US-CERT | United States Computer Emergency Readiness Team

Mar	APR	May
	02
2015	2016	2017

success

fail

About this capture

COLLECTED BY

Collection: IMLS Museum Universe 00001

Crawl 00001 of the IMLS Museum Universe Date File.

TIMESTAMPS

The Wayback Machine - http://web.archive.org/web/20160402213719/https://www.us-cert.gov/ Skip to main content

Official website of the Department of Homeland Security

US-CERT strives for a safer, stronger Internet for all Americans by responding to major incidents, analyzing threats, and exchanging critical cybersecurity information with trusted partners around the world.

Security alerts, tips, and other updates

Contact Us

(888) 282-0870

Send us email

Download PGP/GPG keys

Incidents, Indicators, Phishing, Malware, or Vulnerabilities

Current Activity

View Current Activity Feed

Apple Releases Security Update

Published Friday, April 1, 2016 Apple has released a security update to address a vulnerability in its iBooks Author software. Exploitation of this vulnerability may allow an attacker to obtain sensitive information from an affected system. US-CERT encourages users and administrators to review the Apple security website and apply the necessary update. Read Full Entry »

Cisco Releases Security Update

Published Wednesday, March 30, 2016 Cisco has released a security update to address a vulnerability in its Cisco Firepower System software. Exploitation of this vulnerability could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Cisco Security Advisory and apply the necessary updates. Read Full Entry »

Google Releases Security Update for Chrome

Published Thursday, March 24, 2016 Google has released Chrome version 49.0.2623.108 to address multiple vulnerabilities for Windows, Mac, and Linux. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the Chrome Releases page and apply the necessary update. Read Full Entry »

Announcements

New Incident Notification Guidelines Take Effect on October 1, 2015 On October 1, 2015, all Federal Government Departments and Agencies are required to use the new incident notification guidelines. Major changes include the addition of impact classifications, replacement of categories with threat vectors, and a one hour time-limit to notify US-CERT of a confirmed compromise. New Cybersecurity Resources for SLTT Governments The Critical Infrastructure Cyber Community (C3) Voluntary Program has developed two new resources for State, Local, Tribal, & Territorial (SLTT) Governments: the SLTT Toolkit and Geographically Specific Resources. Small and Midsize Business (SMB) Cybersecurity Toolkit The Critical Infrastructure Cyber Community (C³) Voluntary Program has developed the SMB Toolkit, a packet of resources specially designed to help SMBs recognize and address their cybersecurity risks. More Announcements »

Recent Vulnerabilities

VU#344432: Patterson Dental Eaglesoft uses a hard-coded database password across installations Wednesday, March 30, 2016 at 11:42 AM VU#732760: Autodesk Backburner Manager contains a stack-based buffer overflow vulnerability Monday, March 28, 2016 at 10:43 AM VU#319816: npm fails to restrict the actions of malicious npm packages Friday, March 25, 2016 at 11:42 PM VU#279472: Granite Data Services AMF framework fails to properly parse XML input containing a reference to external entities Thursday, March 24, 2016 at 8:42 AM VU#897144: Solarwinds Dameware Remote Mini Controller Windows service is vulnerable to stack buffer overflow Thursday, March 17, 2016 at 12:20 PM VU#713312: DTE Energy Insight app vulnerable to information exposure Friday, March 11, 2016 at 11:21 AM VU#270232: Quagga bgpd with BGP peers enabled for VPNv4 contains a buffer overflow vulnerability Thursday, March 10, 2016 at 3:21 PM Other Resources: National Vulnerability Database More Vulnerability Notes »

National Cyber Awareness System

Alerts

Timely information about current security issues, vulnerabilities, and exploits. ● Mar 31 Ransomware and Recent Variants ● Dec 03 Dorkbot ● Nov 10 Compromised Web Servers and Web Shells - Threat Awareness and Guidance

Bulletins

Weekly summaries of new vulnerabilities along with patch information when available. ● Mar 28 Vulnerability Summary for the Week of March 21, 2016 ● Mar 21 Vulnerability Summary for the Week of March 14, 2016 ● Mar 14 Vulnerability Summary for the Week of March 7, 2016

Tips

Advice and best practices about common security issues for the general public. ● Dec 15 Before You Connect a New Computer to the Internet ● Dec 15 Securing Your Home Network ● Jan 30 IRS and US-CERT Caution Users: Prepare for Heightened Phishing Risk This Tax Season

Technical Documents

In-depth articles that provide advice and summarize a variety of internet security topics. ● Jul 31 Backoff Point-of-Sale Malware ● Jul 29 Keylogger Malware in Hotel Business Centers ● May 02 Combating the Insider Threat

I Want To

●Report incidents ●Share indicators ●Report phishing ●Report malware ●Report software vulnerabilities

Subscribe to Alerts

Receive security alerts, tips, and other updates.

●Mailing Lists and Feeds ●Twitter

Contact Us

●(888) 282-0870 ●Send us email ●Download PGP/GPG keys ●Home ●FAQ ●Contact Us ●Traffic Light Protocol ●PCII ●DHS Privacy Policy ●Disclaimer ●Accessibility ●Get a PDF Reader US-CERT is part of the Department of Homeland Security. Back to Top