Security Tips & Talk

Microsoft argues for cloud computing security

Marcelle Amelia — Mon, 08 Feb 2010 14:17:00 GMT

These days we store more and more information not on our computers but on the Internet, or in the cloud. Cloud computing can be used in all kinds of ways, such as for Web-based e-mail or large, corporate content management systems. Recently, Microsoft General Counsel Brad Smith travelled to Washington D.C. to urge Congress to enact legislation that would protect information that’s stored in the cloud. In his blog on the Huffington Post Web site, Smith says, “We need a safe and open cloud—a cloud that is protected from the efforts of thieves and hackers while also serving as an open source of information to all people around the world.”

Microsoft’s proposed legislation calls for:

•	Reforming the Electronic Communications Privacy Act.
•	Modernizing the Computer Fraud and Abuse Act.
•	Helping consumers and businesses manage how their information is collected and shared.
•	Addressing data access issues globally.

To read a transcript or to watch a video clip of Smith’s speech, see Building Confidence in Cloud Computing.

For more information about Microsoft’s approach, see Privacy in the Cloud.

Be careful with Valentine's Day e-greetings

Marcelle Amelia — Fri, 05 Feb 2010 09:44:00 GMT

Valentine’s Day is right around the corner and these days it’s very common to send Valentine wishes electronically. Electronic greetings can save time, paper, and postage and can contain go beyond the standard heart-shaped doily with music and animation. However, some e-greetings can spread malicious software or be used for identity theft.

Here are a few tips on how to send and receive e-greetings more safely.

Recognize the sender of the e-greeting. If you don't know the sender, do not trust the greeting. Legitimate companies have standard, obvious ways for you to recognize that an e-greeting is not a fraud.

For example, with MSN Greetings, the "from" area in the message header always shows "Ecard from MSN Greetings" as the display name and "ecards@msn.americangreetings.com" as the e-mail address.

Make sure you check both the display name and e-mail address of the sender.
When in doubt, use alternative viewing methods. Do not click any links when you are not sure of the sender or intent of an e-mail message.

For example, if you use MSN Greetings, you can view your greeting on the MSN Greetings Web site. Type "msn.americangreetings.com" into your Web browser and click the link in the upper right-hand corner that says “ecard pickup.”
Never download or click anything from an unknown source.
Use antivirus and antispyware software that updates automatically, like Microsoft Security Essentials.

For more information on how to send e-greetings more safely and how to avoid other e-mail scams, see Phishing scams that target interests, activities, and news events.

What is the Microsoft Security Development Lifecycle?

Marcelle Amelia — Tue, 02 Feb 2010 06:20:00 GMT

The Security Development Lifecycle (SDL) establishes security and privacy throughout the Microsoft development process. SDL has proven to be effective in making flagship Microsoft products more resilient to security and privacy threats and to better protect Microsoft customers from malicious and costly attacks.

For more information on SDL see:

· Learn about the SDL process

· Get SDL training resources

· Read about the history of the SDL at Microsoft

· Find out how to reduce the total cost of development with SDL

· SDL: Frequently asked questions

What does your online reputation say about you?

Marcelle Amelia — Thu, 28 Jan 2010 22:59:00 GMT

A few weeks ago we told you about Microsoft’s involvement in Data Privacy Day. The day has arrived, but if you’re not going to be in Washington D.C. to join in the event, you can download research or watch a video about online reputations and how employers are increasingly mining the Internet as part of the formal hiring process.

For more information, see Think Privacy: Your Reputation is ON the LINE.

Download out-of-band security update for Internet Explorer

Marcelle Amelia — Thu, 21 Jan 2010 10:25:00 GMT

Today Microsoft released an out-of-band security update for Internet Explorer to fix vulnerabilities that could allow someone to execute malicious code onto your computer.

Most security updates are released on the second Tuesday of the month. Out-of-band security updates are released before or after a regular monthly update release to address a time-sensitive security issue.

If you have automatic updating turned on, the security update will be downloaded and installed automatically and you will not need to take any action.

If you do not have automatic updating turned on, visit Microsoft Update and then see instructions below about how to configure automatic updating.

For more technical information about the update, see Microsoft Security Bulletin MS10-002 – Critical.

Turn on automatic updating in Windows 7 and Windows Vista

1. Open Windows Update by clicking the Start button . In the search box, type Update, and then, in the list of results, click Windows Update.

2. In the left pane, click Change settings.

3. Under Important updates, choose the option that you want.

4. Under Recommended updates, select the Give me recommended updates the same way I receive important updates check box, and then click OK. If you're prompted for an administrator password or confirmation, type the password or provide confirmation.

Turn on Automatic Updates in Windows XP (SP2)

5. Click Start, and then click Control Panel.

6. Click Automatic Updates.

7. Choose Automatic (recommended).

Upgrade to Internet Explorer 8 to help protect your computer

Marcelle Amelia — Tue, 19 Jan 2010 13:00:00 GMT

Microsoft has determined that one of the technologies used in the recent criminal attacks against Google and other corporate networks was Internet Explorer 6. Customers using Internet Explorer 8 are not affected by currently known attacks.

We recommend that anyone not already using Internet Explorer 8 upgrade immediately. Internet Explorer 8 offers many additional security protections. Upgrade to Internet Explorer 8

If your computer has Windows XP, we recommend that you upgrade to Service Pack 3 to gain the maximum protection available. Be sure you also upgrade to Internet Explorer 8.

Microsoft teams are continuing to work on a comprehensive security update that will address this vulnerability. We will take appropriate action to protect customers when the update has met the quality bar for broad distribution.

Learn more about this topic by watching a video of Jerry Bryant, Microsoft Senior Security Communications Manager.

For more information, see the recent security advisory. See the Suggested Actions section at the bottom of the Advisory for steps you can take.

For more information about how to protect your PC, go to www.microsoft.com/security.

Avoid Haiti donation scams

Marcelle Amelia — Fri, 15 Jan 2010 06:30:00 GMT

In the wake of the devastating earthquake in Haiti, people from all over the world have been moved to donate money to relief organizations. Unfortunately, scammers have already begun to take advantage of people’s goodwill. If you plan to donate online, beware of scams and hoaxes.

Tips on how to avoid a donation scam:

1. Use trusted donation Web sites, such as The Red Cross.

2. Do not click links in donation e-mail messages. Type the Web address directly into your browser instead.

3. Before you donate money online, make sure the site is secure. The Web address should begin with https. The s stands for secure.

4. Watch out for scams in e-mail messages, on social networking sites like Facebook and Twitter, and even in Web site search results.

For more information, see How to avoid online donation scams.

Share this post :

Microsoft sponsors privacy event in Washington, D.C.

Marcelle Amelia — Thu, 14 Jan 2010 22:53:00 GMT

If you plan to be in the Washington D.C. area on Thursday, January 28th, come celebrate Data Privacy Day and join us for an event sponsored by Microsoft and hosted by The Future of Privacy Forum. The event will focus on online reputations and their impact on people's lives. Attendees will hear how the Human Resources and recruitment community view online reputations, and the impact it could have on you.

What is Data Privacy Day?

Data Privacy Day is dedicated to helping people understand how their personal information is collected, stored, used, and shared online. Microsoft participates in Data Privacy Day to help customers keep their personal information from being misused and to help increase online privacy for everyone.

Data Privacy Day is celebrated on January 28th in the United States, Canada, and 27 European countries to raise awareness and generate discussion about data privacy and protection.

Data Privacy Day 2010 is a division of The Privacy Projects, a nonprofit think tank and research organization dedicated to the promotion of privacy standards and shared responsibility for individual data protection and commercial management of personal information.

Visit the Microsoft Data Privacy Day Web site for privacy and online reputation resources.

For more information about the Data Privacy Day worldwide initiative, see Data Privacy Day 2010.

Share this post :

Microsoft releases one security update for Windows

Marcelle Amelia — Tue, 12 Jan 2010 06:47:00 GMT

Microsoft releases security updates on the second Tuesday of every month. Today Microsoft released 1 new security update for Microsoft Windows.

Get the updates

To download the update, visit the Microsoft Update Web site. If you have automatic updating turned on, your computer will update and install this security update.

Plagued by the Privacy Center? Learn how to remove it

Marcelle Amelia — Tue, 12 Jan 2010 00:27:00 GMT

Privacy Center is not Microsoft software. It’s a new form of fake antimalware software (also known as rogue security software) that pretends to help protect your computer, but is really a new form of spyware. It can slow down your computer and damage your files.

To remove the Privacy Center, download and use Microsoft Security Essentials, Microsoft Windows Defender, the Windows Live safety scanner, or another up-to-date scanning and removal tool.

For more technical information, see the Microsoft Malware Protection Center: Win32/Privacy Center.

Here are images of Privacy Center:

Share this post :

Reviewers like Microsoft Security Essentials

Marcelle Amelia — Mon, 11 Jan 2010 06:14:00 GMT

Lately we’ve been recommending that you to download our new free antivirus and antispyware software called Microsoft Security Essentials. Read what others are saying about it.

The Lifehacker blog recently called Microsoft Security Essentials “a great antivirus application” and told readers that they could stop paying for other antivirus software suites and download the free Microsoft Security Essentials instead. Read the full article.

In their Microsoft Blog, the Seattle PI cited a report that said that Microsoft Security Essentials ran faster and tested better than Symantec and McAfee. Read the full article.

For more information and to download the software, go to Microsoft Security Essentials.

Share this post :

Experts say Microsoft has improved update process

Marcelle Amelia — Fri, 08 Jan 2010 06:06:00 GMT

Network World reports that Microsoft has improved the security update process and is getting better at sharing information with the public about security. In particular, NetworkWorld cites the Security Research and Defense Blog and the Microsoft Security Response Center Blog as great resources for network administrators and other IT professionals.

For more information, see Microsoft getting better at patch Tuesday updates, experts say.

Products that help protect you from fraud

Marcelle Amelia — Thu, 07 Jan 2010 06:10:00 GMT

Identity theft is on the rise and The New York Times recently reviewed several new products that might help protect against this kind of fraud. Some new services will notify you if a credit card or change of address form has been filed with your name. Others let you find out if your sensitive personal information is vulnerable to attack.

Microsoft has identity theft tools built into many of its products. For example, Internet Explorer 8 helps you identify fake Web sites with Extended Validation Certificates and the SmartScreen Filter. And Windows Live Hotmail lets you click a button to report suspected phishing e-mail messages.

For more information on how to use Microsoft products to help protect you and your family from fraud, see Microsoft Online Safety: Fraud Protection.

Share this post :

Free antivirus software from Microsoft: now available worldwide

Marcelle Amelia — Wed, 06 Jan 2010 06:02:00 GMT

Last fall Microsoft unveiled Microsoft Security Essentials—fast and free anti-malware software that offers real-time protection from viruses, spyware, worms, and more. Last month, Microsoft made the software available in 17 additional markets, bringing the total number of available markets to 56.

The additional countries include: Algeria, Bahrain, Egypt, India, Jordan, Kuwait, Lebanon, Morocco, Oman, Pakistan, Qatar, Romania, Russia, Saudi Arabia, South Africa, Tunisia, and the United Arab Emirates.

Microsoft also made Microsoft Security Essentials available in two additional languages— Russian and Romanian—increasing the total number of supported languages from 9 to 11.

Microsoft Security Essentials offers quiet protection that doesn’t interfere with your daily computing tasks.

For more information and to download the software, visit the Microsoft Security Essentials Web site.

Share this post :

Follow our online safety team on Twitter

Marcelle Amelia — Wed, 16 Dec 2009 05:09:00 GMT

If you like to keep up-to-date on online security and you’re on Twitter, you might want to follow our online safety team.

Here’s a sampling of what you’ll get:

· Quick tips on how to stay safe online

· Links to our latest articles, brochures, and videos

· Retweets from some of most popular online safety experts on the Internet.

To follow us, go to http://www.twitter.com/Safer_Online.

Want to learn more about how to use Twitter with Microsoft products? See Connect with others using Windows Mobile and Twitter, Twitter on Xbox, and How to Twitter in Outlook.