• Technical Security Alerts    
  Microsoft Updates for Multiple SMB Protocol Vulnerabilities
• Security Bulletins  
  Vulnerability Summary for the Week of December 29, 2008

For Non-Technical Users

• Security Alerts    
  Microsoft Updates for Multiple Vulnerabilities
• Security Tips  
  Understanding Hidden Threats: Corrupted Software Files

• Internet Explorer 7 XML parsing vulnerability
• Microsoft Server Service RPC vulnerability
• FLEXnet Connect insecurely retrieves and executes scripts
• TWiki command execution vulnerability

Other Resources

• Recent Notes
• NVD (National Vulnerability Database)

• Oracle Releases Critical Patch Update for January 2009
  
• Microsoft Releases January Security Bulletin
  
• BlackBerry Security Advisories
  
• Oracle Issues Pre-Release Announcement for January Critical Patch Update
  
• Malicious Code Circulating via Israel/Hamas Conflict Spam Messages
  
• Microsoft Releases Advance Notification for January Security Bulletin
  
• Cisco Releases Security Advisory for Global Site Selector
  
• OpenSSL Releases Security Advisory
  
• Rogue MD5 SSL Certificate Vulnerability
  
• Worm Exploiting Vulnerability described in MS08-067
  

• SQL Injection
  US-CERT has published a new informational paper on SQL Injection. It is available in the Security Publications portion of the website.
• US-CERT Monthly Activity Summary
  The Monthly Activity Summary for Decmber 2008 has been published. This report summarizes general activity and updates made to the National Cyber Alert System and is available in the Security Publications portion of the website.