External News

Browse by Tags

• 0.0.0.0 Microsoft Strategy and Initiatives
• 0.1.0.0 Security and Privacy
• 0.1.1.0 Trustworthy Computing (TwC)
• 0.1.1.1 End to End Trust
• 1.0 Internet Security
• 3.0 Operating System Security
• 4.0 Application Security
• 5.0 User Security
• 8.0 Security Foundations (Processes)
• Adobe Security
• Anti-Malware
• Anti-Spam
• Attack
• Black Hat
• BlueHat Security Briefings
• Botnets
• CERT
• ClickJacking
• Community-based Defense
• Conficker
• Coordinated Vulnerability Disclosure (CVD)
• EcoStrat
• exploitability
• Exploitability Index
• first
• Forefront Identity Manager 2010 (FIM)
• GC-SEC
• Hallway Tracks
• Identity Metasystem (IDMS) and Windows CardSpace
• IE8 Security
• Internet Explorer (IE)
• Internet Explorer Security
• Malicious Software (Malware)
• Malware and Attack analysis
• Microsoft Active Protections Program (MAPP)
• Microsoft Security Essentials (MSE)
• Microsoft Security Intelligent Report
• Microsoft Vulnerability Research (MSVR)
• Mitigations
• MMPC
• MSRC
• MSRC Ecosystem Strategy
• Published on MS Security TechCenter
• Responsible Disclosure
• responsible/full disclosure
• risk assessment
• Security Advisory
• Security Assurance
• Security Bulletin
• Security Bulletin and Advisory Risk Analysis
• Security Conference Engagement
• Security Development Lifecycle (SDL)
• Security Engineering
• Security Guidance and Resources
• Security Incident Response
• Security Intelligence Report
• Security Management
• Security Research
• Security Tools
• Security Update Management
• U-Prove
• Vulnerability Handling
• Watering Hole
• z-Eventi
• z-MClips

• Microsoft aiuta a decapitare la botnet Rustock

  [English readers: you can find English links in this post for your convenience] Nuova massiccia operazione di collaborazione internazionale coadiuvata da Microsoft e tesa a decapitare la botnet Rustock , una delle più importanti botnet in circolazione... Posted Mar 21 2011, 09:35 AM by TechNet Blogs Filed under: Anti-Spam, Security Ecosystem, Malware and Attack analysis, Botnets, Published on MS Security TechCenter

• RSA Conference 2011: i progressi verso la Collective Defense

  [English readers: you can find English links in this post for your convenience] Ieri sera, in occasione dell’ RSA Security Conference 2011 a San Francisco, il nostro Scott Charney ha avuto modo di condividere i progressi in atto per realizzare la cosiddetta... Posted Feb 16 2011, 05:24 AM by TechNet Blogs Filed under: 0.1.1.1 End to End Trust, Security Ecosystem, U-Prove, Published on MS Security TechCenter

• Nuove considerazioni sui rischi della monocultura di sicurezza

  [English readers: you can find English links in this post for your convenience] Per “monocultura di sicurezza” si intende l’atteggiamento di chi decide di usare una stessa piattafoma per equipaggiare un insieme di sistemi. Da sempre i professionisti di... Posted Dec 13 2010, 05:44 AM by TechNet Blogs Filed under: Security Management, Security Ecosystem

• Proposta di un modello di sicurezza per Internet, non solo quarantena

  [English readers: you can find English links in this post for your convenience] L’amico Matteo Cavallini , responsabile dell’Unità Locale di Sicurezza di Consip/Ministero dell’Economia e delle Finanze (MEF), mi ha invitato a postare su “Punto 1”, il suo... Posted Nov 21 2010, 04:29 PM by TechNet Blogs Filed under: 0.1.1.1 End to End Trust, 0.0.0.0 Microsoft Strategy and Initiatives, Security Ecosystem

• Hack.lu: Why it’s all about building bridges

  Handle: Cluster IRL: Maarten Van Horenbeeck Rank: Senior Program Manager Likes: Slicing covert channels, foraging in remote memory pools, and setting off page faults Dislikes: The crackling sound of crypto breaking, warm vodka martni “We want to... Posted Nov 04 2010, 05:35 PM by TechNet Blogs Filed under: Mitigations, Security Tools, Security Ecosystem, MSRC, risk assessment, MSRC Ecosystem Strategy, Community-based Defense, Security Conference Engagement, Security Engineering, Security Research, EcoStrat, Watering Hole, Hallway Tracks

• Something Old, Something New, True Blue

  This year marks the tenth BlueHat at Microsoft, and my sixth round in participating in the event that has been so instrumental in keeping Microsoft developers and executives in touch with the pulse of security research outside Microsoft, and serves as... Posted Oct 15 2010, 03:35 PM by TechNet Blogs Filed under: Security Tools, Security Ecosystem, MSRC, MSRC Ecosystem Strategy, Security Conference Engagement, Security Engineering, Security Research, Security Advisory, Microsoft Vulnerability Research (MSVR), BlueHat Security Briefings, EcoStrat, Watering Hole, Hallway Tracks

• Announcing BlueHat v10: A Security Odyssey

  BlueHat v10 is on the horizon and I’m happy to be able to announce the lineup. This year we’ll be hosting our annual conference on October 13-15 at the Microsoft campus here in Redmond and, with the success of last year’s con, we’re... Posted Sep 10 2010, 11:05 AM by TechNet Blogs Filed under: Mitigations, Security Tools, Security Ecosystem, MSRC, Security Development Lifecycle (SDL), risk assessment, MSRC Ecosystem Strategy, Community-based Defense, Security Conference Engagement, Security Engineering, Security Research, BlueHat Security Briefings, EcoStrat, Watering Hole, Hallway Tracks

• Operation b49: completata l’azione legale per decapitare la botnet Waledac

  [English readers: you can find English links in this post for your convenience] Dopo aver chiesto lo scorso febbraio all’autorità giusdiziaria la sospensione temporanea dei domini Internet utilizzati per controllare la botnet Waledac, in questi giorni... Posted Sep 09 2010, 04:33 AM by TechNet Blogs Filed under: Security Ecosystem, Malware and Attack analysis, Botnets, Published on MS Security TechCenter

• May You Live in Interesting Times

  Handle: StoneZ IRL: Adrian Stone Rank: Senior Security Program Manager Lead Likes: Predictive Analytics, Game Theory, Databases, Sports Cars, NFL Football, Direct People Dislikes: Losing, Liars, Posers, No Talent Clowns It was two years ago at Black Hat... Posted Jul 29 2010, 03:00 AM by TechNet Blogs Filed under: MMPC, Black Hat, Security Tools, Security Ecosystem, Microsoft Active Protections Program (MAPP), Attack, MSRC Ecosystem Strategy, Community-based Defense, Security Conference Engagement, Security Engineering, Security Research, Microsoft Vulnerability Research (MSVR), EcoStrat

• Annunci Microsoft al BlackHat USA 2010: collaborazione con Adobe, nuovo tool EMET e whitepapers

  [English readers: you can find English links in this post for your convenience] Valanga di annunci e novità da parte Microsoft in occasione dell’evento di sicurezza BlackHat USA 2010 appena iniziato: Microsoft News Center: Microsoft, Adobe Collaborate... Posted Jul 28 2010, 11:51 AM by TechNet Blogs Filed under: Black Hat, Adobe Security, Security Tools, Security Ecosystem, Published on MS Security TechCenter, Security Guidance and Resources

• E’ giusto pagare in denaro chi scopre le vulnerabilità?

  [English readers: you can find English links in this post for your convenience] In scia con l’annuncio sul cambio di policy verso il Coordinated Vulnerability Disclosure (CVD) , il MSRC ha postato un importante riflessione a tutto tondo su diversi aspetti... Posted Jul 27 2010, 08:53 AM by TechNet Blogs Filed under: Vulnerability Handling, Security Ecosystem, Coordinated Vulnerability Disclosure (CVD)

• Microsoft evolve la sua politica di disclosure: Coordinated Vulnerability Disclosure (CVD)

  [English readers: you can find English links in this post for your convenience] In occasione dell’imminente evento di sicurezza Black Hat 2010 , Microsoft ha annunciato una evoluzione del modello di disclosure delle vulnerabilità che intende adottare... Posted Jul 27 2010, 05:09 AM by TechNet Blogs Filed under: responsible/full disclosure, Security Ecosystem, Published on MS Security TechCenter, Coordinated Vulnerability Disclosure (CVD)

• A battesimo il Global Cyber Security Center (GC-SEC) con un workshop sul DNSSEC

  [English readers: you can find English links in this post for your convenience] Mercoledì e giovedì scorso ho avuto il piacere di seguire un workshop molto interessante sul DNSSEC : DNSSEC Awareness and Planning Workshop Oltre ad essere stato importante... Posted Jul 05 2010, 05:21 AM by TechNet Blogs Filed under: Security Ecosystem, GC-SEC

• Pubblicato il Microsoft Security Intelligent Report Volume 8 (SIRv8)

  [English readers: you can find English links in this post for your convenience] E’ stata da poco pubblicata l’ottava ediizione del Security Intelligence Report (SIRv8) , il rapporto semestrale sullo stato della sicurezza che Microsoft realizza sulla base... Posted Apr 26 2010, 11:06 AM by TechNet Blogs Filed under: Security Ecosystem, Malware and Attack analysis, Microsoft Security Intelligent Report

• Nuovo canale Twitter del Microsoft Security Response Center (MSRC)

  [English readers: you can find English links in this post for your convenience] Il Microsoft Security Response Center (MSRC), che ricordo essere il nostro centro specializzato nell’analisi e nella gestione dei rischi di sicurezza, ha annunciato ieri sera... Posted Apr 08 2010, 05:50 AM by TechNet Blogs Filed under: Security Ecosystem, Malware and Attack analysis, Security Bulletin and Advisory Risk Analysis, Security Incident Response

• RSA 2010: annunciati i progressi verso un’Internet più sicura e più affidabile

  [English readers: English links in the reference list at the end of this post] L’RSA Security Conference è sicuramente l’evento internazionale più importante nel campo della sicurezza informatica, occasione ideale per annunci importanti e di rilevanza... Posted Mar 04 2010, 06:11 AM by TechNet Blogs Filed under: 0.1.0.0 Security and Privacy, 0.1.1.1 End to End Trust, 0.1.1.0 Trustworthy Computing (TwC), 0.0.0.0 Microsoft Strategy and Initiatives, Security Ecosystem, 1.0 Internet Security, U-Prove, Forefront Identity Manager 2010 (FIM), Identity Metasystem (IDMS) and Windows CardSpace

• Microsoft guida un massiccio blitz internazionale contro la botnet Waledac

  [English readers: English links in the reference list at the end of this post] Finalmente si cominciano a prendere le contromisure adeguate per contrastare il pericoloso fenomento delle botnet: The Microsoft Blog : Cracking Down on Botnets L’intervento... Posted Feb 25 2010, 04:54 AM by TechNet Blogs Filed under: Anti-Malware, Anti-Spam, Security Ecosystem, Malware and Attack analysis, Microsoft Security Essentials (MSE)

• G’day mate, howsitgoing?

  Handle: Avatar IRL: Karl Hanmore Rank: Senior Security Strategist (aka Sergeant Grunt) Likes: Getting the job done, bringing the fight to the bad guys, good single malt whiskey Dislikes: Cowards, talkers not doers, red tape, humidity G’day, or should... Posted Dec 14 2009, 01:36 PM by TechNet Blogs Filed under: Security Bulletin, CERT, exploitability, Security Ecosystem, MSRC, risk assessment, MSRC Ecosystem Strategy, Community-based Defense, Security Conference Engagement, Security Research, Internet Explorer (IE), Security Advisory, Security Assurance, EcoStrat

• Ahn-young-ha-seh-yo & Kon-ni-chi-wa

  Handle: Cap'n Steve IRL: Steve Adegbite Rank: Senior Security Program Manager Lead Likes: Reverse Engineering an obscene amount of code and ripping it up on a snowboard Dislikes: Not much but if you hear me growl…run Hi! It's been a while since... Posted Nov 23 2009, 10:07 AM by TechNet Blogs Filed under: Security Intelligence Report, Security Tools, Security Ecosystem, MSRC, Attack, Security Development Lifecycle (SDL), Conficker, risk assessment, MSRC Ecosystem Strategy, Community-based Defense, Security Conference Engagement, Security Engineering, Security Research, Responsible Disclosure, first, EcoStrat, Malicious Software (Malware), Watering Hole

• Rilascio straordinario di sicurezza Microsoft del 28 luglio 2009: prime indicazioni e raccomandazioni

  Eccomi qui, come anticipato , a spiegarvi il rilascio straordinario appena pubblicato di questi due bollettini Microsoft ( MS09-034 e MS09-035 ) e del relativo “ Microsoft Security Advisory (973882) - Vulnerabilities in Microsoft Active Template Library... Posted Jul 28 2009, 01:47 PM by TechNet Blogs Filed under: Security Ecosystem, Security Bulletin and Advisory Risk Analysis, Microsoft Active Protections Program (MAPP), 4.0 Application Security, Internet Explorer Security, 3.0 Operating System Security, Security Development Lifecycle (SDL)

• Community Based Defense - Redux

  Handle: The Crushman IRL: Andrew Cushman Rank: Security Director Likes: Cranberry juice (thanks Jay!) Dislikes: Super helpful hotel desk clerks (thanks Raoul?) OMG it’s great to be back in Vegas again – the shows, the shopping, the nightlife, and let... Posted Jul 27 2009, 03:18 AM by TechNet Blogs Filed under: Black Hat, exploitability, Security Ecosystem, Exploitability Index, Microsoft Active Protections Program (MAPP), MSRC Ecosystem Strategy, Community-based Defense, Security Conference Engagement, Security Engineering, Security Research, Responsible Disclosure, Microsoft Vulnerability Research (MSVR), Security Assurance

• The year-end review – well, sort of :)

  Handle: Cap'n Steve IRL: Steve Adegbite Rank: Senior Security Program Manager Lead Likes: Reverse Engineering an obscene amount of code and ripping it up on a snowboard Dislikes: Not much but if you hear me growl…run Hey! It’s that time of year again... Posted Jul 27 2009, 12:08 AM by TechNet Blogs Filed under: Mitigations, Black Hat, Security Bulletin, exploitability, Security Tools, Security Ecosystem, MSRC, Exploitability Index, Microsoft Active Protections Program (MAPP), MSRC Ecosystem Strategy, Community-based Defense, Security Conference Engagement, Security Engineering, Security Research, Responsible Disclosure, Security Advisory, Microsoft Vulnerability Research (MSVR)

• The Microsoft Security Community Videos: Through the Looking Glass

  Handle: EcoStrat's All-Stars IRL: TwC Security All-Star Guest Bloggers Likes: Security, Vulnerability Research & Science, Defense and Responsible Disclosure Dislikes: 0-day, FUD Take a gander as Billy Rios, Security Engineer, Business Online... Posted Jul 24 2009, 10:57 AM by TechNet Blogs Filed under: Black Hat, exploitability, Security Tools, Security Ecosystem, Security Development Lifecycle (SDL), risk assessment, MSRC Ecosystem Strategy, Community-based Defense, Security Engineering, Security Research, Responsible Disclosure

• Black Hat USA: Hoping what happens in Vegas doesn’t actually stay in Vegas…

  Handle: Security Blanki IRL: Sarah Blankinship Rank: Senior Security Strategist Lead Likes: Vuln wrangling, teams of rivals, global climate change - the hotter the better Dislikes: Slack jawed gawkers (girls are geeks too!), customers @ risk, egos... Posted Jul 22 2009, 11:27 AM by TechNet Blogs Filed under: Black Hat, Security Ecosystem, MSRC Ecosystem Strategy, Community-based Defense, Security Conference Engagement

• Quando la montagna va da Maometto: Microsoft Security Essentials (ex Morro)

  Il post di Lorenza su MClips mi da la possibilità di aggiornarvi, anche se in ritardo :-(, dei progressi del famoso Microsoft “Morro” , l’antimalware gratuito di Microsoft di cui vi avevo detto all’apoca del suo annuncio . Sapevo che lo scorso 23 giugno... Posted Jul 04 2009, 12:16 PM by TechNet Blogs Filed under: Anti-Malware, z-MClips, Security Ecosystem, 3.0 Operating System Security, Microsoft Security Intelligent Report, Microsoft Security Essentials (MSE)