Welcome to the Microsoft Security Newsletter - a monthly newsletter for IT professionals and developers bringing security news, guidance, updates, and community resources direct to your inbox. To view an online version of this newsletter, please click here. If you would like to receive less technical security news, guidance and updates, please subscribe to the Microsoft Security for Home Computer Users Newsletter.
Viewpoint
|
|
By Steve Riley, Senior Security Strategist, Trustworthy Computing
Have you become a support professional outside of the workplace? Read this article and learn how to discuss security with your family, friends, and neighbors to better help them stay safe and secure online.
|
Top Stories
|
|
Learn how to add, manage, secure, and update Windows Mobile devices like you do Windows-based laptops and PCs. Microsoft System Center Mobile Device Manager 2008 provides robust security features and a comprehensive device management solution that helps safeguard your corporate data, reduce the cost and complexity of mobile deployments, and centralize and simplify Windows Mobile device management.
|
|
|
The technique of island hopping -- penetrating a network through a weak link and then hopping around systems within that network -- has been around for years, but it continues to take on new dimensions. This article discusses the beginning steps of using a USB flash drive to attack a network and why the least privilege approach really matters.
|
Security Guidance
|
|
Your biggest vulnerability is not necessarily your computers. It's your users. See how to educate them.
|
|
|
Microsoft Security at Home provides easy-to-understand guidelines to help people protect their computers, themselves, and their families.
|
|
|
Know a friend or family member with a small business? Help them assess what they know and what they ought to know about protecting their businesses from security risks.
|
|
|
Virus protection is a two-stage process. First, you need to educate your users, and then strengthen your network's security defenses. Review this checklist to see if your employees and systems are covered.
|
|
|
This article discusses what makes a strong password, password strategies to avoid, the importance of keeping passwords secret, and how to create a strong, memorable password in six easy steps.
|
|
|
Use this tool to help you gauge the strength of your password.
|
|
|
The Microsoft Windows Malicious Software Removal Tool checks computers running Windows Vista, Windows XP, Windows 2000, and Windows Server 2003 for infections by specific, prevalent malicious software -- including Blaster, Sasser, and MyDoom. It also helps remove any infection you find. When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed.
|
|
|
Detect computer vulnerabilities with the Microsoft Baseline Security Analyzer, a free tool that you can download and use to scan your stand-alone or networked computers for security vulnerabilities.
|
|
|
Although many companies focus on the security of their internal systems, it's important to examine the external supply chain as well. Here's how to work with business partners to establish a comprehensive security strategy.
|
|
|
Learn how to optimize two key encryption technologies already available to you in Windows XP and Windows Vista: the Encrypting File System (EFS) and Windows BitLocker Drive Encryption.
|
This Month's Security Bulletins
Critical:
Important:
MVP Update
|
|
Microsoft Enterprise Security MVP Debra Littlejohn Shinder is a technology consultant, trainer, and writer who has authored books about computer operating systems, networking, and security, and served as technical editor, developmental editor, and contributor for more than 25 technology books. She has also published hundreds of articles in TechRepublic, CNET, Windows & .NET Magazine/Windows IT Pro, ComputerWorld and other print and online publications.
|
|
|
By Deb Shinder, Co-owner, TACteam (Trainers, Authors, and Consultants)
In this article, MVP Deb Shinder continues the conversation and reminds IT pros to ensure that friends and family members recognize the importance of securing all devices that connect to their home networks.
|
Microsoft Product Lifecycle Information
Security Events and Training
|
|
See how Microsoft Forefront Client Security can help you protect business desktops, laptops, and servers from security threats, such as spyware, rootkits, and viruses with these webcasts, podcasts, and virtual labs. Learn how simplified deployment, management, and analysis features allow Forefront Client Security to integrate easily with your organization's IT infrastructure and help you keep your infrastructure secure.
|
|
|
Use the resources in this learning path to better understand how Windows Server 2008 is the most secure Windows Server ever, helping to protect networks with a hardened security platform. Plus, learn how Windows Server 2008 helps reduce network downtime by enforcing compliance with customized health policies.
|
Upcoming Security Webcasts
|
|
Tune in and learn how you can meet evolving business needs by continuously adapting your IT infrastructure to support new applications and capabilities. See how you can improve the security of your IT infrastructure with Microsoft integrated management and security solutions. During this series, we show you how the Microsoft Core Infrastructure Optimization (IO) Model can help you control costs, improve service levels, and increase business agility. We also explore identity and access management, desktop device and server management, security and networking, and data protection and recovery.
|
|
|
View upcoming security webcasts in a dynamic, interactive format.
|
For IT Professionals
For Developers
Microsoft On-Demand Webcasts
| • |
Microsoft Webcast: Improve and Simplify Mobile Device Security and Management
Securing and managing mobile devices across an enterprise poses many challenges for IT professionals. Learn how the Windows Mobile security and device management solution can help you deliver enterprisewide control, improve secure access to corporate data and line-of-business (LOB) applications, and simplify management of Windows Mobile devices across your business.
|
|