Just as they did last year, over thirty international security organisations have come together, to publish a list of the 25 most dangerous programming errors leading to vulnerabilities that can be exploited for cybercrime and espionage.

The Top 25 list is a tool for education and awareness to help programmers to prevent the kinds of vulnerabilities that plague the software industry, by identifying and avoiding all-too-common mistakes that occur before software is even shipped.

The 2010 CWE/SANS Top 25 Most Dangerous Programming Errors was published today listing the most widespread issues that lead to software vulnerabilities.
Mark Cox: "During the creation and review of the list we spent some time to see how closely last years list matched the types of flaws we deal with at Red Hat."

Don't worry about virus protection, now we'll cop a load of Security Services Cyber-Warriors when we boot up.

The Protecting Cyberspace as a National Asset Act of 2010 - introduced by Senators Lieberman, Collins, and Carper - will modernize the government's ability to safeguard the nation's cyber networks from attack and will establish a public/private partnership to set national cyber security priorities and improve national cyber security defenses.

"Failure to Preserve SQL Query Structure (aka 'SQL Injection')" appears at number 2 in the CWE/SANS TOP 25 Most Dangerous Programming Errors list published on February 16. And for good reason: SQL injection attacks pose a massive potential threat to your organization.

criminal activity committed through the internet .This is a broad term that describes everything from electronic cracking to denial of service attack that cause electronic commerce sites to loose money as well as precious data. Cyber crime s can be divided into three major categories:

Organizations of all sizes need to mitigate the risk of insider threats. Misconduct by authorized users represents a grave threat to an organization. According to the 2005 Computer Security Institute and Federal Bureau of Investigation Computer Crime and Security Survey, organizations reported that computer intrusions from inside sources accounted for nearly half of all incidents.

Latest OpenSSL FUD and Microsoft's Howard Schmidt's role informing the public about cyber-security risks