NIST Site Search
Google
Web NIST.org
NIST.gov
Product Research

Advertise on this site
Headlines

»Excel Invalid Object
A remote code execution vulnerability exists within Microsoft Excel which may allow for a remote att ...
»Adobe PDF Buffer Overflow
A vulnerability exists within Adobe Acrobat that allows an attacker to execute arbitrary code on a v ...
»Creative Software AutoUpdate Engine ActiveX stack buffer overflow
The Creative Software AutoUpdate Engine ActiveX control is a component that provides automatic updat ...
»Internet Connection Sharing DoS
A denial of service vulnerability exists within the Internet Connection Sharing service in Microsoft ...
»RPC Memory Exhaustion
The three referenced exploits take advantage of an inherent problem in RPC, in which an attacker get ...


Date published: Tue, 9 Mar 2010 20:46:00 PST
Details

»News: Twitter attacker had proper credentials
Twitter attacker had proper credentials
»News: PhotoDNA scans images for child abuse
PhotoDNA scans images for child abuse
»News: Conficker data highlights infected networks
Conficker data highlights infected networks

>> Advertisement <<
Can you ...
»News: Popular apps need better patching, says report
Popular apps need better patching, says report
»Brief: Google offers bounty on browser bugs
Google offers bounty on browser bugs


Date published: not known
Details

»RSA Conference Wrapup
Well another RSA Conference has come and gone. Lots of vendor noise about their product being the o ...
»Facebook Patents Social Feeds and I Patent XSS
In honor of the USPO’s decision to allow Facebook’s patent for social feeds I decided to ...
»Banks, Businesses, Viruses and the UCC
There’s an interesting post over at Krebs On Security talking about some poor company that is ...
»Google Buzz Security Flaw
… Speaking of Google, I got an email from TrainReq (the same fellow who allegedly hacked Miley ...
»Nevermind, I Was Wrong, Google Is Evil
I’ve been waiting a while to do this post - several weeks actually since my original post. In ...
»Phishing With Google Wave
Hat tip to cyberlocksmith for this post. He pointed me to a good article on how to phish Google Wav ...


Date published: not known
Details

»Microsoft Releases March Security Bulletin
»Energizer DUO USB Battery Charger Software Allows Remote System Access
»Cisco Releases Multiple Security Advisories
»Microsoft Releases Advance Notification for March Security Bulletin
»U.S. Census Bureau 2010 Census Campaign Warning
»Microsoft Re-Releases Security Bulletin MS10-015
»Microsoft Releases Security Advisory to Address VBScript Vulnerability
»Adobe Releases a Security Update for Download Manager
»Mozilla Releases Security Advisories
»Cisco Releases Multiple Security Advisories


Date published: not known
Details

»T-323: Microsoft Security Advisory (981374)
Microsoft Security Advisory (981374)
»T-322: March Patch Tuesday Notes
March Patch Tuesday Notes
»T-321: Energizer DUO USB battery charger software allows unauthorized remote system access
Energizer DUO USB battery charger software allows unauthorized remote system access
»T-320: Apache 2.2.14 mod_isapi Dangling Pointer
Apache 2.2.14 mod_isapi Dangling Pointer
»T-319: Apache Multiple Security Vulnerabilities
Apache Multiple Security Vulnerabilities
»T-318: Drupal Prior to 6.16 and 5.22 Multiple Security Vulnerabilities
Drupal Prior to 6.16 and 5.22 Multiple Security Vulnerabilities
»T-317: Vulnerability in VBScript Could Allow Remote Code Execution
Vulnerability in VBScript Could Allow Remote Code Execution
»T-316: Microsoft Windows Client/Server Run-time Subsystem Local Privilege Escalation Vulnerability
Microsoft Windows Client/Server Run-time Subsystem Local Privilege Escalation Vulnerability
»T-315: PHP 5.2.13 Security Update
PHP 5.2.13 Security Update
»T-314: Microsoft Windows ICMPv6 Router Advertisement Remote Code Execution Vulnerability
Microsoft Windows ICMPv6 Router Advertisement Remote Code Execution Vulnerability
»T-313: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability
Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerabi ...
»T-312: Adobe Download Manager Unspecified Arbitrary File Download Vulnerability
Adobe Download Manager Unspecified Arbitrary File Download Vulnerability
»T-311: Microsoft Windows SMB Client Race Condition Remote Code Execution Vulnerability
Microsoft Windows SMB Client Race Condition Remote Code Execution Vulnerability
»T-310: Mozilla Firefox Multiple Remote Memory Corruption Vulnerabilities
Mozilla Firefox Multiple Remote Memory Corruption Vulnerabilities
»T-309: Mozilla Firefox Unspecified Remote Code Execution Vulnerability
Mozilla Firefox Unspecified Remote Code Execution Vulnerability


Date published: not known
Details

»Morphing PDFs in new SEO poisoning trick
Harmless documents replaced by web pages containing malicious code.
»Botnet taken down as ringleaders are arrested
'Mariposa' included almost 13 million zombies.
»March issue of VB published
The March issue of Virus Bulletin is now available for subscribers to download.
»Spammers move from China to Russia
Stricter rules on registering .cn domains leads to increase in malicious .ru domains.
»Nearly 20% still running IE 6
VB poll finds users still running outdated browser despite campaigns to boycott it.
»Out-of-band patch release from Adobe
Unscheduled update released by Adobe.


Date published: not known
Details

»Voluntary Breach Disclosure Rare But Valuable
Most organizations won't go public about an attack unless they have to, but security experts say the ...
»Ford Motor Rolls Out New Security Features To Prevent Car-Hacking
Auto-maker enhances security for new lines of WiFi-enabled vehicles
»Product Watch: Gemalto Rolls Out Secure Online Banking On A Stick
USB thumb drive helps protect against man-in-the middle attacks
»Botnets Serving Project Aurora Likely Built By "Amateurs," Researcher Says
Rumors of sophistication in China's botnet attacks on Google, others were exaggerated, Damballa expe ...
»New Massachusetts Data Privacy Law Adds Incentive For Strong Database Security
Massachusetts Data Privacy Law went into effect on March 1 and focuses on prevention


Date published: not known
Details
NIST.org Forums
Vulnerabilities & Threats ( Read Only )
Forum Threads Replies Last Post
Anonymous Posts
Have something to report but don't want your name associated with it? Post it here. We still reserve the right to remove objectable or slanderous material (or anything else we don't like). If you're a member logout before posting to remain anonymous. Minimal logs but they're subject to legal requests.
0 0 -
IT Security Issues
Generally what ever doesn't fit else where that concerns IT Security goes here. If discussions warrant then new forums will be created and topics moved.
4 2 Wed May 31 2006, 06:19AM
NIST.org
The Non-Encrypted Hall of Shame
In today's world not protecting other people's personal information that has been entrusted to you is a shameful act. Too bad there isn't a law called “negligent theft”, until such time we give you “The Non-Encrypted Hall of Shame”.
3 0 Sat Jun 24 2006, 12:10PM
NIST.org
Social Engineering
Social Engineering war stories
2 1 Sat Jan 09 2010, 06:14AM
wesoco
Viruses, Trojans and Worms
Have a problem and need help? Post your question here and someone will send help your way.
0 0 -
Spyware
Spyware and spyware removal. Also adware and general malware.
0 0 -
Microsoft Vulnerabilities
Anything having to do with Microsoft vulnerabilities and their fixes.
4 5 Wed Mar 15 2006, 05:24PM
Meehowski
Certification and Training ( Read Only )
Forum Threads Replies Last Post
Security Certifications
Discussions regarding CISSP, GSEC, Security+, etc. certifications.
3 2 Tue Jan 06 2009, 07:01AM
Quentin
Federal Government Compliance - IT Security ( Read Only )
Forum Threads Replies Last Post
Anonymous Posts
Have something to get off your chest but don't really want everyone in your office to know its you? Post it here. We still reserve the right to remove objectable or slanderous material (or anything else we don't like). If you're a member logout before posting to remain anonymous.
2 0 Sat May 02 2009, 04:58PM
Quentin
FISMA
Federal Information Security Management Act (FISMA) was enacted in the U.S. in 2002. The act is meant to bolster computer and network security within the Federal Government and government contractors.
0 0 -
NIST FIPS
NIST - FIPS Publications - Federal Information Processing Standards (NIST = National Institute of Standards and Technology)
0 0 -
NIST SP 800 Documents
Discussions related to the NIST Special Publication 800 series documents.
7 7 Tue Aug 25 2009, 09:50AM
Teddy
OMB Circular A-130
This Circular establishes policy for the management of Federal information resources. OMB includes procedural and analytic guidelines for implementing specific aspects of these policies as appendices.
0 0 -
POA&M Reporting
Plan of Action and Milestones (POA&M) - Reporting required under the Security Reform Act. OMB has developed the POA&M reporting guidance.
1 0 Tue Apr 10 2007, 04:39PM
Mathurin
HSPD-12 : Personal Identity Verification (PIV) Project
Another big mandate with the clock ticking. Lots of Smartcard and Biometrics associated with this project.
0 0 -
Information
Top Posters | Most Active Threads
Welcome guest
These forums can only be posted to by registered and logged in members, please click here to go to the registration page.
The users of this forum have made a total of 43 posts (26 threads, 17 replies).
Who's Online:
View detailed list. (Will open a new window.)
New Posts New posts No New Posts No new posts Closed Thread Closed forum

You cannot start new threads - You cannot post replies - You cannot edit your posts
Powered by e107 Forum System
Translate to: French German Italian Spanish Portuguese GTM_LAN_DUTCH Russian Chinese Arabic Korean English
Google Ads




NIST Site Menu
·Home

Current Security News
 
SANS Internet Storm Center, InfoCON: green

» Infocon: green

» What's My Firewall Telling Me? (Part 4), (Wed, Mar 10th)
[09 Mar 2010 08:37pm]

» Microsoft Security Advisory 981374 - Remote Code Execution Vulnerability for IE6 and IE7, (Wed, Mar 10th)
[09 Mar 2010 08:36pm]

» March 2010 - Microsoft Patch Tuesday Diary, (Tue, Mar 9th)
[09 Mar 2010 11:10am]

» Samurai WTF 0.8, (Mon, Mar 8th)
[09 Mar 2010 09:33am]

» Vodafone Android Phone: Complete with Mariposa Malware, (Tue, Mar 9th)
[09 Mar 2010 07:20am]

» Energizer Malware, (Tue, Mar 9th)
[09 Mar 2010 03:09am]

» SEO poisoning on TV show, (Mon, Mar 8th)
[08 Mar 2010 10:08am]

» Microsoft announced two important bulletins (fixing multiple vulns. affecting Windows and Office) for tomorrow: http://www.microsoft.com/technet/security/Bulletin/MS10-mar.mspx, (Mon, Mar 8th)
[07 Mar 2010 11:55pm]

***
CNET News.com

» Malware found on HTC Android phone from Vodafone
[09 Mar 2010 01:40pm]

» Microsoft warns of zero-day IE hole on Patch Tuesday
[09 Mar 2010 12:48pm]

» Drudge Report accused of serving malware, again
[09 Mar 2010 10:31am]

» Backdoor found in Energizer Duo USB battery charger
[08 Mar 2010 10:10am]

» Police get Webcam pictures in school spy case
[06 Mar 2010 02:12pm]

» At RSA 2010, the secure and the insecure (photos)
[05 Mar 2010 03:04pm]

» RSA 2010: Taking on cyberthreats
[04 Mar 2010 05:09pm]

» Microsoft to fix eight Windows and Office holes
[04 Mar 2010 04:53pm]

» Symantec exhibit makes cybercrime tangible
[04 Mar 2010 04:52pm]

» 'Mission Impossible'-style heist hits N.J. Best Buy
[04 Mar 2010 12:18pm]

» Study lauds IE for blocking Web's social attacks
[04 Mar 2010 08:55am]

» McAfee: Source code is easy target within corporations
[03 Mar 2010 02:01pm]

» Study: Medical identity theft is costly for victims
[03 Mar 2010 06:00am]

» Spain arrests three accused of running huge botnet
[02 Mar 2010 05:10pm]

» Microsoft exec: Infected PCs should be quarantined (Q&A)
[02 Mar 2010 04:42pm]

***
Computerworld Security News

» Twitter to begin screening some links for phishing
[09 Mar 2010 08:09pm]

» Ex-Sun chief dishes dirt on Gates, Jobs
[09 Mar 2010 06:06pm]

» Update: LifeLock to pay $12M to settle FTC, states' complaint
[09 Mar 2010 02:57pm]

» Microsoft skips patch for PowerPoint add-on
[09 Mar 2010 02:16pm]

» Microsoft warns of new IE bug; attacks under way
[09 Mar 2010 12:11pm]

» Bogus intranets scam university students
[09 Mar 2010 08:49am]

» More Security News

***
GSO

» Netgear Router Hack Pt. 2 by Kenny
[01 Dec 2009 05:16pm]

» Netgear Router Hack Pt. 1 by Kenny
[01 Dec 2009 05:16pm]

***


More IT Security
News Feeds
More Sponsors

Advertise on this site
NIST - Books You Need

NIST Bookstore
RSS Feeds
Our forum threads can be syndicated by using these rss feeds.
rss1.0
rss2.0
rdf
Add to NetVibes
Add to Bloglines
Add to NewsGator
Add to Google
Add to My Yahoo
Add to My MSN
Add to Technorati
Add to Pluckit
Add to My AOL
Subscribe in FeedLounge
Add to ProtoPage

Symantec News
Welcome
Username:

Password:


Remember me

[ ]
[ ]
[ ]

NIST.org is in no way connected to the U.S. government site NIST.gov

This site is © John Herron, CISSP. All Rights Reserved.

Please visit daily to stay up to date on all your IT Security compliance issues.

http://www.nist.org -
Hosted by BlueHost. We've never had a better hosting company.