The anti-malware market is mature, Microsoft is driving prices down and the major vendors in this space have to move in to other areas, like risk management, asset management, and data loss protection to keep growing.

For sure the continued spread of the Storm Worm to blogs and YouTube
is a good indication is just going to become more of a problem. Until security vendors come up with solutions to social engineering attacks we're probably going to see only marginal improvements in anti-malware techniques, real gains will come from better implementation of multi-layered defenses and better vulnerability management.

Monster.com is just the latest in high profile data breaches, and like the TJX breach, in which the initial reports underestimated the scope of the breach. Reuters is reporting:

While investigating the recent theft, the company learned that its Web site had previously been hacked.

"We're assuming it is a large number. It could easily be in the millions," [Monster Cheif Executive] Iannuzzi said in an interview with Reuters.

To be safe, he said, each Monster.com user should assume that his or her contact information has been taken.

If there are any company boards left that haven't responded to regulation compliance with better security management, news like this will drive them to seek tools for database monitoring, data loss prevention and vulnerability assessment. Thats where the center of gravity in the security market is heading.