NIST IT Security : News http://www.nist.org/ IT security news updated throughout the day. Focusing on risk mitigation and compliance issues; data encryption, NIST FIPS and SP 800 requirements, FISMA, HSPD-12, Federal Government Policies, Procedures, Guidelines, PIV II, A-130, HIPAA, NIST Publications, Sarbanes-Oxley and POA M reporting. Featuring a compliance forum, requirements whitepapers, downloads, anti-virus information, NIST - IT Security Compliance and vulnerabilities, general security information and tips. en 2010-09-09T23:43:36-06:00 herronj@nist.org hourly 1 2000-01-01T12:00+00:00 NIST Computer Security Division Released Special Publication 800-38E http://www.nist.org/news.php?extend.274 2010-09-09T23:43:36-06:00 NIST.org This publication approves the XTS-AES mode of the AES algorithm for data on storage devices. DRAFT Special Publication 800-37 Revision 1 Available http://www.nist.org/news.php?extend.273 2010-09-09T23:43:36-06:00 NIST.org Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach News Blog: "Mass Panic! The iPhone Has a Vulnerability" http://www.nist.org/news.php?extend.272 2010-09-09T23:43:36-06:00 NIST.org Researchers at the Black Hat security conference on Thursday showed an iPhone security flaw which exploits a weakness in SMS text messaging to take control of the device. First ZeroDay Exploit Hits Firefox http://www.nist.org/news.php?extend.271 2010-09-09T23:43:36-06:00 NIST.org The Mozilla Firefox browser experiences it`s first ever Zeroday exploit. (Fixed) "FBI Probes Hacker's $10 Million Ransom Demand for Stolen Virginia Medical Records" http://www.nist.org/news.php?extend.270 2010-09-09T23:43:36-06:00 NIST.org FoxNews is reporting that a Hacker is attempting extort $10 million from the State of Virginia Free Online Antivirus, Spyware, and Firewall Scanners Review http://www.nist.org/news.php?extend.93 2010-09-09T23:43:36-06:00 NIST.org So many people have asked for our help with infected computers that we put together this review of free online malware scanners. Conflicker Worm / Botnet Downloads Mystery Payload – April 9th update http://www.nist.org/news.php?extend.269 2010-09-09T23:43:36-06:00 NIST.org Conflicker updates its self to include a keylogger and tools to find passwords and finanacial data. Conflicker Worm - April Fools Day Likely To Make Fools Out Of Us Either Way http://www.nist.org/news.php?extend.268 2010-09-09T23:43:36-06:00 NIST.org The "Conflicker" worm is set to trigger on April 1st. We provide the basic links you need to be prepared or to remove it. ESET NOD32 False Positive for Kryptik.JX Causing Problems http://www.nist.org/news.php?extend.267 2010-09-09T23:43:36-06:00 NIST.org NOD32 virus version 3918 is quarantining important Windows files