I’m glad to see more companies working to improve privacy policies for mobile developers. Great quote from this article. "Your personal privacy should not be the cost of using mobile apps, but all too often it is….”California Attorney General Kamala...

Security Development Conference 2012   www.securitydevelopmentconference.com Registration for the Security Development Conference is now LIVE! Early Bird Registration: $300 May 15-16, 2012 |Washington. D.C. EVOLVING FROM PRINCIPLES TO PRACTICES Industry...

Financial Services Industry Employs Microsoft SDL In New Secure Software Model - Dark Reading   This is really nice to see. For those of you who are not familiar with BITS, BITS is the technical policy arm for the Financial Services Roundtable. The...

Slammed And Blasted A Decade Ago, Microsoft Got Serious About Security | threatpost   Great article on Threatpost that summarizes how far we’ve come as a company  dealing with Security Challenges 10 years ago. Tim Rains, from Microsoft Trustworthy...

The Evolution of Elevation - Threat Modeling, Microsoft | TechNet   Cool article by Dana Epp, Scorpion Software Corporation. Dana provides a great write up on threat modeling  and Microsoft’s approach to threat modeling over the last few years...

The worms are back in full force. Check out the threat landscape in India. Five of the top ten families of threats in India are worms.  Tim Rains does a great job of articulating the threat our industry faces from malware. If you work in today’s...

“In the U.S., for contracts with health-care companies that have to comply with the Health Insurance Portability and Accountability Act (HIPAA), Microsoft will include Business Associate Agreement (BAA) contract provisions drafted by the U.S. Department...

Making sure everyone saw another great blog post by Tim Rains. Tim provides some great information on Drive-By Download Attacks and how they work. for this blog post, Tim focuses on how these exploits are distributed by web pages, and the use of “exploit...

Wow! That’s all I have to say. Thank you Fred Stock for the very nice compliment on our Microsoft SDL! George  RSA Conference: Fred Stock: Secure Habits: Microsoft Security Development Lifecycle Process

Tim Rains does a great write up on locations with the greatest malware infection rates. From the article, Tim writes, “It would seem that many systems in Qatar are configured with a system location setting, set to something other than “Qatar”. This suggests...

Very cool article by Tim Rains on Malware infection rate data. For those of you who remember Tim, Tim wrote the world renowned port query tool . Determining the Geolocation of Systems Infected with Malware - Microsoft Security Blog - Site Home - TechNet...

We launched the SDL Industry Talk site last week, and we’re slowly getting some good press coverage on this. Site.   New Security Development Lifecycle Industry Talk Wall Now Live – Softpedia   Every now and then we get asked by conference attendees...

Great blog post by Steven Sinofsky from the Windows division, reminding folks that Windows 8 is going to be built using the Microsoft SDL.  From the blog post:   Secure by design We use the Security Development Lifecycle (SDL) to build Windows...

Threatpost coverage of our August SDL security tools release. Microsoft Releases New Versions of Software Security Tools | threatpost

Monty LaRue and the SDL Engineering team today released updates to the SDL threat modeling tool, MiniFuzz, and RegEx Fuzzer. The SDL tools have been downloaded over 700,000 times over the last year. Microsoft’s SDL tools and SDL process guidance are free...

Great article on the press coverage around Microsoft. Bottom Line is UP Front (BLUF) on this article. quote, “Takeaway: If you read some of the recent headlines, you might think Microsoft was on the brink of bankruptcy. In reality, the company posted...

Matt Miller did a great job writing this white paper. I know that a bunch of folks in our Chief Security Officer (CSO) council were looking forward to reading this, so here it is. You can find this on the SRD blog below. Mitigating Software Vulnerabilities...

Great article on a company that organically implemented the Microsoft Security Development Lifecycle (SDL) on their own using our SDL process guidance and tools. To learn more about the Microsoft SDL, visit our website .   “"Microsoft was really...

  Great blog post on what has been done to date to battle the Rustock botnet. For the full story, be sure to read today’s post on The Official Microsoft Blog by Richard Boscovich, senior attorney in Microsoft’s Digital Crimes Unit.   Battling...

  Quote, “Businesses are unnecessarily exposing themselves to cyber attack simply by failing to update to the latest versions of the software they are running, according to Microsoft and Adobe. Both software companies are developing products using...

  I love it when my company does something really worthwhile. Go Microsoft. Facebook to Use Microsoft’s PhotoDNA Technology to Combat Child Exploitation - Microsoft on the Issues - Site Home - TechNet Blogs

  Very cool blog post by Soma Somasegar. Happy 1st Birthday, Visual Studio 2010! - Somasegar's WebLog - Site Home - MSDN Blogs

  Thinking of breaking into Google's datacenters to steal information? Think again. Google Airs Its Cloud Security -- Redmondmag.com

  “Oracle's lawyers probably want to show to the court that Apache has always been aware of the fact that it actually needed a license from Oracle/Sun for its Harmony project,” Mueller said. “ This can be an indication that there is indeed an infringement...

  “Visual Studio 2010 Service Pack 1 is a reminder that beta software isn't good for production systems. If you haven't installed anything suspect on your computer, your upgrade should be painless.” Visual Studio 2010 SP1: What's in It for You -...