A Central Repository for Virus Information?

four12 asks: "I've been doing more work lately with network security and tightening things up. My new employer has been pretty lax over the years with such things and has come to the realization that their luck has to be wearing thin. I have noticed an dissonance of information between the various virus information sites. McAfee will have a 'prolific' worm listed, but Symantec and Trend say nothing about it and vice versa. It makes me wonder first of all, is my anti-virus system catching things as fast as the other systems? Is there a place that I can go that digests the latest threats and information down in to a nice, clean webpage? I already have too many listserv subscriptions and don't want to wade through a dozen webpages trying to correlate what is out there."

Comments

CERT

[setzman]

They seem to have a lot of the current advisories and stuff here.

An inflection point for Outlook?

[gruntvald]

It seems to me that we are getting close to the inflection point for Outlook, where it's benefits are too adversely affected by it's security record. Following bugtraq, we are now at the point where even plaintext messages can trigger javascript. Absurd.

Don't Rely Exclusivly on Anti-Virus!

[zulux]

The antivirus vendors can only release their updated file - AFTER the virus has started to spread, the receive a copy and patch and test. This could take *DAYS*.

Some people think that a properly created worm/virus could spread over the entire available host populations in under 15 min from release.

More Info Worhal Virus

Add atachement mangeling, removal, and remove vunerable email client for example; Outlook with with it's own exploits and it's embeded HTML (Explorer) with it's own list of exploits are unacceptable for a networked computing environment.

US Dept of Energy website

[Kiaser Zohsay]

http://www.ciac.org/ciac/

Pretty comprehensive across platforms, OSs, viruses, hoaxes, buffer overflows...

Best of all, they're not trying to sell you something.