Jon's Network

Former Gartner analyst Rich Mogull now has an “open-source” analyst firm, Securosis. One of their projects, Project Quant, hopes to develop a model that accurately reflects the costs associated with patch management.

They have a 20 question survey to learn more about real-world patch processes. If you think you can offer some helpful information, [...]

[Read more →]

How effective is antivirus software if the computer doesn’t have the latest patch updates?

Secunia tested 12 Internet security suites (PDF report) and found them all wanting. Symantec came in first, but it only detected 64 out of 300 exploits.

This suggests that McAfee, Norton, Windows OneCare, ZoneAlarm, AVG, CA, F-Secure, TrendMicro, BitDefender, Panda, [...]

[Read more →]

Patchlink took my advice – sort of. I suggested changing their name to SecureLink after acquiring SecureWave and STAT, but they chose Lumension Security instead.

Their tagline, “Putting Security in a Positive Light”, is a reference to their endorsement of the positive security model they inherited from SecureWave’s Sanctuary, their “application and device [...]

[Read more →]

UPDATE: More on the Patchlink name change here

Patchlink has announced that they will acquire SecureWave, which adds endpoint security to their recent acquisition of the vulnerability scanner STAT Guardian (now Patchlink Scan), and their existing prowess at automated patch management. Last Fall, I told Patchlink that Bit9 would be a good buy for them, [...]

[Read more →]