NIST IT Security

NIST Site Search

Search NIST.GOV

Custom Search

[Official NIST.GOV TIME]

Product Research

Advertise on this site

Available newsfeeds

NIST.GOV Information Technology	NIST.GOV
Network World - Security	Security News Roundup from Network World
eEye Vulnerability Tracker	eEye Research Team's Zero-Day Tracker. Informational archive for zero-day vulnerabilities.
Security Phreak - NetworkWorld Blog	Security Web Blog from NetworkWorld.com
PC Magazine Computer Security	PC Magazine Computer Security - Virus Software, Spam Software, Spyware Software, Firewall Software
Help Net - Off the Wire	Help Net News from various wire and services.
ComputerWorld Security News	ComputerWorld.com Security News
InfoWorld - Security	Network IT Security News from InfoWorld.com
US-CERT.GOV - Cyber Security Bulletins	Cyber Security Bulletins provide weekly summaries of security issues and new vulnerabilities. They also provide patches, workarounds, and other actions to help mitigate risk.
SecurityTracker - Vulnerabilities	Vulnerabilities for all popular platforms and applications.
SecurityPark.net	The latest Security news, across the complete range of Security products, systems and services including access control, biometrics, IT and computer security.
Washington Post - Security Fix Blog	Washington Post Brian Krebs's Blog on Computer Security
Security Focus - Vulnerabilities	The latest security Vulnerabilities/Bugtraq from Security Focus
Ha.ckers.org	Ha.ckers.org - Gray Hat site. If you thought you had problems sleeping before this certainly won't help.
Help Net Security	Security articles from Help Net Security
GovExec.com	E-Government News
US-CERT (DHS Cyber-Security Agency) Current Activity	Regularly updated summary of the most frequent, high-impact types of security incidents currently being reported to the US-CERT
DOE-CIRC Updates	Department of Energy Cyber Incident Response Capability
Virus Bulletin	Virus Bulletin is a leading specialist publication in the field of viruses and related malware.
DarkReading	Large security news site.
NextGov	Nextgov.com covers the technology and business of government.

Translate to:

Latest NIST.org news and comments

NIST Computer Security Division Released Special Publication 800-38E Posted on:01/25/10

DRAFT Special Publication 800-37 Revision 1 Available Posted on:11/17/09

News Blog: "Mass Panic! The iPhone Has a Vulnerability" Posted on:07/30/09

First ZeroDay Exploit Hits Firefox Posted on:07/20/09

"FBI Probes Hacker's $10 Million Ransom Demand for Stolen Virginia Medical Records" Posted on:05/06/09

Free Online Antivirus, Spyware, and Firewall Scanners Review Posted on:05/04/09

Conflicker Worm / Botnet Downloads Mystery Payload – April 9th update Posted on:04/09/09

Conflicker Worm - April Fools Day Likely To Make Fools Out Of Us Either Way Posted on:03/30/09

ESET NOD32 False Positive for Kryptik.JX Causing Problems Posted on:03/09/09

New Report Shows 92 Percent of Critical Microsoft Vulnerabilities are Mitigated by Eliminating Admin Rights Posted on:02/03/09

Federal Employees At Risk Again From Monster.com Compromise Posted on:01/25/09

Microsoft Windows Does Not Disable AutoRun Properly - Technical Cyber Security Alert TA09-020A Posted on:01/21/09

Internet Explorer XML Exploit Allows Remote Code Execution Posted on:12/14/08

Microsoft Has Released An Extremely Urgent Out of Band Windows Update Posted on:10/23/08

If You Haven't Patched Your DNS Server Yet You're Simply Negligent Posted on:08/06/08

Google Ads

Curl error: 7, couldn't connect to host

Headlines

NIST.GOV

»	NIST Posts Initial Analysis of RFI Comments on Cybersecurity Framework for Critical Infrastructure
»	NIST Issues Major Revision of Core Computer Security Guide: SP 800-53
»	Second Cybersecurity Infrastructure Framework Workshop Gathers May 29-31, 2013
»	NIST Announces Plan to Sponsor First Cybersecurity FFRDC
»	Eleven Companies Join as Partners in National Cybersecurity Center of Excellence
»	Improving Critical Infrastructure Cybersecurity Workshop Video Available On Demand
»	May Conference to Discuss Safeguarding Health Information Through HIPAA Security
»	NIST to Host Symposium on Ontology Evaluation May 2-3
»	Industry Partners Join the National Cybersecurity Center of Excellence
»	Health IT Mobile Device Use Case Meeting
»	NCCOE NCEP Signing Ceremony
»	NFI Publishes White Paper on Trends, Challenges and Strategy in Forensic Science
»	NIST Guides Seek Interoperability for Automated Fingerprint ID Systems
»	National Cybersecurity Center of Excellence
»	NIST Panel Expands Recommendations for Use of Electronic Health Records in Pediatrics

Date published: not known
Details

US-CERT Current Activity

»	Adobe Releases Security Updates for Adobe Flash Player Original release date: May 16, 2013 Adobe has released security updates for Adobe Flash Playe ...
»	Security Updates Available for Adobe Reader and Acrobat Original release date: May 16, 2013 Adobe has released security updates for Adobe Reader and ...
»	Mozilla Releases Multiple Updates Original release date: May 16, 2013 The Mozilla Foundation has released updates for the follo ...
»	Microsoft Releases May 2013 Security Bulletin Original release date: May 09, 2013 \| Last revised: May 14, 2013 Microsoft has released updat ...
»	Adobe Releases Security Update for ColdFusion Original release date: May 09, 2013 \| Last revised: May 14, 2013 Adobe has released a securit ...
»	Microsoft Releases Security Advisory for Internet Explorer Original release date: May 07, 2013 Microsoft is investigating public reports of a remote cod ...
»	Cisco Releases Security Advisories Original release date: April 25, 2013 Cisco has released three security advisories to address ...
»	Apple Releases Security Updates for Safari Original release date: April 18, 2013 Apple has released security updates for Safari 6.0.4 We ...
»	Scams Exploiting Boston Marathon Explosion Original release date: April 17, 2013 \| Last revised: April 18, 2013 Malicious actors are exp ...
»	Oracle Releases April 2013 Security Advisory Original release date: April 17, 2013 Oracle has released its Critical Patch Update for April ...

Date published: not known
Details

JC3-CIRC Updates

»	U-243: libvirt virTypedParameterArrayClear() Memory Access Error Lets Remote Users Deny Service libvirt virTypedParameterArrayClear() Memory Access Error Lets Remote Users Deny Service
»	U-242: Linux Kernel Netlink SCM_CREDENTIALS Processing Flaw Lets Local Users Gain Elevated Privileges Linux Kernel Netlink SCM_CREDENTIALS Processing Flaw Lets Local Users Gain Elevated Privileges
»	U-241: Adobe Flash Player Bugs Let Remote Users Execute Arbitrary Code and Obtain Information Adobe Flash Player Bugs Let Remote Users Execute Arbitrary Code and Obtain Information
»	U-240: Apple Remote Desktop Encryption Failure Lets Remote Users Obtain Potentially Sensitive Information Apple Remote Desktop Encryption Failure Lets Remote Users Obtain Potentially Sensitive Information
»	U-239: Apple iPhone SMS Processing Flaw Lets Remote Users Spoof SMS Source Addresses Apple iPhone SMS Processing Flaw Lets Remote Users Spoof SMS Source Addresses
»	U-238: HP Service Manager Input Validation Flaw Permits Cross-Site Scripting Attacks HP Service Manager Input Validation Flaw Permits Cross-Site Scripting Attacks
»	U-237: Mozilla Firefox CVE-2012-1950 Address Bar URI Spoofing Vulnerability Mozilla Firefox CVE-2012-1950 Address Bar URI Spoofing Vulnerability
»	U-236: Microsoft JScript and VBScript Engine Integer Overflow Lets Remote Users Execute Arbitrary Code Microsoft JScript and VBScript Engine Integer Overflow Lets Remote Users Execute Arbitrary Code
»	U-235: Microsoft Security Bulletin Advance Notification for August 2012 Microsoft Security Bulletin Advance Notification for August 2012
»	U-234: Oracle MySQL User Login Security Bypass Vulnerability Oracle MySQL User Login Security Bypass Vulnerability
»	U-233: Oracle Database INDEXTYPE CTXSYS.CONTEXT Bug Lets Remote Authenticated Users Gain Elevated Privileges Oracle Database INDEXTYPE CTXSYS.CONTEXT Bug Lets Remote Authenticated Users Gain Elevated Privileg ...
»	U-232: Xen p2m_teardown() Bug Lets Local Guest OS Users Deny Service on the Host OS Xen p2m_teardown() Bug Lets Local Guest OS Users Deny Service on the Host OS
»	U-231: Cisco ASA SIP and WebVPN Bugs Let Remote Users Deny Service Cisco ASA SIP and WebVPN Bugs Let Remote Users Deny Service
»	U-230: Sudo on Red Hat Enterprise Linux %postun Symlink Flaw Lets Local Users Gain Elevated Privileges Sudo on Red Hat Enterprise Linux %postun Symlink Flaw Lets Local Users Gain Elevated Privileges
»	U-229: HP Network Node Manager i Input Validation Flaw Permits Cross-Site Scripting Attacks HP Network Node Manager i Input Validation Flaw Permits Cross-Site Scripting Attacks

Date published: not known
Details

Virus Bulletin news

»	India believed to be source of sophisticated surveillance campaigns In-depth investigations find widespread worldwide snooping, Pakistan primary target.
»	German anti-botnet advisory recommends the use of ad blockers for security 'If websites want to include ads, they must make sure they are secure.'
»	Commoditization increasingly seen in mobile malware Number of malicious samples and families increase, as Android remains most popular mobile platform.
»	Microsoft 'found to make requests' to URLs shared via Skype HEAD requests likely used to determine landing page.
»	Program turns anti-analysis tools against the malware Users cautioned to be wary of a false sense of security.
»	Twitter, Facebook accounts used in watering hole campaign USAID sympathizers targeted with links from 'like-minded people'.
»	Microsoft offers fix-it for IE 8 zero-day CVE-2013-1347 used in watering hole attacks.
»	Vulnerabilities could trigger payload in emails upon receiving or opening Flaws in IBM Notes and Exim/Dovecot easy to mitigate.
»	May issue of VB published The May issue of Virus Bulletin is now available for subscribers to download.

Date published: not known
Details

Dark Reading - All Stories

»	Black Hat 2013 Showcases Home Security, Bootkits, Cellular OPSEC Failures Black Hat announces three more featured talks
»	IDs Of 22 Million At Risk Following Breach At Yahoo Japan Yahoo Japan officials say they "can't deny the possibility" of epic data breach
»	Even SMBs Should Look To Log Management For Security A firewall, patch procedure, anti-malware and, possibly, an IDS are a good start. But to detect brea ...
»	'Commercialized' Cyberespionage Attacks Out Of India Targeting U.S., Pakistan, China, And Others Operation Hangover signals new franchise model in cyberespionage with cyberspying services for hire
»	Lancope Enhances Forensics And Incident Response With New, User-Centric Monitoring Capabilities New features bolster network protection against advanced attacks and insider threats
»	Biometrics Firm CIC Secures Funding Additional funding comes from a number of Phoenix Group affiliates and other investors
»	Rethinking Identity Management Secret identities are a good thing. Multiple identities? Not so much
»	Websense Signs Definitive Agreement To Be Acquired By Vista Equity Partners Shareholders to receive $24.75 per share in cash in transaction valued at approximately $1 billion
»	The Future Of Web Authentication After years of relying on passwords, technology vendors -- and enterprises -- are ready for new meth ...