A report issued by The SANS Institute finds enterprise security efforts focused on fixing low-priority flaws at the expense of serious application vulnerabilities.
Article link
Sans free webcasts for July: Virtual Roundtable; When You're Holding a Hammer, Everything Looks Like a Nail: Avoiding the Hype and Making Good Technology Decisions; Managing Change and Event Monitoring for Sustainable NERC CIP Compliance; HP Handles Cloud Application Security; Finding the Root Cause of Any Security Alert - Fast; Top Ten Virtualization Security Mistakes and How To Avoid Them