Jeremy Kirk

Time hasn't improved the ability of organizations to patch their software. A vendor claims it still takes about a month for half of the world's computers to be fixed after a patch is issued, not much of a change over the last four years

A Vietnamese security firm uncovers a malware that is able to thwart Google's optical character recognition-based security feature and flood Gmail's registration page with fictitious names

CFOs concerned about speedy deployment often overlook the importance of SAP security. A beefed up version of test tool Sapyto enables users to carry out more thorough SAP systems security tests

Attacker would need a working exploit first, but then could remotely read text messages and other data, says hacker Charlie Miller

Wily worm reprogrammed to contact MySpace.com, MSN.com, Ebay.com, CNN.com and AOL.com to infect more machines

Independent security company Secunia has given the vulnerability its highest-risk ranking. Microsoft has not yet released a patch for the bug

Facebook says it wants its next CFO to have public company experience. Applicants may apply online

Google's search rankings are being manipulated in order to trick people into downloading bad software