- US-CERT
- Established in 2003 to protect the nation's Internet infrastructure, US-CERT coordinates defense against and responses to cyber attacks across the nation. - CERIAS - Center for Education and Research in Information Assurance and Security. University center for multidisciplinary research and education in areas of information security.
- Apache HTTP Server Vulnerability Lists - Lists of security problems fixed in released versions of the Apache HTTP Server.
- AusCERT - Australian Computer Emergency Response Team. Advisories and tools.
- Bugtraq - Independent source for security vulnerabilities, alerts, and threats.
- CERT Coordination Center - Studies Internet security vulnerabilities, provides incident response services to sites that have been the victims of attack, publishes a variety of security alerts, researches security and survivability in wide-area-networked computing, and develops information to improve site security.
- ISS X-Force - Security alerts, advisories, and alert summaries from ISS.
- Linux Security Group - Security Advisories, Anti Hackers, programming books and related links.
- New Zealand Computer Emergency Readiness Team - Charitable trust established to improve the general information security posture of New Zealand society. Provides news, alerts, trends and statistics.
- Open Source Vulnerability Database - Searchable database of vulnerabilities. Offers data for download in XML format as well as via website. Details of how to submit new vulnerabilities, database schema and FAQ.
- Oracle Security Center - Tips, tools, and technologies to keep Oracle products safe, secure, and patched.
- Patch Management Forum - Mailing list facilitates networking and information exchange related to patch management: announcements, testing, verification, operations processes, and vulnerabilities.
- PatchAdvisor - Fee based patch alert service.
- PatchEasy - Software vendor for patch management.
- PatchManagement.org - Mailing list dedicated to the discussion of patch management.
- SANS Internet Storm Center - Cooperative cyber threat monitor and alert system. Features daily handler diaries that summarize and analyze new threats and events.
- Secunia - Provides security advisories and information about patches, and provides software for vulnerability management.
- Symantec DeepSight Threat Management System - Fee based security alert service that provides early warning of active attacks.
- VUPEN Security - Provides security advisories and real-time information about vulnerabilities, exploits, and threats. Also provides vulnerability management and pentesting solutions.
XML-feeds
- CASESContact - tips and tricks (RSS) - CASEScontact is an information security site providing tips and tricks for home users and SMEs (Small and Medium-Sized Enterprises) for FREE (How to protect against threats, vulnerabilities, privacy, encryption, viruses, worms, Trojans, spyware etc.).
- SecurityFocus: Bugtraq (RSS) - Full disclosure computer security vulnerabilities feed.
