Frank Washkuch

Many experts say SQL injection, compliance and insider threats are the top database security topics, reports Frank Washkuch.

The skill set required for the modern IT security professional is constantly changing — the moxie of malware authors, phishers and online scam artists ensures that. Employees working to keep networks and data safe increasingly need another trait they cant learn in a certification course or training session, say consultants and analysts. The IT security pro is now expected to be a great communicator, especially when using metrics and other statistics to explain a corporate IT strategy — and its results and shortcomings, to superiors.

Researchers have discovered a new flaw in Mozilla's Firefox browser that can be exploited by attackers to take over a user's computer, as long as the victim also has Internet Explorer (IE) installed.

Symantec has acquired 4FrontSecurity, a Virginia-based risk management and compliance firm, and has taken another step toward its proposed acquisition of management software vendor Altiris.

Pornographic spam levels dropped to an all-time low in February, according to new research from Symantec, while a Marshal report showed overall spam levels at a record high.

A virus posing as a Valentine's Day message has been spammed to email recipients in a global campaign.

The swearing in of the 110th Congress this month marks the end of an era for IT security-related legislation, as both authors of the Sarbanes-Oxley Act of 2002 (SOX) will have retired to the private sector.

A recently discovered vulnerability in Adobe's Acrobat Reader is more dangerous than first thought, security experts have warned.

Secure Computer, a New York-based firm accused of selling a spyware cleaner after duping consumers with a fake PC scan and pop-up advertisements, has settled a lawsuit brought by Washington state.

A number of recently shipped Video iPods contain RavMonE.exe, a Windows virus, according to a statement from Apple today.