US-CERT | United States Computer Emergency Readiness Team

Published Wednesday, April 16, 2014

Oracle has released its Critical Patch Update for April 2014 to address 104 vulnerabilities across multiple products. This update contains the following security fixes:

Read Full Entry »

Easter Holiday Phishing Scams and Malware Campaigns

Published Wednesday, April 9, 2014

As the Easter holiday approaches, US-CERT reminds users to stay aware of holiday scams and cyber campaigns, which may include:

Read Full Entry »

Adobe Releases Security Updates for Flash Player and AIR

Published Wednesday, April 9, 2014

Adobe has released security updates to address multiple vulnerabilities in Adobe Flash Player and AIR. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system.

The following updates are available:

Read Full Entry »

Announcements

Easter Holiday Phishing Scams and Malware Campaigns

As the Easter holiday nears, US-CERT reminds users to stay aware of seasonal scams and cyber campaigns that exploit people’s holiday generosity.
Open SSL ‘Heartbleed’ Vulnerability

Certain OpenSSL versions contain a critical vulnerability which may allow a malicious actor to obtain sensitive or private information. See TA14-098A and VU#720951 for details and recommended actions.
DHS Announces Critical Infrastructure Cyber Community Voluntary Program

The Critical Infrastructure Cyber Community Voluntary Program, or C³ (pronounced "C Cubed") Voluntary Program, is an innovative public-private partnership, to help connect companies, as well as Federal, State, local, tribal, and territorial partners, to DHS and other Federal government programs and resources that will assist their efforts in managing their cyber risks.
Malware Targeting Point-of-Sale (POS) Systems

Cyber criminals are targeting consumer information entered in Point of Sale (POS) systems. This alert, released on January 2, 2014, describes the methods used in POS targeting and provides best practices, as well as consumer remediation suggestions that can assist in preventing unauthorized access to POS systems.
DDoS Quick Guide

NCCIC has recently published a DDoS Quick Guide. This guide contains possible DDoS attack methods per OSI layer, potential impact and the applicable recommended mitigation strategies as well as relevant hardware. This report also provides possible DDoS traffic type descriptions.