NIST Site Search
Google
Web NIST.org
NIST.gov
Product Research

Advertise on this site
Headlines

»Mac OS X ARDAgent Local Privilege Escalation
ARDAgent in Apple Mac OS X 10.5 and 10.4 allows local users to gain privileges via an osascript tell ...
»Creative Software AutoUpdate Engine ActiveX stack buffer overflow
The Creative Software AutoUpdate Engine ActiveX control is a component that provides automatic updat ...
»Internet Connection Sharing DoS
A denial of service vulnerability exists within the Internet Connection Sharing service in Microsoft ...
»RPC Memory Exhaustion
The three referenced exploits take advantage of an inherent problem in RPC, in which an attacker get ...


Date published: Thu, 20 Nov 2008 22:48:00 PST
Details

»IT security: Survey says it's better
A majority of federal decisionmakers surveyed about cybersecurity say they are more confident about ...
»Transition Watch: Cybersecurity challenges loom for Obama
Some tough cybersecurity tasks left over from the Bush administration will need the attention of the ...
»Linux gets Common Criteria certs
Oracle's Linux OS meets Common Criteria Evaluation Assurance Level 4+ and complies with the Controll ...
»GCN Lab Review: Norton Internet Security 2009
GCN Lab Review: Norton Internet Security 2009 is speedier than previous versions and fights malware, ...
»Coviello: Better times ahead for government IT security
New administration and a heightened awareness point to a new priority, according to RSA Security CEO ...
»NIST extends comment period for draft assistance in assessing security controls
An interagency work group is developing a set of examples to help IT administrators meet requirement ...
»Agency partnership improves mobile data security
The Data at Rest Tiger Team, DOD’s Enterprise Software Initiative and GSA’s SmartBuy are ...
»Unisys' Stealth Solution
Unisys Corp. has announced a new technology method for safeguarding the flow of sensitive data acros ...


Date published: Thu, 20 Nov 2008 20:01:28 GMT
Details

»Malicious Code Spreading Through USB Flash Drive Devices
»Adobe Releases Update for AIR
»Apple Releases Security Updates for Safari
»U.S. Federal Reserve Fraudulent Email Scam
»Mozilla Releases Updates to Address Vulnerabilities in Multiple Products
»Apple Releases iLife Support 8.3.1
»Microsoft Releases November Security Bulletin
»VMware Releases Security Advisory VMSA-2008-0018 and Updates VMSA-2008-0016.1
»Adobe Reader Exploit Circulating
»Microsoft Releases Advance Notification for November Security Bulletin


Date published: not known
Details

»News: Microsoft hopes free security means less malware
Microsoft hopes free security means less malware
»News: Researchers find more flaws in wireless security
Researchers find more flaws in wireless security
»News: Secure hash competition kicks off
Secure hash competition kicks off

>> Advertisement <<
Can you answer th ...
»News: You don't know (click)jack
You don't know (click)jack
»Brief: Brief study shows difficulty in detecting malware
Brief study shows difficulty in detecting malware


Date published: not known
Details

»HTTPOnly Fix In MSXML
I’m happy to announce that Microsoft has released MS08-069 today. It’s got a lot of cha ...
»Lifelock Protects You from Clickjacking
Well, now I’ve seen everything. Just when I didn’t think I could ever be amazed more by ...
»Security Expert Rehabilitation
In light of my last gloom and doom post, I wanted to turn the tables and add some humor. A while ba ...
»Apocalyptic Vulnerability Percentages - FUD 101
I’ve spent a long time in the trenches and recently I’ve been getting more and more jade ...
»More McAfee Snakeoil Ranting
I know a lot of people are just tired of the same old PCI ASV rant that really surfaced last year, b ...
»Clickjacking Details
Today is the day we can finally start talking about clickjacking. This is just meant to be a quick ...
»Tomcat SSL Fingerprinting
I ran into this a few weeks ago and I thought it was just so silly I had to post it. If you telnet ...
»OWASP Pelting
I’m already back in the airport after a long day over at the world OWASP conference in New Yor ...
»Clickjacking
There’s been a bit of drama over the last week or so around the upcoming world OWASP conferenc ...
»More Timing Precision Enhancements
Okay, so my last post on timing precision was interesting, but then I went back and started doing mo ...


Date published: not known
Details

»First, Figure Out the Online App, Then ...
»A Serious Gamer for the Obama Team
»Feds May Want Vendors to Vouch
»CACI Hires Former FBI CIO
»What If We're All the CTO?
»What should the CTO do?
»Former Feds Mentioned as Possible Federal CTO
»Abuzz Over the Federal CTO
»Are Staffing Troubles Brewing? Find Out
»Making the Google Government a Reality
»Lessons from Change.gov
»CIOs: Counselor vs. Value Seeker
»CTO Chatter Begins
»Defense's Looming Fiscal Crisis
»Technology We (Want to) Believe In


Date published: not known
Details

»T-025: Vulnerabilities in Microsoft XML Core Services
A remote code execution vulnerability exists in the way that Microsoft XML Core Services parses XML ...
»T-024: Vulnerability in Server Message Block (SMB)
A remote code execution vulnerability exists in the way that Microsoft Server Message Block (SMB) Pr ...
»T-023: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco P ...
»T-022: OpenOffice.org Security Vulnerabilities
Several vulnerabilities have been discovered in the OpenOffice.org office suite, in the WMF file par ...
»T-021: libspf2 DNS TXT Vulnerability
libspf2 contains a buffer overflow vulnerability in code that parses DNS TXT records. An SPF record ...
»T-020: Security Update for Adobe Reader 8 and Acrobat 8
Critical vulnerabilities have been identified in Adobe Reader and Acrobat 8.1.2 and earlier versions ...
»T-019: libxml2 Vulnerability
It was discovered that libxml2, the GNOME XML library, didn't correctly handle long entity names. T ...
»T-018: Vulnerability in Server Service
A remote code execution vulnerability exists in the Server service on Windows systems. The vulnerabi ...
»T-017: Gear Software CD DVD Filter Vulnerability
The Gear Software CD DVD Filter driver contains a privilege escalation vulnerability, which can allo ...
»T-016: iseemedia / Roxio / MGI Software LPViewer ActiveX Vulnerabilities
The iseemedia LPViewer ActiveX control contains multiple stack buffer overflows, which can allow a r ...
»T-015: InstallShield / Macrovision / Acresso FLEXnet Connect Vulnerabilities
Acresso FLEXnet Connect executes scripts that are insecurely retrieved from a remote web server, whi ...
»CIACTech08-003: Understanding Cross-Site Scripting (XSS)
Cross-Site Scripting has become an increasingly prevalent attack vector that can be leveraged to per ...
»CIACTech08-002: Understanding Windows Hash Dumpers and Crackers
Windows hash dumping tools are often spotlighted as hacker tools that can somehow magically extract ...
»CIACTech08-001: Understanding PHP Exploits
Many websites use the PHP programming language to build web pages on the fly from individual files a ...
»CIACTech07-001: MOICE - Microsoft Office Isolated Conversion Environment
A common cyber attack is to send a user an Office document (Word, Excel, PowerPoint) containing mal ...


Date published: not known
Details
Search NIST IT Security
Search For:   Enhanced Query Form
Search In:
 
Results 1 - 8 of 8 in Content
VirusTotal will scan a file for free using 22 different virus / spyware checkers
...ms, trojans, and all kinds of malware detected by antivirus engines. Specs: *Free, independent service *Use of multiple antivirus engines ...
Posted on Sunday 18 December 2005 - 22:00:00 in

Anti-Virus
Anti-Virus Whitepapers
Posted on Monday 19 December 2005 - 20:49:04 in

NIST SP 800-83 Guide to Malware Incident Prevention and Handling
...apability so that it is better prepared to handle virus / malware incidents, particularly widespread ones. The recommendations address several major f...
Posted on Saturday 14 January 2006 - 22:00:00 in

Lotus Notes vulnerable to MS Windows graphics rendering engine bug
...by both SANS.org and NIST.org, as well as several antivirus companies). Here is IBM's Technote on the matter. ----- Ori...
Posted on Monday 02 January 2006 - 22:00:00 in

NIST SP 800-43 Securing Microsoft Windows 2000 Professional System
...nts, Web browsers, productivity applications, and antivirus scanners. This list is not intended to be a complete list of applications to install on Wi...
Posted on Wednesday 07 December 2005 - 22:00:00 in

Microsoft’s Zero Day Event
...is a delivery mechanism. This is not a worm or a virus, the exploit has no way to travel to you like a network worm would. It needs a way to get you...
Posted on Sunday 04 December 2005 - 23:33:18 in

XSS Hall of Shame
... hear me now?” -- Rsnake {14} *www.rav.ro – Antivirus company. Reported at sla.ckers.org by maluc on 9/30/06 *www.grisoft.com – Antivirus co...
Posted on Monday 15 January 2007 - 00:00:00 in

NIST SP 800-69 (draft) Guidance for Securing Microsoft Windows XP Home Edition
...fense in depth. Thee protections include such as: antivirus software, antispyware software, a personal firewall, limited user accounts, and automatic ...
Posted on Monday 14 August 2006 - 21:44:16 in

Results in Links
No matches found
Results 1 - 10 of 68 in News
Free Online Antivirus, Spyware, and Firewall Scanners Review
...line virus and spyware scanning tools. // @@@antivirus, free, online, test, review, article, worm, firewall, personal, spyware, backdoor, trojan,...
Posted on Wednesday 27 December 2006 - 12:23:00

Apple's Video iPod Shipped with Windows Virus
...e, thumb, drive, vulnerabilities, nist, security, antivirus, press, release, Win32, RJump, a, Backdoor, Rajump, Jisx, worm, WORM_SIWEOL.B, Troj, Bdoor...
Posted on Tuesday 17 October 2006 - 16:58:11

New MS Trojan Bot Making the Rounds, Hides via Rootkit
...loit, vulnerability, code, windows, virus, worm , antivirus, irc, aim, aol, patches, signatures, definitions, sav, nav, mcafee, nist, security, bullet...
Posted on Friday 15 September 2006 - 13:47:39

Ransomware Will Win The War
The well respected Antivirus firm Kaspersky Lab is calling for a massive group effort to break the encryption used by the latest Ransomware. They're a...
Posted on Monday 16 June 2008 - 05:57:58

The bi-yearly Anti-Virus / Anti-Malware Test Results Are In.
...ottom wasn't even close. // @@@anti, virus, antivirus, malware, av, comparatives, on, demand, results, detection, polymorphic, viruses, script,...
Posted on Thursday 01 March 2007 - 21:34:01

Microsoft Has Released An Extremely Urgent Out of Band Windows Update
...atch, vulnerability, technet, ms08-067, firewall, antivirus, ips, ids, targeted, intrusion, prevention, detection, exploit, hackers, hacking, virus, b...
Posted on Thursday 23 October 2008 - 21:33:11

Yet another PowerPoint 0day Exploit (9-27-06)
...have quietly added protection for it to their own antivirus program without alerting the security community. // @@@powerpoint, office, 0day, zero...
Posted on Thursday 28 September 2006 - 03:50:10

JavaScript Worm Spreading through Yahoo
...orporate network and cause damage before the anti-virus and IDS applications receive updates. *See Symantec Security Response *Also see the SAN...
Posted on Monday 12 June 2006 - 05:05:04

Critical Symantec Antivirus 10.x Vulnerability
A remotely exploitable vulnerability exists within the Symantec 10.x Antivirus program. This flaw does not require any end user interaction to exploit...
Posted on Monday 29 May 2006 - 22:39:25

Sophos Anti-Virus Critical Vulnerabilities
...ical, nist, vulnerability, exploitable, remotely, antivirus, fix, update@@@ SANS.org is reporting that the vulnerability affects a number of Sop...
Posted on Thursday 11 May 2006 - 05:52:51

Go to page       >>  
Results 1 - 2 of 2 in Forum
As part of thread: Microsoft's 0day "window()" Arbitrary Code Execution Vulnerability
... is a delivery mechanism. This is not a worm or a virus, the exploit has no way to travel to you like a network worm would. It needs a way to get you ...
Posted by NIST.org on Tuesday 06 December 2005 - 16:18:17

As part of thread: WMF---Still vulnerable?
... Trojan-Spy.Win32.Goldun family, which will start to collect information from the site. http://www.f-secure.com/weblog/#00000778
Posted by Meehowski on Monday 16 January 2006 - 14:33:48

Results in Comments
No matches found
Results 1 - 1 of 1 in Other Pages
NIST Security Picks
Top Security Picks: Spampal - Free SPAM Control Kerio - Personal Firewall CounterSpy - Anti-Spyware NOD32 - Antivirus ...
Posted on Friday 31 March 2006 - 13:47:45

Results in Bugtracker2
No matches found
Translate to: French German Italian Spanish Portuguese GTM_LAN_DUTCH Russian Chinese Arabic Korean English
Google Ads




NIST Site Menu
·Home

Current Security News
 
SANS Internet Storm Center, InfoCON: green

» Infocon: green

» Large quantity SQL Injection mitigation , (Thu, Nov 20th)
[19 Nov 2008 09:00pm]

» How to Handle DDoS Incidents?, (Wed, Nov 19th)
[19 Nov 2008 08:58pm]

» An Ad for DDoS Services - Network, Phone, Competition, (Wed, Nov 19th)
[19 Nov 2008 08:57pm]

» Are We Doomed?, (Wed, Nov 19th)
[19 Nov 2008 03:38pm]

» 2 Cheat Sheets for Incident Handling, (Wed, Nov 19th)
[19 Nov 2008 11:40am]

» Security Awareness Training is Boring, (Wed, Nov 19th)
[19 Nov 2008 08:19am]

***

***

CNET News.com - Security

» Report: Obama's cell records improperly accessed
[20 Nov 2008 09:41pm]

» Phishing, e-mail money laundering scams on the rise
[20 Nov 2008 05:56pm]

» USB devices spreading viruses
[20 Nov 2008 05:10pm]

» British PM comments on NASA hacker Gary McKinnon
[20 Nov 2008 03:15pm]

» Is white listing going mainstream?
[20 Nov 2008 02:42pm]

» Video: Daily Debrief: Devising your Black Friday strategy
[20 Nov 2008 01:41pm]

» Certification credited with boosting online confidence
[20 Nov 2008 12:30pm]

» iTunes customers angry over copy protection moves at Apple
[19 Nov 2008 06:57pm]

» Security firm Finjan raises $22 million
[19 Nov 2008 04:21pm]

» Green Hills spins off Integrity operating system
[19 Nov 2008 03:32pm]

» Texas university launches security tech incubator
[19 Nov 2008 03:07pm]

» Antivirus firms shrug at Microsoft's free security suite
[19 Nov 2008 11:38am]

» How Live OneCare changed the antivirus landscape
[19 Nov 2008 09:14am]

» Will Microsoft's antivirus move draw antitrust fire?
[18 Nov 2008 04:17pm]

» Microsoft to offer free consumer security suite
[18 Nov 2008 03:28pm]

***
Computerworld Security News

» Bush's exit to put new e-records system to the test
[20 Nov 2008 10:00pm]

» Massachusetts extends compliance deadline on new data encryption rules
[19 Nov 2008 10:00pm]

» Opinion: Obama's BlackBerry is no security threat
[19 Nov 2008 10:00pm]

» Teenager pleads guilty to botnet, 'swatting' charges
[18 Nov 2008 10:00pm]

» How much does spam cost you? Google will calculate
[18 Nov 2008 10:00pm]

» Feds urged to provide cybersecurity incentives
[18 Nov 2008 10:00pm]

» More Security News

***


More IT Security
News Feeds
NIST - Books You Need

NIST Bookstore
RSS Feeds
Our news can be syndicated by using these rss feeds.
rss1.0
rss2.0
rdf
Add to NetVibes
Add to Bloglines
Add to NewsGator
Add to Google
Add to My Yahoo
Add to My MSN
Add to Technorati
Add to Pluckit
Add to My AOL
Subscribe in FeedLounge
Add to ProtoPage

Symantec News
Welcome
Username:

Password:


Remember me

[ ]
[ ]
[ ]

NIST.org is in no way connected to the U.S. government site NIST.gov

This site is © John Herron, CISSP. All Rights Reserved.

Please visit daily to stay up to date on all your IT Security compliance issues.

http://www.nist.org -
Hosted by BlueHost. We've never had a better hosting company.