Up to date and relevant information is key to every security
professional supporting production environments. To that end, the members of
Corp-Sec regularly monitor several mailing lists. Some are high volume and some
aren't, but all are worth while. We don't recommend reading all the e-mail you
may get from any of these lists, but prioritize to your environment by subject
headings. If you subscribe to some of these lists, expect a lot of redundant
information, but we've also found that some have different perspectives and all
also sometimes have unique content.
All Corp-Sec members spend less than 2
hours per week to monitoring the lists below and we stay current on relevant
vulnerability information.
Vulnerability Information
| Bugtraq |
http://www.securityfocus.com/archive |
| CERT |
http://www.cert.org |
| Cisco PSIRT |
http://www.cisco.com |
| ISS X-Force Alerts |
http://xforce.iss.net/xforce/maillists/ |
| Microsoft Security Alerts |
http://www.microsoft.com/technet/security |
| NTBUGTRAQ |
http://www.ntbugtraq.com/ |
| SANS @ RISK The Consensus Security Vulnerability Alert |
http://www.sans.org/newsletters/risk |
| Secuina |
http://secunia.com/secunia_security_advisories/ |
| VulnDiscuss |
http://www.vulnwatch.org/subscribe.html |
| VulnWatch |
http://www.vulnwatch.org/subscribe.html |
Other Information
| Cryptogram |
http://www.schneier.com/crypto-gram.html |
| Full Disclosure ***High Traffic |
https://lists.netsys.com/mailman/listinfo |
| Mark Minasi's Tech Support Newsletter |
http://www.minasi.com/nwsreg.htm |
| Randy Franklis Smith's Newsletter |
http://www.ultimatewindowssecurity.com/Newsletter.asp |
| SC Magazine Newswire |
http://www.scmagazine.com/us/newsletter/ |
| SANS Newsbites |
http://www.sans.org/newsletters/ |
| Security Focus - IDS |
http://www.securityfocus.com/archive |
| Security Focus - Incidents |
http://www.securityfocus.com/archive |
| Security Focus - Focus-MS |
http://www.securityfocus.com/archive |
| Security Focus - Forensics |
http://www.securityfocus.com/archive |
| Security Focus - SF-MS-News |
http://www.security-focus.com/newsletters |
| Security Focus - SF-News |
http://www.security-focus.com/newsletters |
| Security Focus - Pen Test |
http://www.securityfocus.com/archive |
| Security Focus - Forensics |
http://www.securityfocus.com/archive |
| Security Watch |
http://www.mcpmag.com/portals/portal.asp?portal=11 |
| Security Wire Digest |
http://www.infosecuritymag.com |
| Windows Security Advisor |
http://searchwindowssecurity.techtarget.com/ |
| W2K News |
http://www.w2knews.com |
Also - - BOOKMARK THE FOLLOWING LINK - - use it on one of the systems
in your SOC