Hey folks- On October 26th we posted an article here to remind Antigen users about the end-of-life date for Antigen 8 for Exchange and SMTP Gateways and provide guidance for migrating to Antigen 9.  The article said the end-of-life date is December 1, 2009, but it should have said December 31, 2009.  The article has been corrected. You can view the .. more »

Forefront Protection 2010 for Exchange Server will soon be available in 11 languages: US English, Japanese, German, French, Italian, Spanish, Korean, Simplified Chinese, Traditional Chinese, Brazilian Portuguese, and Russian. This is the same set of languages that were available in Forefront Security for Exchange Server 2007 but there is a big d.. more »

todays launch of the Windows Azure , Microsofts cloud services platform. It also represents more progress for our There are too many identity technologies to choose from. Custom development of identity functionality is slow, expensive and requires developers to be identity and security experts. It boosts developer productivity through a single, .. more »

Watch Vittorrio Bertocci’s interview of Conrad Bayer, Director of Program Management for Identity and Access, about how WIF helps developers build claims-based identity into cloud and on premises applications. .. more »

This week we released an update to Forefront Online Protection for Exchange (FOPE) - our hosted service providing anti-malware and anti-spam for both on-premises Exchange and Exchange Online.  FOPE can be used as an alternative to the new Forefront Protection 2010 for Exchange Server , or in tandem with it for messaging defense-in-depth. The new r.. more »

Today, Im just going to be brief for a change, and discuss what we refer to as Managed Out scenarios. I want to thank Pat Telford a consultant in Microsoft, specializing in DirectAccess deployments among other things, for helping with this subject. Like I mentioned in one of my , one of the big advantages of the DirectAccess technology over .. more »

The threat of cyber attacks on businesses and governments has led to a rapid increase in the number of universities offering students the chance to learn how to hack computer networks... more »

Topic : Opera 10.01 Remote Array Overrun (Arbitrary code execution) SecurityAlert : 73 CVE : CVE-2009-0689 SecurityRisk : High.. more »

One of the reasons behind Firefox’s popularity is the availability of a vast library of extensions. Users use them to modify the browser to their liking and make their browsing experience easier and more pleasant See the rest here: Zero-day vulnerabilities in Firefox extensions discovered.. more »

InfoSec Assessment & Protection (A&P) Suite . Its a suite made up of protection and assessment tools which include: Web Protection Library (WPL) - an umbrella for several libraries and runtime modules including the Microsoft Anti-Cross Site Scripting Library v3.1 (Anti-XSS V3.1) and Security Runtime Engine (SRE), packaged together with Anti-XSS .. more »

Severity Rating: Critical - Revision Note: V1.0 (November 10, 2009): Bulletin published.Summary: This security update resolves a privately reported vulnerability in Microsoft Windows 2000. The vulnerability could allow remote code execution if an attacker sent a specially crafted network message to a computer running the License Logging Server. An .. more »

By continuing to include new variants of the existing threat families, the MSRT has removed malware from more than 1.5 million machines three days after its release on 10 November. This month weve also added to the MSRT detection and have removed these new rogues from more than 110,000 machines. A lot of the top threat families are no strangers if .. more »

“…There are two main scenarios for the interoperability of Forefront TMG and BranchCache: Forefront TMG and BranchCache are deployed on the same host. For a description of this scenario, see Forefront TMG and BranchCache Hosted Cache deployed on the same host. Forefront TMG or ISA 2006 are used as the network gateway to the corporate network, and .. more »

With the RTM of Forefront Threat Management Gateway (TMG), David Cross tells us about what's new and gives some real-world examples of how Microsoft IT has benefited from TMG over ISA 2006.  He also discusses the following: Why TMG only utilizes Microsoft signatures with the GAPA / NIS capab. more..... more »

Check out the 7 different courses that address the actual problems application developers and programmers face every day, including Developer 320: Introduction to the Microsoft Security Development Lifecycle (SDL). SANS is a member of the SDL Pro Network and also the largest trusted resource for security training and certifications in the .. more »

Avast! Antivirus is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition. Go here to see the original: .. more »

Online scammers get their teeth into unsuspecting victims Growing interest about the Twilight vampire series is making life risky for fans seeking information online, experts have warned. Security firm PC Tools documented a growing number of attacks and scams related to the popular book and movie series. The company expects such attacks to .. more »

“…REDMOND, Wash. — Nov. 2, 2009 — Microsoft Corp. today released the seventh volume of the Microsoft Security Intelligence Report (SIRv7), which indicates that worm infections in the enterprise rose by nearly 100 percent during the first half of 2009 over the preceding six months. Rogue security software remains a major threat to customers; however,.. more »

“This document contains both the Design Guide and the Deployment Guide for DirectAccess in Windows Server 2008 R2. These guides help you to design and deploy DirectAccess servers, DirectAccess clients, and infrastructure servers on your intranet. Use the Design Guide to answer the “What,” “Why,” and “When” questions a deployment design team mi.. more »

“…There are a number of auditing enhancements in Windows Server 2008 R2 and Windows 7 that increase the level of detail in security auditing logs and simplify the deployment and management of auditing policies. These enhancements include: Global Object Access Auditing. In Windows Server 2008 R2 and Windows 7, administrators can define comp.. more »