- SophosSupport: New Sophos Complete Security Suites: endpoint, data, email, web, mobile & groupware protection—on one license: http://t.co/13FVvp42about 2 hours ago
- SophosSupport: Scheduled Downtime. SophosTalk may be down for up to 2 hours today May 16, 2012 between 12:01am & 4:00am PDT (GMT -7:00) for scheduled work.about 2 hours ago
- gcluley: RT @NakedSecurity: Global Payments breach continues to bewilder, accusations abound http://t.co/AI64bgeeabout 3 hours ago
- duckblog: Congrats to #sophospuzzle winners at #auscert - David Zielezna and Phil Kernick - one prize still open to all online.about 5 hours ago
- duckblog: #sophospuzzle Stage 2 hint/discovery: if using simulation, even C's rand() with just 100,000 sample hands is about good enoughabout 11 hours ago
Windows 7
Patch Tuesday Valentine's 2012
Patch Tuesday July 2011 - 4 updates, 22 bugs
Windows 7/Windows 2008 R2 Service Pack 1 officially launched
New Windows zero-day flaw bypasses UAC
5 tips to protect Windows 7 and happy Labor Day
Ever since I wrote about the fact that most malware works just fine in Windows 7 I am frequently asked for the other side of the story. Fortunately Maria Varmazis was in our Vancouver office recently and asked me to Read more…
Microsoft addresses recent DLL order of operations flaw
Microsoft released an advisory this week discussing bad practices in DLL loading that could lead to remote exploitation. They have released a tool that can help mitigate the risk, but the real solution is for developers to patch their applications Read more…
Huge Patch Tuesday - Act now
This month's Patch Tuesday is enormous. The good news? Few, if any, of these exploits are currently being exploited in the wild. The bad news? If history teaches us anything it is only a matter of time. Microsoft released 14 Read more…
Windows zero-day vulnerability uses shortcut files on USB
The security community was buzzing today about a potential new zero-day vulnerability in Windows. The attack that exploits the vulnerability was originally discovered by VirusBlokAda in Belarus. It contains several components and is still being analyzed by SophosLabs. It starts Read more…
Patch Tuesday insecurity news and SSCC 18
For those administrators anxiously awaiting a fix for the zero day flaw in Windows Help Center disclosed by Tavis Ormandy last month your patch is ready. Microsoft released four patches today and their standard summary with priority and severity ratings. Read more…
Microsoft's new 0 day flaws, upcoming patches and retirements
On the threat and vulnerability front Microsoft is dominating the headlines today. With patch Tuesday around the corner, new 0 day exploits being disclosed and the upcoming retirement of several major OS releases I figured it was a good time Read more…
Apple Java update, MS advisory and SSCC 10
Apple has released an update today for OS X 10.5 and 10.6. Java 1.6 update 18 patches more than 28 vulnerabilities in the Oracle (Man that sounds weird) Java runtime environment. In this case Apple only took five months to Read more…
CanSecWest 2010 Day 1
As a Vancouverite it always seemed to be a bit of a shame that I have never attended a CanSecWest conference. This year I am here, the 11th annual CanSecWest conference, and I would like to thank Dragos Ruiu for Read more…
Windows 7 - Podcast, webcast and Q & A
Podcast Michael Argast, Sophos Head of Global Sales Engineering, and I have finished our two-part podcast on Windows 7. In this segment we discuss AppLocker, BitLocker, BitLocker To Go and UAC. Download and listen to the Sophos podcast "Windows 7 Read more…
Windows 7 podcast - IE security enhancements
Michael Argast, Head of Global Sales Engineering, and I sat down to discuss the implications of all the new security functions available in Windows 7. This will be a multi-part series of podcasts providing insight into what has changed, and Read more…
Seven for 7: Best practices for implementing Windows 7
Jonathan Tait at Sophos UK has been working for some time with the teams at Sophos and Microsoft to produce this whitepaper on Windows 7. I am proud to introduce it to you as we've put a lot of effort Read more…
Microsoft introduces DEP into Office 2010
On Thursday, February 4th, Vikas Malhotra of Microsoft's Trustworthy Computing Team blogged about the introduction of Data Execution Prevention (DEP) to Microsoft Office 2010. For those of you not familiar with DEP it is a technology that marks which of Read more…
5 Best Practices to Protect Windows 7 Computers
I'd like to invite all of you to join me for a webcast I am doing Feb 24th, 2010 with TechRepublic titled "5 Best Practices to Protect Windows 7 Computers". This webcast will be broadcast 2:00 PM ET / 11:00 Read more…
Windows 7 vulnerable to 8 out of 10 viruses
Now that we in the northern hemisphere have had some time to digest the Windows 7 hype and settle in for the coming winter, we thought we would get some more hard data regarding Windows 7 security. On October 22nd, Read more…
Is Windows 7 safe? Sophos is ready, are you?
October 22nd, 2009 is the official public launch of Microsoft Windows 7. Those of us in the software development, hardware, and large enterprise space have had access to it for a few months now. We have been working to put Read more…
Sophos - ready for Windows 7
People around the world are about to get the opportunity to purchase and install Windows 7 (in fact, some members of the public have already received and reviewed it), so you may well be interested in whether you can protect Read more…

