| VUPEN Security http://www.vupen.com/english/ Provides security advisories and real-time information about vulnerabilities, exploits, and threats. Also provides vulnerability management and pentesting solutions. | |
| Secunia http://secunia.com/ Provides security advisories and information about patches, and provides software for vulnerability management. | |
| SANS Internet Storm Center http://isc.sans.org/ Cooperative cyber threat monitor and alert system. Features daily handler diaries that summarize and analyze new threats and events. | |
| PatchManagement.org http://www.patchmanagement.org/ Mailing list dedicated to the discussion of patch management. | |
| PatchAdvisor http://www.patchadvisor.com/ Fee based patch alert service. | |
| Patch Management Forum http://groups.yahoo.com/group/patchmgmt/ Mailing list facilitates networking and information exchange related to patch management: announcements, testing, verification, operations processes, and vulnerabilities. | |
| Oracle Security Center http://www.oracle.com/technology/deploy/security/index.html Tips, tools, and technologies to keep Oracle products safe, secure, and patched. | |
| Open Source Vulnerability Database http://osvdb.org/ Searchable database of vulnerabilities. Offers data for download in XML format as well as via website. Details of how to submit new vulnerabilities, database schema and FAQ. | |
| New Zealand Computer Emergency Readiness Team http://www.nzcert.org.nz/ Charitable trust established to improve the general information security posture of New Zealand society. Provides news, alerts, trends and statistics. | |
| Linux Security Group http://www.linux-security.us/ Security Advisories, Anti Hackers, programming books and related links. | |
| ISS X-Force http://xforce.iss.net/xforce/alerts Security alerts, advisories, and alert summaries from ISS. | |
| Cyber IncidentResponse Capability http://www.doecirc.energy.gov/ CIRC publishes security bulletins and virus and hoax information. They provide computer security assistance to US Department of Energy (DOE) sites. | |
| CERT Coordination Center http://www.cert.org/ Studies Internet security vulnerabilities, provides incident response services to sites that have been the victims of attack, publishes a variety of security alerts, researches security and survivability in wide-area-networked computing, and develops information to improve site security. | |
| Bugtraq http://www.securityfocus.com/archive/1 Independent source for security vulnerabilities, alerts, and threats. | |
| AusCERT http://www.auscert.org.au/ Australian Computer Emergency Response Team. Advisories and tools. | |
