Search - NIST IT Security

Headlines

NIST.GOV

»	Experts to Discuss Botnet Challenges, Steps for Prevention at May 30 Workshop
»	A User-Centered Approach to Designing Electronic Health Records
»	Comments Requested on Strategies to Mitigate Risk in the Federal ICT Supply Chain
»	No Strings Attached: NIST Protocol Helps Communicate Biometrics from Anywhere
»	Cloud Computing Forum amp Workshop V Meets June 5-7 at the Department of Commerce
»	Creating Usable Electronic Health Records (EHRs): A User-Centered Design Best Practices Workshop
»	Iris Recognition Report Evaluates Needle in Haystack Search Capability
»	Fifth Annual Health Information Security Conference Runs June 6-7
»	NIST Proposes Update to Digital Signature Standard
»	April Workshop Focuses on Cybersecurity for Cyber-Physical Systems and Industrial Controls
»	New Industry Commitments to Give 15 Million Households Tools to Shrink Their Energy Bills
»	NIST Releases Technical Guidance for Evaluating Electronic Health Records
»	NIST Announces Funding to Form Steering Group to Support Trusted Identities in Cyberspace
»	NSTIC Steering Group FFO Proposers' Webinar
»	Guidance on Wireless Local Area Network Security is Close at Hand

Date published: not known
Details

US-CERT Current Activity

»	Apple Releases QuickTime 7.7.2
»	Google Releases Google Chrome 19
»	Apple Releases Flashback Malware Security Updates
»	Apple Releases Multiple Security Updates
»	Adobe Releases Security Bulletins for Multiple Products
»	Apple Releases iOS 5.1.1
»	Microsoft Releases May Security Bulletin
»	Microsoft Releases Advanced Notification for May Security Bulletin
»	Adobe Releases Security Advisory for Adobe Flash Player
»	Google Releases Chrome 18.0.1025.168
»	RuggedCom Rugged Operating System Vulnerability
»	DNSChanger Malware
»	Oracle Releases Critical Patch Update for April 2012
»	HP ProCurve 5400 zl Switches Security Bulletin
»	Samba Releases Updates for 3.0.x - 3.6.3
»	Microsoft Releases April Security Bulletin
»	Adobe Releases Security Bulletin for Adobe Reader and Acrobat
»	Google Releases Google Chrome 18.0.1025.151
»	Cisco Releases Security Advisory for WebEx Player
»	Apple Update for Java for OS X Lion and Mac OS X
»	Google Releases Google Chrome 18.0.1025.142
»	Cisco Releases Multiple Security Advisories
»	Adobe Releases Security Advisory for Adobe Flash Player
»	Google Releases Google Chrome 17.0.963.83
»	Cisco Releases Multiple Security Advisories
»	Mozilla Releases Multiple Updates
»	Microsoft Releases March Security Bulletin
»	Apple Releases Safari 5.1.4
»	Google Releases Chrome 17.0.963.79
»	Apple Releases Multiple Security Updates

Date published: not known
Details

JC3-CIRC Updates

»	U-170: Apple QuickTime Multiple Flaws Let Remote Users Execute Arbitrary Code Apple QuickTime Multiple Flaws Let Remote Users Execute Arbitrary Code
»	U-169: Sympa Multiple Security Bypass Vulnerabilities Sympa Multiple Security Bypass Vulnerabilities
»	U-168: EMC Documentum Information Rights Management Server Bugs Let Remote Authenticated Users Deny Service EMC Documentum Information Rights Management Server Bugs Let Remote Authenticated Users Deny Service
»	U-167: OpenSSL Invalid TLS/DTLS Record Processing Lets Remote Users Deny Service OpenSSL Invalid TLS/DTLS Record Processing Lets Remote Users Deny Service
»	U-166: Adobe Shockwave Player Memory Corruption Flaws Let Remote Users Execute Arbitrary Code Adobe Shockwave Player Memory Corruption Flaws Let Remote Users Execute Arbitrary Code
»	U-165: Apple iOS Bugs Let Remote Users Execute Arbitrary Code and Spoof Address Bar URLs Apple iOS Bugs Let Remote Users Execute Arbitrary Code and Spoof Address Bar URLs
»	U-164: Microsoft Security Bulletin Advance Notification for May 2012 Microsoft Security Bulletin Advance Notification for May 2012
»	U-163: PHP Command Parameter Bug Lets Remote Users Obtain Potentially Sensitive Information and Execute Arbitrary Code PHP Command Parameter Bug Lets Remote Users Obtain Potentially Sensitive Information and Execute Arb ...
»	U-162: Drupal Multiple Vulnerabilities Drupal Multiple Vulnerabilities
»	U-161: Citrix Provisioning Services Unspecified Flaw Lets Remote Users Execute Arbitrary Code Citrix Provisioning Services Unspecified Flaw Lets Remote Users Execute Arbitrary Code
»	U-160: Google Chrome Multiple Flaws Let Remote Users Execute Arbitrary Code Google Chrome Multiple Flaws Let Remote Users Execute Arbitrary Code
»	U-159: Red Hat Enterprise MRG Messaging Qpid Bug Lets Certain Remote Users Bypass Authentication Red Hat Enterprise MRG Messaging Qpid Bug Lets Certain Remote Users Bypass Authentication
»	U-158: HP NonStop Server Java Multiple Vulnerabilities HP NonStop Server Java Multiple Vulnerabilities
»	U-157: Ruby Mail Gem Directory Traversal and Shell Command Injection Vulnerabilities Ruby Mail Gem Directory Traversal and Shell Command Injection Vulnerabilities
»	U-156: Red Hat update for JBoss Enterprise Portal Platform Red Hat update for JBoss Enterprise Portal Platform

Date published: not known
Details

Virus Bulletin news

»	FBI warns against malware installed via hotel networks Malware poses as fake update of popular software.
»	May issue of VB published The May issue of Virus Bulletin is now available for subscribers to download.
»	Android malware served via compromised websites Malware downloaded automatically, but requires user permission to be installed.
»	PayPal spam leads to exploit kit Clicking on links leads to Blackhole rather than phishing site.
»	Significant rise in malicious spam and phishing Over one quarter of malicious emails contain eight-year-old malware.
»	Researchers find many popular sites serving drive-by downloads 10 million people exposed to malware served by 25,000 most visited sites alone.
»	Android malware hides inside JPG image New LeNa variant no longer depends on rooted devices.
»	April issue of VB published The April issue of Virus Bulletin is now available for subscribers to download.
»	Microsoft Word for Mac exploit used in targeted attacks Tibetan NGOs targeted.

Date published: not known
Details

Dark Reading - All Stories

»	SCADA/Smart-Grid Vendor Adopts Microsoft's Secure Software Development Program Meanwhile, utilities lag when it comes to cyberattack preparedness and risk management at the execut ...
»	Delete Data To Delete Risk Smart data-retention policies allow an organization to rid itself of risky data when there's no need ...
»	New Fraud Campaign Targets Facebook, Gmail, Hotmail, Yahoo Users What the attacks share in common, besides being scams, is their use of a specific variant of Zeus
»	Time To Deploy The FUD Weapon? When suffering from compliance fatigue, you may have only one option to getting the funding you need ...
»	5 Ways To Lose A Malicious Insider Lawsuit Making the case against an insider takes preparation and proactive work with HR and legal
»	What A DDoS Can Cost Around 65 percent of IT pros say a DDoS costs their organizations $240,000 in lost revenue per day o ...
»	Cyberspies Target Victims Via 'Strategic' Drive-by Website Attacks Cyberespionage attackers more and more are injecting specific, legitimate websites with malware in h ...
»	Number Of Software Pirates On The Rise Fifty-seven percent of respondents said they've pirated software, according to Business Software All ...
»	Network Security Technology Evolving Rapidly, Forrester Says Review of 17 product categories shows next-generation firewalls on the rise, stand-alone NAC on the ...

Date published: not known
Details