PCI security Code Review, Application Firewall and penetration testing

April 23, 2008

PCI Security Standards information supplements  provide further clarification for PCI DSS requirement 11.3, regarding penetration testing and Requirement 6.6, regarding application code review(security source code review) and application firewalls

Detailed information about the information supplements are available at https://www.pcisecuritystandards.org/tech/supporting_documents.htm

Information about press release is available at https://pcisecuritystandards.org/pdfs/04-22-08.pdf

Microsoft latest patches

April 22, 2008

Microsoft Issues eight security patches for April 2008

MS08-018: Vulnerability in Microsoft Project Could Allow Remote Code Execution

MS08-019: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution

MS08-020: Vulnerability in DNS Client Could Allow Spoofing

MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution

MS08-022: Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution

MS08-023: Security Update of ActiveX Kill Bits

MS08-024: Cumulative Security Update for Internet Explorer

MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege
 

Hello world!

Welcome to Security News Blog From Kiran Maraju