External News

Browse by Tags

• 0.0.0.0 Microsoft Strategy and Initiatives
• 0.1.0.0 Security and Privacy
• 0.1.1.0 Trustworthy Computing (TwC)
• 0.1.1.1 End to End Trust
• 3.0 Operating System Security
• 4.0 Application Security
• Adobe Security
• Attack
• Black Hat
• BlueHat
• BlueHat Security Briefings
• Community-based Defense
• Conficker
• EcoStrat
• exploitability
• first
• Hacking
• Hallway Tracks
• Internet Explorer Security
• Malicious Software (Malware)
• Malware and Attack analysis
• Microsoft Active Protections Program (MAPP)
• Mitigations
• MSRC
• MSRC Ecosystem Strategy
• Open Source Software Security
• Published on MS Security TechCenter
• Responsible Disclosure
• responsible/full disclosure
• risk assessment
• Security Bulletin and Advisory Risk Analysis
• Security Certifications
• Security Communities
• Security Conference Engagement
• Security Ecosystem
• Security Engineering
• Security Guidance and Resources
• Security Incident Response
• Security Intelligence Report
• Security Management
• Security Research
• Security Tools
• Security Update Management
• Vulnerability Handling
• Watering Hole
• Windows 2000 Security
• Windows Server 2003 Security
• Windows Server 2008 Security
• Windows Vista Security
• Windows XP Security
• z-Eventi
• z-Video

• Blackhat DC: nuovo tool Attack Surface Analyzer e altre news su SDL

  [English readers: you can find English links in this post for your convenience] In occasione della Blackhat DC Security Conference, Microsoft sta annunciando il rilascio del nuovo tool Attack Surface Analyzer per supportare il processo di scrittura di... Posted Jan 18 2011, 04:38 AM by TechNet Blogs Filed under: Black Hat, Security Tools, Security Development Lifecycle (SDL), Published on MS Security TechCenter

• Aggiornato il file di header banned.h per individuare le API potenzialmente insicure

  [English readers: you can find English links in this post for your convenience] Assolutamente per sviluppatori: è stato aggiornato il file di header banned.h per individuare le API potenzialmente insicure: The Security Development Lifecycle > Good... Posted Dec 16 2010, 04:04 AM by TechNet Blogs Filed under: Security Development Lifecycle (SDL)

• Nuova Quick Security Reference: Exposure of Sensitive Information

  [English readers: you can find English links in this post for your convenience] L’SDL team ha appena pubblicato un nuovo whitepaper della serie Quick Security Reference (QSR) : The Security Development Lifecycle > Exposed sensitive information and... Posted Nov 25 2010, 03:08 AM by TechNet Blogs Filed under: Security Development Lifecycle (SDL), Published on MS Security TechCenter, Security Guidance and Resources

• Announcing BlueHat v10: A Security Odyssey

  BlueHat v10 is on the horizon and I’m happy to be able to announce the lineup. This year we’ll be hosting our annual conference on October 13-15 at the Microsoft campus here in Redmond and, with the success of last year’s con, we’re... Posted Sep 10 2010, 11:05 AM by TechNet Blogs Filed under: Mitigations, Security Tools, Security Ecosystem, MSRC, Security Development Lifecycle (SDL), risk assessment, MSRC Ecosystem Strategy, Community-based Defense, Security Conference Engagement, Security Engineering, Security Research, BlueHat Security Briefings, EcoStrat, Watering Hole, Hallway Tracks

• Microsoft rilascerà la documentazione SDL con licenza Creative Commons

  [English readers: you can find English links in this post for your convenience] Rilancio un importante post del blog del team Security Development Lifecycle in cui si annuncia un cambio davvero significativo: per agevolare una adozione ancora più concreta... Posted Aug 27 2010, 12:46 PM by TechNet Blogs Filed under: Security Development Lifecycle (SDL), Published on MS Security TechCenter

• Adobe collabora con Microsoft per realizzare l’Adobe Reader Protected Mode

  [English readers: you can find English links in this post for your convenience] Il team del Microsoft Security Development Lifecycle (SDL) ha riportato l’ annuncio in cui Adobe segnala che aggiungerà la funzionalità di Protected Mode alla prossima versione... Posted Jul 21 2010, 09:37 AM by TechNet Blogs Filed under: Adobe Security, Security Development Lifecycle (SDL), Published on MS Security TechCenter

• The SDL and the CWE/SANS Top 25 Most Dangerous Programming Errors 2010

  Rilancio il post di Michael Howard dal blog SDL: The SDL and the CWE/SANS Top 25 Most Dangerous Programming Errors 2010 Interessante notare come si trattino anche errori di programmazione su linguaggi, come il PHP, che non vengono usati in Microsoft.... Posted Feb 24 2010, 04:40 AM by TechNet Blogs Filed under: 4.0 Application Security, Security Development Lifecycle (SDL)

• BlackHat 2010: 3 nuovi annunci sul Security Development Lifecycle (SDL)

  Il BlackHat 2010 che si è appena concluso è stata un occasione per Microsoft per fare 3 nuovi annunci sul Security Development Lifecycle (SDL): Microsoft Helps Developers Write More Secure Code Se ricordate, ad un certo punto Microsoft ha ritenuto opportuno... Posted Feb 05 2010, 05:06 AM by TechNet Blogs Filed under: 4.0 Application Security, Security Development Lifecycle (SDL)

• Ahn-young-ha-seh-yo & Kon-ni-chi-wa

  Handle: Cap'n Steve IRL: Steve Adegbite Rank: Senior Security Program Manager Lead Likes: Reverse Engineering an obscene amount of code and ripping it up on a snowboard Dislikes: Not much but if you hear me growl…run Hi! It's been a while since... Posted Nov 23 2009, 10:07 AM by TechNet Blogs Filed under: Security Intelligence Report, Security Tools, Security Ecosystem, MSRC, Attack, Security Development Lifecycle (SDL), Conficker, risk assessment, MSRC Ecosystem Strategy, Community-based Defense, Security Conference Engagement, Security Engineering, Security Research, Responsible Disclosure, first, EcoStrat, Malicious Software (Malware), Watering Hole

• Rilascio straordinario di sicurezza Microsoft del 28 luglio 2009: prime indicazioni e raccomandazioni

  Eccomi qui, come anticipato , a spiegarvi il rilascio straordinario appena pubblicato di questi due bollettini Microsoft ( MS09-034 e MS09-035 ) e del relativo “ Microsoft Security Advisory (973882) - Vulnerabilities in Microsoft Active Template Library... Posted Jul 28 2009, 01:47 PM by TechNet Blogs Filed under: Security Ecosystem, Security Bulletin and Advisory Risk Analysis, Microsoft Active Protections Program (MAPP), 4.0 Application Security, Internet Explorer Security, 3.0 Operating System Security, Security Development Lifecycle (SDL)

• The Microsoft Security Community Videos: Through the Looking Glass

  Handle: EcoStrat's All-Stars IRL: TwC Security All-Star Guest Bloggers Likes: Security, Vulnerability Research & Science, Defense and Responsible Disclosure Dislikes: 0-day, FUD Take a gander as Billy Rios, Security Engineer, Business Online... Posted Jul 24 2009, 10:57 AM by TechNet Blogs Filed under: Black Hat, exploitability, Security Tools, Security Ecosystem, Security Development Lifecycle (SDL), risk assessment, MSRC Ecosystem Strategy, Community-based Defense, Security Engineering, Security Research, Responsible Disclosure

• Pubblicato l’SDL Process Template

  [English version below: " SDL process template " ] Finalmente uno strumento per passare dalla teoria alla pratica: questo SDL Process Template gratuito per Visual Studio Team System vi permette di integrare gli aspetti del processo Microsoft... Posted May 26 2009, 11:33 AM by TechNet Blogs Filed under: Security Development Lifecycle (SDL)

• Ecco il bollettino straordinario MS08-078 su IE, ed alcune considerazioni sullo scenario di rischio

  Puntuale rispetto al preavviso, stasera Microsoft ha rilasciato il bollettino straordinario " MS08-078 - Security Update for Internet Explorer (960714) ". L'analisi di rischio è presto fatta (anche perché la maggior parte dei dettagli importanti... Posted Dec 17 2008, 07:19 PM by TechNet Blogs Filed under: Windows Vista Security, responsible/full disclosure, Vulnerability Handling, Security Bulletin and Advisory Risk Analysis, 4.0 Application Security, Internet Explorer Security, Windows XP Security, 3.0 Operating System Security, Windows Server 2008 Security, Security Development Lifecycle (SDL), Security Incident Response, Windows Server 2003 Security, Windows 2000 Security

• BlueHat v8: ecco i video delle sessioni e delle interviste

  Come il nome dell'evento potrà farvi intuire, il BlueHat Security Briefing è una sorta di BlackHat che si svolge in casa Microsoft, una conferenza interna in cui si confrontano e si incontrano i migliori professionisti di sicurezza di Microsoft e... Posted Dec 02 2008, 05:03 AM by TechNet Blogs Filed under: Hacking, Security Communities, z-Video, Malware and Attack analysis, 4.0 Application Security, Security Development Lifecycle (SDL), BlueHat

• Pubblicati i 3 programmi di condivisione con i clienti del Microsoft Security Development Lifecycle (SDL)

  Oggi, in occasione dell'evento Microsoft Tech-Ed 2008 Developer , sono stati pubblicati i 3 programmi che vi avevo annunciato a settembre: Microsoft avvia nuovi programmi per condividere il Security Development Lifecycle (SDL) con i clienti In particolare... Posted Nov 10 2008, 08:13 AM by TechNet Blogs Filed under: Security Tools, Security Ecosystem, 4.0 Application Security, Security Development Lifecycle (SDL)

• “Sicurezza, open source, codice proprietario, interoperabilità” alla 2a Giornata della sicurezza in Sardegna

  Mercoledì prossimo, 5 novembre 2008, sarò ospite della seconda edizione della " Giornata della sicurezza informatica in Sardegna ", organizzata da Sardegna Ricerche e dal Lab. Intelligenza d'ambiente di Sardegna DistrICT . Come... Posted Nov 03 2008, 04:56 AM by TechNet Blogs Filed under: Security Management, z-Eventi, responsible/full disclosure, Open Source Software Security, Vulnerability Handling, 4.0 Application Security, Security Development Lifecycle (SDL), Security Incident Response

• Analisi di rischio del bollettino straordinario di sicurezza Microsoft MS08-067 relativo al servizio Server di Windows

  E' stato rilasciato il bollettino di sicurezza Microsoft straordinario (Out-of-Band) " MS08-067 - Vulnerability in Server Service Could Allow Remote Code Execution (958644) ". Come indicato dal titolo, esso provvede a correggere una vulnerabilità... Posted Oct 23 2008, 02:04 PM by TechNet Blogs Filed under: Windows Vista Security, Malware and Attack analysis, Security Bulletin and Advisory Risk Analysis, Microsoft Active Protections Program (MAPP), Windows XP Security, 3.0 Operating System Security, Windows Server 2008 Security, Security Development Lifecycle (SDL)

• Nuova certificazione ISC2 sulla sicurezza nello sviluppo del software: Certified Secure Software Lifecycle Professional (CSSLP)

  L'ennesima riprova dell'importanza fondamentale nell'adozione di processi di sviluppo di codice sicuro: ISC2 ha annunciato la realizzazione di una nuova certificazione di sicurezza dedicata a tutti i professionisti (non solo sviluppatori,... Posted Sep 26 2008, 11:52 AM by TechNet Blogs Filed under: Security Certifications, 4.0 Application Security, Security Development Lifecycle (SDL)

• Microsoft avvia nuovi programmi per condividere il Security Development Lifecycle (SDL) con i clienti

  Dalle parole ai fatti. Ecco il primo pensiero che ha fatto capolino quando ho appreso di queste iniziative. Ho parlato spesso, anche su questo blog , del forte impegno di Microsoft nel rendere il Security Development Lifecycle un modello che ogni cliente... Posted Sep 18 2008, 07:49 AM by TechNet Blogs Filed under: Security Tools, 0.1.0.0 Security and Privacy, 0.1.1.0 Trustworthy Computing (TwC), 0.0.0.0 Microsoft Strategy and Initiatives, Security Ecosystem, 4.0 Application Security, Security Development Lifecycle (SDL)

• Black Hat 2008: Microsoft Security Vulnerability Research (MSVR)

  Riprendendo il filo da dove l'avevo interrotto (scappando in ferie ;-) mi restava da condividere l'ultimo annuncio fatto da Microsoft in occasione del Black Hat 2008 , che, tra l'altro, non mi sembra sia stato ripreso da altre fonti informative... Posted Sep 08 2008, 09:23 AM by TechNet Blogs Filed under: Black Hat, responsible/full disclosure, 0.1.0.0 Security and Privacy, 0.1.1.1 End to End Trust, 0.1.1.0 Trustworthy Computing (TwC), 0.0.0.0 Microsoft Strategy and Initiatives, Vulnerability Handling, Security Ecosystem, Security Update Management, 4.0 Application Security, Security Development Lifecycle (SDL)