security development lifecycle

The creativity and resourcefulness of the criminal underground never ceases to amaze me. Granted, these guys have nothing else to do but sit around and come up with new scams, but still, some of these things are truly inspired. Have a look at this Google AdWords phishing scam that has been showing up in recent [...]  read more »

Several years ago, the idea of hiring security researchers to work at large software companies was something of a novelty. Vendors such as Microsoft, Oracle Corp., IBM and others took a dim view of this, reasoning that there was no way to know whether someone who was prone to breaking their applications could be trusted [...]  read more »