1. Multiple Web Browsers Affected by Clickjacking
(News/CERT)

...techniques, such as capchas, out-of-band email verification, or other methods to verify sensitive web transactions.US-CERT will provide additional information as it becomes available.US-CERT is aware ...

2. SSH Key-based Attacks
(News/CERT)

...gainst the number of directories shown by "ls". US-CERT encourages administrators to perform the following actions to help mitigate the risks:Proactively identify and examine systems where SSH keys ar...

3. SSH Key-based Attacks
(News/CERT)

...gainst the number of directories shown by "ls". US-CERT encourages administrators to perform the following actions to help mitigate the risks:Proactively identify and examine systems where SSH keys ar...

4. Zone Alarm Releases Security Advisory
(News/CERT)

...037 affects Zone Alarm. US-CERT encourages users to review the Security Advisory and apply the Recommended Actions listed in the document.Zone Alarm has released a Security Advisory indicating that ve...

5. Microsoft Internet Explorer 6 Cross-Domain Vulnerability
(News/CERT)

...ecute arbitrary script in the context of another domain. This could allow an attacker to take a variety of actions, including stealing cookies, hijacking a web session, or stealing authentication cred...

6. Microsoft Releases Security Advisory
(News/CERT)

... website administrators to review Microsoft Security Advisory 954462 and implement any necessary Suggested Actions listed in the advisory. Users are encouraged to implement best security practices as ...

7. Microsoft Windows CE Trojan
(News/CERT)

... disables Windows Mobile application installation security.The trojan may take any or all of the following actions on the mobile device:spreads via seemingly legitimate application installation files ...

8. Microsoft Office Excel Remote Code Vulnerability
(News/CERT)

...attacker to execute arbitrary code with the privileges of the local user. US-CERT recommends the following actions to help mitigate the security risks: Do not to open unfamiliar or unexpected emai...

9. Flash File Cross-Site Scripting Vulnerabilities
(News/CERT)

...attacks on a vulnerable system. The flaws exist in the way that input is validated when passed to embedded ActionsScript and JavaScript in the SWF file. Authoring tools that automatically generate Fla...

10. Adobe Flash Player Vulnerabilities
(News/CERT)

... Flash Player are affected. Note that CVE-2007-4324 was addressed by providing additional functionality to ActionScript, which mitigates this vulnerability. See Adobe kb402956 for more information reg...