it for free due to a great new product! It’s called Scanless PCI. The premise is pretty simple, go to the website, grab the code, throw it on your website and poof. You’re PCI certified. No fuss, no muss. [...]

continue reading.....

Ivan Ristic (pictured to the right) posted a story today on his blog that highlights some changes that are to go into effect in England sometime this year. The changes to the Computer Misuse Act (CMA) would appear to put security researchers and consultants in the UK at risk of being considered criminals. Ristic mentions [...]

continue reading.....

On April 7, Google took the wraps off of more than many had expected: Not just a hosted database platform, but an entire hosted Web app platform, known as Google App Engine. I’ve heard rumors that Microsoft is readying a competitive hosted application platform.

continue reading.....

After a number of users reported endless-reboot problems in February after installing one of the prerequisites for Windows Service Pack (SP) 1, Microsoft pulled automatic distribution of it. As of April 8, however, Microsoft will resume pushing out that prerequisite.

continue reading.....