Security Strategy, Plan, Budget

CVS Caremark must implement an information security program and obtain assessments of its effectiveness every other year for 20 years to settle federal charges.

The PCI Security Standards Council is soliciting feedback on its data security guidelines.

Information security presents a unique set of challenges, but it also can enable business, a new Microsoft survey says.

A new outbreak of spam claims to be a critical update for Microsoft Outlook, but the message really aims to infect users with the information-stealing trojan ZBot, security firm Trend Micro warned Monday.

Researchers have spotted a new variant of the RSPlug Mac trojan in the wild.

In 2009, virtually all health care providers take credit cards - and virtually none of them are PCI compliant.

Next week, Microsoft will make available to consumers a new, free anti-malware service to replace its subscription model.

Researchers at a web security firm have discovered what they term the latest milestone in the evolving cybercriminal underground: a one-stop-shop for hackers.