All Sites

» Apache HTTP Server Vulnerability Lists

Lists of security problems fixed in released versions of the Apache HTTP Server.

http://httpd.apache.org/security_report.html

» AusCERT

Australian Computer Emergency Response Team. Advisories and tools.

http://www.auscert.org.au/

» Bugtraq

Independent source for security vulnerabilities, alerts, and threats.

http://www.securityfocus.com/archive/1

» CERT Coordination Center

Studies Internet security vulnerabilities, provides incident response services to sites that have been the victims of attack, publishes a variety of security alerts, researches security and survivability in wide-area-networked computing, and develops information to improve site security.

http://www.cert.org/

» Cyber IncidentResponse Capability

CIRC publishes security bulletins and virus and hoax information. They provide computer security assistance to US Department of Energy (DOE) sites.

http://www.doecirc.energy.gov/

» ISS X-Force

Security alerts, advisories, and alert summaries from ISS.

http://xforce.iss.net/xforce/alerts

» Linux Security Group

Security Advisories, Anti Hackers, programming books and related links.

http://www.linux-security.us/

» New Zealand Computer Emergency Readiness Team

Charitable trust established to improve the general information security posture of New Zealand society. Provides news, alerts, trends and statistics.

http://www.nzcert.org.nz/

» Open Source Vulnerability Database

Searchable database of vulnerabilities. Offers data for download in XML format as well as via website. Details of how to submit new vulnerabilities, database schema and FAQ.

http://osvdb.org/

» Oracle Security Center

Tips, tools, and technologies to keep Oracle products safe, secure, and patched.

http://www.oracle.com/technology/deploy/security/index.html

» Patch Management Forum

Mailing list facilitates networking and information exchange related to patch management: announcements, testing, verification, operations processes, and vulnerabilities.

http://groups.yahoo.com/group/patchmgmt/

» PatchAdvisor

Fee based patch alert service.

http://www.patchadvisor.com/

» PatchManagement.org

Mailing list dedicated to the discussion of patch management.

http://www.patchmanagement.org/

» SANS Internet Storm Center

Cooperative cyber threat monitor and alert system. Features daily handler diaries that summarize and analyze new threats and events.

http://isc.sans.org/

» Secunia

Provides security advisories and information about patches, and provides software for vulnerability management.

http://secunia.com/

» Symantec DeepSight Threat Management System

Fee based security alert service that provides early warning of active attacks.

http://www.symantec.com/Products/enterprise?c=prodinfo&refId=988

» VUPEN Security

Provides security advisories and real-time information about vulnerabilities, exploits, and threats. Also provides vulnerability management and pentesting solutions.

http://www.vupen.com/english/

» CASESContact - tips and tricks

CASEScontact is an information security site providing tips and tricks for home users and SMEs (Small and Medium-Sized Enterprises) for FREE (How to protect against threats, vulnerabilities, privacy, encryption, viruses, worms, Trojans, spyware etc.). [RSS]

http://casescontact.org/rss_tips.php

» SecurityFocus: Bugtraq

Full disclosure computer security vulnerabilities feed. [RSS]

http://www.securityfocus.com/rss/vulnerabilities.xml