SANS ISC SecNewsFeed http://isc.sans.org en-us (C) SANS Institute 2012 isc rss feed maker 30 handlers@sans.org (ISC Handlers) SANS ISC SecNewsFeed http://isc.sans.org/images/status.gif http://isc.sans.org Agile Development Teams CAN build secure software (Appsec Streetfighter Blog) http://blogs.sans.org/appsecstreetfighter/2012/02/22/agile-development-teams-can-build-secure-software/ http://blogs.sans.org/appsecstreetfighter/2012/02/22/agile-development-teams-can-build-secure-software/ CVE-2012-0200 (soliddb) (Natl. Vulnerability Database) http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0200 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0200 Google, Microsoft butt heads over IE privacy skirting (NetworkWorld Security) http://www.networkworld.com/news/2012/022112-google-microsoft-butt-heads-over-256397.html?source=nww_rss http://www.networkworld.com/news/2012/022112-google-microsoft-butt-heads-over-256397.html?source=nww_rss ASLR on Android 4 found wanting (Heise Security News) http://rss.feedsportal.com/c/32569/f/491736/s/1cd9547e/l/0L0Sh0Eonline0N0Csecurity0Cnews0Citem0CASLR0Eon0EAndroid0E40Efound0Ewanting0E1440A7590Bhtml0Cfrom0Crss/story01.htm http://rss.feedsportal.com/c/32569/f/491736/s/1cd9547e/l/0L0Sh0Eonline0N0Csecurity0Cnews0Citem0CASLR0Eon0EAndroid0E40Efound0Ewanting0E1440A7590Bhtml0Cfrom0Crss/story01.htm Global DNS takedown plotters disowned by Anonymous (The Register) http://go.theregister.com/feed/www.theregister.co.uk/2012/02/22/anon_disowns_dns_takedown_plan/ http://go.theregister.com/feed/www.theregister.co.uk/2012/02/22/anon_disowns_dns_takedown_plan/ InfoWorld's Windows 7 Security Deep Dive: The expert guide (InfoWorld) (Yahoo Security) http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/infoworld/20120222/tc_infoworld/186805 http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/infoworld/20120222/tc_infoworld/186805 ISC StormCast for Thursday, February 23rd 2012 http://isc.sans.edu/podcastdetail.html?id2347, (Thu, Feb 23rd) (InternetStormCenter) http://isc.sans.edu/podcastdetail.html?id=2347 http://isc.sans.edu/podcastdetail.html?id=2347 Vuln: Microsoft Internet Explorer CVE-2012-0155 VML Handling Remote Code Execution Vulnerability (SecurityFocus Vulnerabilities) http://www.securityfocus.com/bid/51935 http://www.securityfocus.com/bid/51935 "Composite Link USe Cases and Design Considerations" - Ning So, Andrew Malis, Dave McDysan, Lucy Yong, Curtis Villamizar (Internet Drafts) http://tools.ietf.org/html/symmvo-rtgwg-cl-use-cases-00.txt http://tools.ietf.org/html/symmvo-rtgwg-cl-use-cases-00.txt AppSense Unveils Smartphone Encryption (Network Computing Security) http://www.networkcomputing.com/security/232601144 http://www.networkcomputing.com/security/232601144 As the Hard Disk Drive (HDD) Continues to Spin (IT Toolbox Blogs) http://it.toolbox.com/blogs/storage-and-io/as-the-hard-disk-drive-hdd-continues-to-spin-50499 http://it.toolbox.com/blogs/storage-and-io/as-the-hard-disk-drive-hdd-continues-to-spin-50499 FCC urges Internet companies to safeguard Web (Yahoo News) http://news.yahoo.com/fcc-urges-internet-companies-safeguard-211202567.html http://news.yahoo.com/fcc-urges-internet-companies-safeguard-211202567.html John Nash's 1955 Letter to the NSA (Schneier blog) http://www.schneier.com/blog/archives/2012/02/john_nashs_1955.html http://www.schneier.com/blog/archives/2012/02/john_nashs_1955.html Google Sued Over Safari Privacy Snafu (E-Week Security) http://feeds.ziffdavisenterprise.com/~r/RSS/eweeksecurity/~3/E4ITU23uaII/ http://feeds.ziffdavisenterprise.com/~r/RSS/eweeksecurity/~3/E4ITU23uaII/ MS12-014 - Important : Vulnerability in Indeo Codec Could Allow Remote Code Execution (2661637) - Version: 1.1 (Microsoft) http://technet.microsoft.com/en-us/security/bulletin/ms12-014 http://technet.microsoft.com/en-us/security/bulletin/ms12-014