NIST Site Search
Search NIST.GOV
Custom Search
[Official NIST.GOV TIME]
Product Research

Advertise on this site
Welcome to NIST.org
Welcome to NIST.org

Make NIST.org your morning IT Security wakeup call. Important security news is automatically added day and night, so you can see at a glance what threats you'll be facing.
Free Online Antivirus, Spyware, and Firewall Scanners Review
You might be doing everything right with your anti-virus and spyware malware protection. But no product is perfect and a "second opinion" is always valuable. We get a lot of questions on what to do about viruses, spyware, intrusions, etc. There are so many Anti-Spyware scams, fake products, and Trojans out there that we've put together this (non-affliate) list of free help sites. Starting off with a review of free online virus and spyware scanning tools. (updated 3/31/09)No Longer Supported

[ Read the rest of the article... ]
Posted by NIST.org on Monday 04 May 2009 - 21:16:00 | |printer friendly
Go to page       >>  
Translate to: French German Italian Spanish Portuguese GTM_LAN_DUTCH Russian Chinese Arabic Korean English
Google Ads




Curl error: 7, couldn't connect to host
Headlines

»NIST Posts Initial Analysis of RFI Comments on Cybersecurity Framework for Critical Infrastructure
»NIST Issues Major Revision of Core Computer Security Guide: SP 800-53
»Second Cybersecurity Infrastructure Framework Workshop Gathers May 29-31, 2013
»NIST Announces Plan to Sponsor First Cybersecurity FFRDC
»Eleven Companies Join as Partners in National Cybersecurity Center of Excellence
»Improving Critical Infrastructure Cybersecurity Workshop Video Available On Demand
»May Conference to Discuss Safeguarding Health Information Through HIPAA Security
»NIST to Host Symposium on Ontology Evaluation May 2-3
»Industry Partners Join the National Cybersecurity Center of Excellence
»Health IT Mobile Device Use Case Meeting
»NCCOE NCEP Signing Ceremony
»NFI Publishes White Paper on Trends, Challenges and Strategy in Forensic Science
»NIST Guides Seek Interoperability for Automated Fingerprint ID Systems
»National Cybersecurity Center of Excellence
»NIST Panel Expands Recommendations for Use of Electronic Health Records in Pediatrics

Date published: not known
Details

»Google Releases Google Chrome 27.0.1453.93
Original release date: May 22, 2013 Google has released Google Chrome 27.0.1453.93 for Window ...
»Adobe Releases Security Updates for Adobe Flash Player
Original release date: May 16, 2013 Adobe has released security updates for Adobe Flash Playe ...
»Security Updates Available for Adobe Reader and Acrobat
Original release date: May 16, 2013 Adobe has released security updates for Adobe Reader and ...
»Mozilla Releases Multiple Updates
Original release date: May 16, 2013 The Mozilla Foundation has released updates for the follo ...
»Microsoft Releases May 2013 Security Bulletin
Original release date: May 09, 2013 | Last revised: May 14, 2013 Microsoft has released updat ...
»Adobe Releases Security Update for ColdFusion
Original release date: May 09, 2013 | Last revised: May 14, 2013 Adobe has released a securit ...
»Microsoft Releases Security Advisory for Internet Explorer
Original release date: May 07, 2013 Microsoft is investigating public reports of a remote cod ...
»Cisco Releases Security Advisories
Original release date: April 25, 2013 Cisco has released three security advisories to address ...
»Apple Releases Security Updates for Safari
Original release date: April 18, 2013 Apple has released security updates for Safari 6.0.4 We ...
»Scams Exploiting Boston Marathon Explosion
Original release date: April 17, 2013 | Last revised: April 18, 2013 Malicious actors are exp ...

Date published: not known
Details

»U-243: libvirt virTypedParameterArrayClear() Memory Access Error Lets Remote Users Deny Service
libvirt virTypedParameterArrayClear() Memory Access Error Lets Remote Users Deny Service
»U-242: Linux Kernel Netlink SCM_CREDENTIALS Processing Flaw Lets Local Users Gain Elevated Privileges
Linux Kernel Netlink SCM_CREDENTIALS Processing Flaw Lets Local Users Gain Elevated Privileges
»U-241: Adobe Flash Player Bugs Let Remote Users Execute Arbitrary Code and Obtain Information
Adobe Flash Player Bugs Let Remote Users Execute Arbitrary Code and Obtain Information
»U-240: Apple Remote Desktop Encryption Failure Lets Remote Users Obtain Potentially Sensitive Information
Apple Remote Desktop Encryption Failure Lets Remote Users Obtain Potentially Sensitive Information
»U-239: Apple iPhone SMS Processing Flaw Lets Remote Users Spoof SMS Source Addresses
Apple iPhone SMS Processing Flaw Lets Remote Users Spoof SMS Source Addresses
»U-238: HP Service Manager Input Validation Flaw Permits Cross-Site Scripting Attacks
HP Service Manager Input Validation Flaw Permits Cross-Site Scripting Attacks
»U-237: Mozilla Firefox CVE-2012-1950 Address Bar URI Spoofing Vulnerability
Mozilla Firefox CVE-2012-1950 Address Bar URI Spoofing Vulnerability
»U-236: Microsoft JScript and VBScript Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
Microsoft JScript and VBScript Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
»U-235: Microsoft Security Bulletin Advance Notification for August 2012
Microsoft Security Bulletin Advance Notification for August 2012
»U-234: Oracle MySQL User Login Security Bypass Vulnerability
Oracle MySQL User Login Security Bypass Vulnerability
»U-233: Oracle Database INDEXTYPE CTXSYS.CONTEXT Bug Lets Remote Authenticated Users Gain Elevated Privileges
Oracle Database INDEXTYPE CTXSYS.CONTEXT Bug Lets Remote Authenticated Users Gain Elevated Privileg ...
»U-232: Xen p2m_teardown() Bug Lets Local Guest OS Users Deny Service on the Host OS
Xen p2m_teardown() Bug Lets Local Guest OS Users Deny Service on the Host OS
»U-231: Cisco ASA SIP and WebVPN Bugs Let Remote Users Deny Service
Cisco ASA SIP and WebVPN Bugs Let Remote Users Deny Service
»U-230: Sudo on Red Hat Enterprise Linux %postun Symlink Flaw Lets Local Users Gain Elevated Privileges
Sudo on Red Hat Enterprise Linux %postun Symlink Flaw Lets Local Users Gain Elevated Privileges
»U-229: HP Network Node Manager i Input Validation Flaw Permits Cross-Site Scripting Attacks
HP Network Node Manager i Input Validation Flaw Permits Cross-Site Scripting Attacks

Date published: not known
Details

»Dutch citizens keep extra cash at hand following DDoS attacks
Month-long attacks had significant impact.
»India believed to be source of sophisticated surveillance campaigns
In-depth investigations find widespread worldwide snooping, Pakistan primary target.
»German anti-botnet advisory recommends the use of ad blockers for security
'If websites want to include ads, they must make sure they are secure.'
»Commoditization increasingly seen in mobile malware
Number of malicious samples and families increase, as Android remains most popular mobile platform.
»Microsoft 'found to make requests' to URLs shared via Skype
HEAD requests likely used to determine landing page.
»Program turns anti-analysis tools against the malware
Users cautioned to be wary of a false sense of security.
»Twitter, Facebook accounts used in watering hole campaign
USAID sympathizers targeted with links from 'like-minded people'.
»Microsoft offers fix-it for IE 8 zero-day
CVE-2013-1347 used in watering hole attacks.
»Vulnerabilities could trigger payload in emails upon receiving or opening
Flaws in IBM Notes and Exim/Dovecot easy to mitigate.

Date published: not known
Details

»New Congressional Report Illuminates Attackers' Focus On Electric Grid
Regular attack attempts on electricity providers, malware infections threatening the power grid
»Commtouch Security Number Of The Month May 2013: 50% Financial Loss For Victims Of Pump And Dump Spam
Spam attempts to lure email recipients into buying cheap stock with a low trading volume
»TripWire Introduces Complete NERC Solution Suite
Solution automates and streamlines NERC CIP Compliance
»Much Ado About PushDo
We don't need a stretcher -- we need a mop
»Controlling The Risks Of Vulnerable Application Libraries
Libraries are easier to use than ever, but they're piling on more risk to the development process
»Bit9 Introduces The Bit9 Connector For Palo Alto Networks, Enabling Integrated Real-time Endpoint And Network Security Solution For APTs
Solution combines network security with real-time, continuous endpoint and server monitoring and rec ...
»Bit9 Introduces The Bit9 Connector For FireEye
Solution combines network security with real-time, continuous endpoint and server monitoring and rec ...
»Blue Coat To Acquire Solera Networks
Solera DeepSee platform will add security analytics and forensic capabilities to the Blue Coat produ ...
»VMware Announces vCloud Hybrid Service
Infrastructure as a Service cloud operated by VMware and built on foundation of VMware vSphere

Date published: not known
Details
Main Menu
· Home

NIST Security Books
NIST IT Security Books

Training / Books

»Security Certifications -
» CISSP, SSCP, Security+, etc.

»Computer Forensics

»Ethical Hacking

»Malware, Spyware, Viruses

»FISMA Compliance, Policies, etc

»PKI, Encryption, Smartcards

»Windows Security Guides

»HIPAA, SOX, CISP, etc.

NIST.org Security Bookstore
Current Security News
 
SANS Internet Storm Center, InfoCON: green

» Infocon: green

» Wireshark 1.10.0rc2 is now available http://www.wireshark.org/download.html, (Thu, May 23rd)
[22 May 2013 06:34pm]

» Chrome 24.0.1312.52 has been updated for Windows, Mac, Linux, and Chrome Frame, (Wed, May 22nd)
[22 May 2013 05:52pm]

» Apple QuickTime 7.7.4 for Windows updated, MANY security vulnerabilities: http://support.apple.com/kb/HT1222, (Wed, May 22nd)
[22 May 2013 05:51pm]

» Wireshark 1.8.7 and 1.6.15 Released http://www.wireshark.org/news/20130517.html, (Wed, May 22nd)
[22 May 2013 02:01pm]

» Privilege escalation, why should I care?, (Wed, May 22nd)
[22 May 2013 10:10am]

» ISC StormCast for Wednesday, May 22nd 2013 http://isc.sans.edu/podcastdetail.html?id=3323, (Wed, May 22nd)
[21 May 2013 07:19pm]

» Moore, Oklahoma tornado charitable organization scams, malware, and phishing, (Tue, May 21st)
[21 May 2013 02:33pm]

» Chrome 27 stable released http://googlechromereleases.blogspot.ca/ some security fixes, (Tue, May 21st)
[21 May 2013 11:14am]

» ISC StormCast for Tuesday, May 21st 2013 http://isc.sans.edu/podcastdetail.html?id=3320, (Tue, May 21st)
[20 May 2013 08:00pm]

» Safe - Tools, Tactics and Techniques, (Mon, May 20th)
[20 May 2013 05:14pm]
***
CNET News.com

» SAP touts service that sells customer data from phone firms
[22 May 2013 12:57am]

» Power utilities claim 'daily' and 'constant' cyberattacks, says report
[21 May 2013 09:14pm]

» Guantanamo Wi-Fi shuttered after Anonymous hacking threat
[20 May 2013 08:45pm]

» Google breach may have led to sensitive data leaks
[20 May 2013 06:52pm]

» Future Firefox takes tougher stance on mixed content
[17 May 2013 01:52pm]

» Google security: You (still) are the weakest link
[16 May 2013 08:00pm]

» Google Glass spurs privacy questions from Congress
[16 May 2013 03:53pm]

» New Mac spyware found in the Oslo Freedom Forum
[16 May 2013 09:34am]

» LulzSec case in U.K. brings sentences for 4 men
[16 May 2013 08:33am]

» Apple, Samsung, others urged to help thwart mobile phone thefts
[13 May 2013 09:54am]

» Bloomberg reporters had access to certain client data
[13 May 2013 07:39am]

» Bloomberg: Yes, reporters had access to client data
[13 May 2013 07:39am]

» Microsoft warns of new Trojan hijacking Facebook accounts
[12 May 2013 05:30pm]

» U.S. charges 8 in $45M global cybercrime scheme
[09 May 2013 05:43pm]

» Senators propose law to go after foreign cybercriminals
[07 May 2013 07:09pm]
***
Computerworld Security News

» Growing mobile malware threat swirls (mostly) around Android
[22 May 2013 10:01am]

» Chinese hackers said to have accessed law enforcement targets
[21 May 2013 04:53pm]

» The true root causes of software security failures
[21 May 2013 02:35pm]

» Chinese hackers master art of lying low
[20 May 2013 04:00am]

» Security Manager's Journal: NAC deployment means better access control at last
[20 May 2013 04:00am]

» Texas drone bill sparks a battle
[17 May 2013 02:11pm]

» More Security News
***


***


More IT Security
News Feeds
More Sponsors

Advertise on this site
NIST - Books You Need

NIST Bookstore
RSS Feeds
Our news can be syndicated by using these rss feeds.
rss1.0
rss2.0
rdf
Symantec News
Welcome
Username:

Password:


Remember me

[ ]
[ ]
[ ]

NIST.org is in no way connected to the U.S. government site NIST.gov

This site is © John Herron, CISSP. All Rights Reserved.

Please visit daily to stay up to date on all your IT Security compliance issues.

http://www.nist.org -
Hosted by BlueHost. We've never had a better hosting company.
{THEMEDISCLAIMER}