Credible Sources of Computer Threat, Vulnerability, Update Data and Security News

  In any business, it is important to keep up with news and changes in the business environment, technology, etc.  In the IT security realm, it is imperative.  It is a near impossible task to keep one step ahead of potential evil-doers in the IT world.  This week, I'll address some sources I have identified as reliable for IT-related threats, news, etc.

 1. Vendor sites should be near the top of any IT professional's list of go-to sites to keep informed.  Clearly, it is in the best interest of a vendor to keep their customers informed of any security related issues with their products.  Then, it follows that the vendor should also provide guidance on mitigation.
   As an example of this, I am a DNS administrator.  The security checklists I follow require me to subscribe to ISC's bind-announce mail list. This ensures that I am informed whenever ISC finds issues with their BIND packages.

2. US-CERT.  The US Computer Emergency Readiness Team has a great site full of security information for business, government and home users. The Security Publication section is a great resource fur users at any level.

US Cert Link:  http://www.us-cert.gov/

US-CERT maintains a threat alert list with threat descriptions, reference data and solutions.

US-CERT (Alerts) Link: http://www.us-cert.gov/ncas/alerts

3. Symantec.com.  Symantec is a reliable name in the IT security business.  They maintain a great listing of threats, risks and vulnerabilities.  The non-Symantec vulnerabilities are actually linked to another site--Security Focus that has a searchable database with descriptions and recommended fixes.

Symantec (Vulnerabilities) Link: 
http://www.symantec.com/security_response/landing/vulnerabilities.jsp  

4.  Security Week.  Is an online security related publication providing news and articles related to computer security.  This week, in the INFOSEC Island is a very interesting article "Sun Tzu and the Art of Cyber-War" by Krypt3ia:  http://www.infosecisland.com/blogview/22989-Sun-Tzu-and-the-Art-of-Cyber-War.html

Link to Security Week:  http://www.securityweek.com/
 
Well, that will wrap it up this for this week--stay secure out there!