• PCI App Security: Who's Guarding the Data Bank?

  
  Compliance strategies for PCI's new application security requirements.

• Firefox Add-on Blocks 'Clickjacking' Attacks

  
  NoScript now stymies new class of exploits by revealing secret content.
• Anatomy of a SQL Injection Attack
• Why Security Pros Hate SharePoint
• Remote Workers Care About IT Security -- Really
• Researchers Reveal 'Clickjacking' Attack Info
• US Man Indicted for Hacking Palin's E-mail Account
• Apple Posts Security Update 2008-007
• Put an End to Cell Phone Spam
• Unscramble This

Security How-Tos

• Unscramble This Encrypting data can save you lots of heartache. How should you do it?
• 5 Ways to Foil Hackers Are you the only you out there? When it comes to protecting your identity, a bit of prevention is worth a megabyte of cure.
• On The Defensive Lock up employee data, or face the consequences.
• Put an End to Cell Phone Spam Stop spammers from hassling you by keeping unwanted text messages, e-mail, and voice calls from reaching your mobile phone.
• Is It a Virus? Sometimes the common word isn't technically correct

Security News

• PCI App Security: Who's Guarding the Data Bank? Compliance strategies for PCI's new application security requirements.
• Apple Posts Security Update 2008-007 Apple on Thursday posted Security Update 2008-007, a new security patch for client and server versions of Mac OS X 10.5...
• Firefox Add-on Blocks 'Clickjacking' Attacks NoScript now stymies new class of exploits by revealing secret content.
• Why Security Pros Hate SharePoint Microsoft's SharePoint collaboration platform is all the rage in today's business world, especially since third parties gained the ability to plug security holes. But managing it can still be a nightmare for IT security shops.
• Anatomy of a SQL Injection Attack This vendor-written tech primer has been edited to eliminate product promotion, but readers should note it will likely favor the submitter's approach.

Security Playing in PCW Video

• 
  VeriSign's Plan to Better Secure Your Online Accounts VeriSign's card-sized number generator adds an extra layer of authentication for online accounts.
• 
  Cold Boot Attack at CanSecWest After Princeton researchers demonstrated a cold boot technique, hackers quickly began to show how it could be used to gain access to your PC's data.
• 
  MySpace Hacker Speaks Samy Kamkar talks about his infamous worm at the AppSec 2007 security conference.

Security Reviews

• Five Password Utilities for Portable Freedom Here are five free and paid tools that can help you manage your trove of passwords without leaving you tied to one PC.
• 15 Great, Free Privacy Downloads These free products can save you from malicious software and eavesdroppers. Don't leave your PC exposed and vulnerable.