NIST IT Security: Search

NIST Site Search

Product Research

Advertise on this site

Headlines

eEye Digital Security - Zero-Day Tracker

»	Mac OS X ARDAgent Local Privilege Escalation ARDAgent in Apple Mac OS X 10.5 and 10.4 allows local users to gain privileges via an osascript tell ...
»	Creative Software AutoUpdate Engine ActiveX stack buffer overflow The Creative Software AutoUpdate Engine ActiveX control is a component that provides automatic updat ...
»	Internet Connection Sharing DoS A denial of service vulnerability exists within the Internet Connection Sharing service in Microsoft ...
»	RPC Memory Exhaustion The three referenced exploits take advantage of an inherent problem in RPC, in which an attacker get ...

Date published: Thu, 20 Nov 2008 20:47:00 PST
Details

GCN.com IT Security News

»	IT security: Survey says it's better A majority of federal decisionmakers surveyed about cybersecurity say they are more confident about ...
»	Transition Watch: Cybersecurity challenges loom for Obama Some tough cybersecurity tasks left over from the Bush administration will need the attention of the ...
»	Linux gets Common Criteria certs Oracle's Linux OS meets Common Criteria Evaluation Assurance Level 4+ and complies with the Controll ...
»	GCN Lab Review: Norton Internet Security 2009 GCN Lab Review: Norton Internet Security 2009 is speedier than previous versions and fights malware, ...
»	Coviello: Better times ahead for government IT security New administration and a heightened awareness point to a new priority, according to RSA Security CEO ...
»	NIST extends comment period for draft assistance in assessing security controls An interagency work group is developing a set of examples to help IT administrators meet requirement ...
»	Agency partnership improves mobile data security The Data at Rest Tiger Team, DOD’s Enterprise Software Initiative and GSA’s SmartBuy are ...
»	Unisys' Stealth Solution Unisys Corp. has announced a new technology method for safeguarding the flow of sensitive data acros ...

Date published: Thu, 20 Nov 2008 20:01:28 GMT
Details

US-CERT Current Activity

»	Malicious Code Spreading Through USB Flash Drive Devices
»	Adobe Releases Update for AIR
»	Apple Releases Security Updates for Safari
»	U.S. Federal Reserve Fraudulent Email Scam
»	Mozilla Releases Updates to Address Vulnerabilities in Multiple Products
»	Apple Releases iLife Support 8.3.1
»	Microsoft Releases November Security Bulletin
»	VMware Releases Security Advisory VMSA-2008-0018 and Updates VMSA-2008-0016.1
»	Adobe Reader Exploit Circulating
»	Microsoft Releases Advance Notification for November Security Bulletin

Date published: not known
Details

SecurityFocus News

»	News: Microsoft hopes free security means less malware Microsoft hopes free security means less malware
»	News: Researchers find more flaws in wireless security Researchers find more flaws in wireless security
»	News: Secure hash competition kicks off Secure hash competition kicks off >> Advertisement << Can you answer th ...
»	News: You don't know (click)jack You don't know (click)jack
»	Brief: Brief study shows difficulty in detecting malware Brief study shows difficulty in detecting malware

Date published: not known
Details

ha.ckers.org web application security lab

»	HTTPOnly Fix In MSXML I’m happy to announce that Microsoft has released MS08-069 today. It’s got a lot of cha ...
»	Lifelock Protects You from Clickjacking Well, now I’ve seen everything. Just when I didn’t think I could ever be amazed more by ...
»	Security Expert Rehabilitation In light of my last gloom and doom post, I wanted to turn the tables and add some humor. A while ba ...
»	Apocalyptic Vulnerability Percentages - FUD 101 I’ve spent a long time in the trenches and recently I’ve been getting more and more jade ...
»	More McAfee Snakeoil Ranting I know a lot of people are just tired of the same old PCI ASV rant that really surfaced last year, b ...
»	Clickjacking Details Today is the day we can finally start talking about clickjacking. This is just meant to be a quick ...
»	Tomcat SSL Fingerprinting I ran into this a few weeks ago and I thought it was just so silly I had to post it. If you telnet ...
»	OWASP Pelting I’m already back in the airport after a long day over at the world OWASP conference in New Yor ...
»	Clickjacking There’s been a bit of drama over the last week or so around the upcoming world OWASP conferenc ...
»	More Timing Precision Enhancements Okay, so my last post on timing precision was interesting, but then I went back and started doing mo ...

Date published: not known
Details

Tech Insider

»	First, Figure Out the Online App, Then ...
»	A Serious Gamer for the Obama Team
»	Feds May Want Vendors to Vouch
»	CACI Hires Former FBI CIO
»	What If We're All the CTO?
»	What should the CTO do?
»	Former Feds Mentioned as Possible Federal CTO
»	Abuzz Over the Federal CTO
»	Are Staffing Troubles Brewing? Find Out
»	Making the Google Government a Reality
»	Lessons from Change.gov
»	CIOs: Counselor vs. Value Seeker
»	CTO Chatter Begins
»	Defense's Looming Fiscal Crisis
»	Technology We (Want to) Believe In

Date published: not known
Details

CIAC Updates

»	T-025: Vulnerabilities in Microsoft XML Core Services A remote code execution vulnerability exists in the way that Microsoft XML Core Services parses XML ...
»	T-024: Vulnerability in Server Message Block (SMB) A remote code execution vulnerability exists in the way that Microsoft Server Message Block (SMB) Pr ...
»	T-023: Multiple Vulnerabilities in Cisco PIX and Cisco ASA Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco P ...
»	T-022: OpenOffice.org Security Vulnerabilities Several vulnerabilities have been discovered in the OpenOffice.org office suite, in the WMF file par ...
»	T-021: libspf2 DNS TXT Vulnerability libspf2 contains a buffer overflow vulnerability in code that parses DNS TXT records. An SPF record ...
»	T-020: Security Update for Adobe Reader 8 and Acrobat 8 Critical vulnerabilities have been identified in Adobe Reader and Acrobat 8.1.2 and earlier versions ...
»	T-019: libxml2 Vulnerability It was discovered that libxml2, the GNOME XML library, didn't correctly handle long entity names. T ...
»	T-018: Vulnerability in Server Service A remote code execution vulnerability exists in the Server service on Windows systems. The vulnerabi ...
»	T-017: Gear Software CD DVD Filter Vulnerability The Gear Software CD DVD Filter driver contains a privilege escalation vulnerability, which can allo ...
»	T-016: iseemedia / Roxio / MGI Software LPViewer ActiveX Vulnerabilities The iseemedia LPViewer ActiveX control contains multiple stack buffer overflows, which can allow a r ...
»	T-015: InstallShield / Macrovision / Acresso FLEXnet Connect Vulnerabilities Acresso FLEXnet Connect executes scripts that are insecurely retrieved from a remote web server, whi ...
»	CIACTech08-003: Understanding Cross-Site Scripting (XSS) Cross-Site Scripting has become an increasingly prevalent attack vector that can be leveraged to per ...
»	CIACTech08-002: Understanding Windows Hash Dumpers and Crackers Windows hash dumping tools are often spotlighted as hacker tools that can somehow magically extract ...
»	CIACTech08-001: Understanding PHP Exploits Many websites use the PHP programming language to build web pages on the fly from individual files a ...
»	CIACTech07-001: MOICE - Microsoft Office Isolated Conversion Environment A common cyber attack is to send a user an Office document (Word, Excel, PowerPoint) containing mal ...