<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Cisco Blog &#187; psirt</title>
	<atom:link href="http://blogs.cisco.com/tag/psirt/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.cisco.com</link>
	<description></description>
	<lastBuildDate>Fri, 24 May 2013 16:21:25 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>CVRF: A Penny For Your Thoughts</title>
		<link>http://blogs.cisco.com/security/cvrf-a-penny-for-your-thoughts/</link>
		<comments>http://blogs.cisco.com/security/cvrf-a-penny-for-your-thoughts/#comments</comments>
		<pubDate>Mon, 22 Apr 2013 14:27:23 +0000</pubDate>
		<dc:creator>Mike Schiffman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[advisories]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[cvrf]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[exploits]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=110766</guid>
		<description><![CDATA[The Common Vulnerability Reporting Framework (CVRF) is a security automation standard intended to make your life easier by offering a [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/cvrf-a-penny-for-your-thoughts/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco Security Disclosure: Help Us Help You!</title>
		<link>http://blogs.cisco.com/security/cisco-security-disclosure-help-us-help-you-2/</link>
		<comments>http://blogs.cisco.com/security/cisco-security-disclosure-help-us-help-you-2/#comments</comments>
		<pubDate>Mon, 15 Apr 2013 11:00:35 +0000</pubDate>
		<dc:creator>John Stuppi</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco Security Advisory]]></category>
		<category><![CDATA[ios bundle]]></category>
		<category><![CDATA[patch management]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=109896</guid>
		<description><![CDATA[The decision to deliver the biannual (on the fourth Wednesday of every March and September) Cisco IOS Software Security Advisory Bundled Publication brought with it many challenges, process changes, and—in the end—a format for Cisco Vulnerability Disclosure that we hope addresses at least some of your concerns.  What we would like to get now is feedback from our customers on how the bundle delivery format has changed your lives (well, at least during working hours!), for better or for worse, when it comes to dealing with <a href="http://www.cisco.com/go/psirt" target="_blank">Cisco PSIRT</a> security vulnerabilities identified in your Cisco IOS environment. The information you provide in this <a href="https://www.ciscofeedback.vovici.com/se.ashx?s=6A5348A7451FB401" target="_blank">survey</a> will help Cisco to continue to evolve our vulnerability disclosure process to address your challenges and concerns, just as we did back in 2008 when we listened to you and developed the Cisco IOS Software Security Advisory bundle process.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/cisco-security-disclosure-help-us-help-you-2/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>I Can’t Keep Up with All These Cisco Security Advisories: Do I Have to Upgrade?</title>
		<link>http://blogs.cisco.com/security/i-cant-keep-up-with-all-these-cisco-security-advisories-do-i-have-to-upgrade/</link>
		<comments>http://blogs.cisco.com/security/i-cant-keep-up-with-all-these-cisco-security-advisories-do-i-have-to-upgrade/#comments</comments>
		<pubDate>Tue, 02 Apr 2013 13:00:48 +0000</pubDate>
		<dc:creator>Omar Santos</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[advisories]]></category>
		<category><![CDATA[CVSS]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[exploits]]></category>
		<category><![CDATA[incident response]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security advisories]]></category>
		<category><![CDATA[security advisory]]></category>
		<category><![CDATA[security notice]]></category>
		<category><![CDATA[security notices]]></category>
		<category><![CDATA[security top of mind]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=108217</guid>
		<description><![CDATA["A security advisory was just published! Should I hurry and upgrade all my Cisco devices now?" This is a question that I am being asked by customers on a regular basis. In fact, I am also asked why there are so many security vulnerability advisories. To start with the second question: Cisco is committed to protecting customers by sharing critical security-related information in a very transparent way. Even if security vulnerabilities are found internally, the Cisco Product Security Incident Response Team (PSIRT) – which is my team – investigates, drives to resolution, and discloses such vulnerabilities. To quickly answer the first question, don't panic, as you may not have to immediately upgrade your device. However, in this article I will discuss some of the guidelines and best practices for responding to Cisco security vulnerability reports.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/i-cant-keep-up-with-all-these-cisco-security-advisories-do-i-have-to-upgrade/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>March 2013 Cisco IOS Software Security Advisories: T-7 and Counting!</title>
		<link>http://blogs.cisco.com/security/march-2013-cisco-ios-software-security-advisories-t-7-and-counting/</link>
		<comments>http://blogs.cisco.com/security/march-2013-cisco-ios-software-security-advisories-t-7-and-counting/#comments</comments>
		<pubDate>Wed, 20 Mar 2013 19:08:33 +0000</pubDate>
		<dc:creator>Erin Float</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[IOS]]></category>
		<category><![CDATA[ios bundle]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=106528</guid>
		<description><![CDATA[On Wednesday of next week, the Cisco Product Security Incident Response Team (PSIRT) will release the first Cisco IOS Software Security Advisory Bundled Publication of 2013. As a reminder, Cisco releases bundles of Cisco IOS Software Security Advisories on the fourth Wednesday of March and September each calendar year. As is the case with the vast majority of our Security Advisories, vulnerabilities scheduled for disclosure in the upcoming bundle will normally have a Common Vulnerability Scoring System (CVSS) Base Score from 7.0 to 10.0.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/march-2013-cisco-ios-software-security-advisories-t-7-and-counting/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Let&#8217;s Hack Some Cisco Gear at SecCon!</title>
		<link>http://blogs.cisco.com/security/lets-hack-some-cisco-gear-at-seccon/</link>
		<comments>http://blogs.cisco.com/security/lets-hack-some-cisco-gear-at-seccon/#comments</comments>
		<pubDate>Tue, 18 Dec 2012 16:54:13 +0000</pubDate>
		<dc:creator>Omar Santos</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[cisco-seccon-2012]]></category>
		<category><![CDATA[CSDL]]></category>
		<category><![CDATA[intellishield]]></category>
		<category><![CDATA[product security]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[SecCon]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[third party software]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=95842</guid>
		<description><![CDATA[Here's the second in a series of posts discussing how Cisco SecCon 2012 (December 3-6) brought together hundreds of engineers, live and virtually, from Cisco offices around the globe with one common goal: to share their knowledge and learn best practices about how to increase the overall security posture of Cisco products.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/lets-hack-some-cisco-gear-at-seccon/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Help! I Need to Respond to All These Cisco IOS Software Vulnerabilities and I Cannot Scale!!!</title>
		<link>http://blogs.cisco.com/security/help-i-need-to-respond-to-all-these-cisco-ios-software-vulnerabilities-and-i-cannot-scale/</link>
		<comments>http://blogs.cisco.com/security/help-i-need-to-respond-to-all-these-cisco-ios-software-vulnerabilities-and-i-cannot-scale/#comments</comments>
		<pubDate>Tue, 23 Oct 2012 14:32:36 +0000</pubDate>
		<dc:creator>Omar Santos</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[automation]]></category>
		<category><![CDATA[OVAL]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=88438</guid>
		<description><![CDATA[Most security and network administrators are seeking ways to leverage standards and available tools to reduce the complexity and time necessary to respond to security advisories, assess devices, and ensure compliance. All these challenges make it almost impossible for a security or network administrator to decide what changes are needed on endpoints or networking devices. Additionally, administrators must determine how to implement those changes quickly, correctly, and consistently. The security community has struggled to make these tasks easier. The Security Content Automation Protocol (SCAP) was developed to address most of these challenges.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/help-i-need-to-respond-to-all-these-cisco-ios-software-vulnerabilities-and-i-cannot-scale/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Automating Cisco IOS Vulnerability Assessment</title>
		<link>http://blogs.cisco.com/security/automating-cisco-ios-vulnerability-assessment/</link>
		<comments>http://blogs.cisco.com/security/automating-cisco-ios-vulnerability-assessment/#comments</comments>
		<pubDate>Wed, 26 Sep 2012 16:14:58 +0000</pubDate>
		<dc:creator>Omar Santos</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[cvrf]]></category>
		<category><![CDATA[ios bundle]]></category>
		<category><![CDATA[OVAL]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[security advisories]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=84305</guid>
		<description><![CDATA[Security automation is a hot topic these days. Most organizations have many systems to patch and configure securely, with numerous [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/automating-cisco-ios-vulnerability-assessment/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco IOS Software Security Advisory Bundle Announced</title>
		<link>http://blogs.cisco.com/security/cisco-ios-software-security-advisory-bundle-announced/</link>
		<comments>http://blogs.cisco.com/security/cisco-ios-software-security-advisory-bundle-announced/#comments</comments>
		<pubDate>Wed, 26 Sep 2012 16:06:35 +0000</pubDate>
		<dc:creator>Clay Kossmeyer</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[IOS]]></category>
		<category><![CDATA[ios bundle]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=84302</guid>
		<description><![CDATA[Today Cisco Security Intelligence Operations (SIO) has released its Semi-annual Cisco IOS Software Security Advisory Bundle, the second and final IOS bundle publication of 2012. Today’s release includes nine advisories, of which five have workarounds.

As in previous bundle publications, Cisco SIO has provided an array of security resources to help customers secure their networks. This collateral is not unique to bundle security advisories and instead is part of SIO’s response to current security events. Resources include:]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/cisco-ios-software-security-advisory-bundle-announced/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The September 2012 Cisco Security Advisory Bundle is Coming Soon!</title>
		<link>http://blogs.cisco.com/security/the-september-2012-cisco-security-advisory-bundle-is-coming-soon/</link>
		<comments>http://blogs.cisco.com/security/the-september-2012-cisco-security-advisory-bundle-is-coming-soon/#comments</comments>
		<pubDate>Wed, 19 Sep 2012 18:19:09 +0000</pubDate>
		<dc:creator>Tim Sammut</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[IOS]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[security advisories]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=83337</guid>
		<description><![CDATA[The Cisco Product Security Incident Response Team (PSIRT) follows a twice-per-year schedule for disclosing high-severity security vulnerabilities in Cisco IOS Software and this post serves as a sneak preview of the next Cisco IOS Software Security Advisory Bundle which will be released on the 26th of September at 16:00 GMT. ]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/the-september-2012-cisco-security-advisory-bundle-is-coming-soon/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Product Security Incident Managers…A Closer Look</title>
		<link>http://blogs.cisco.com/security/product-security-incident-managersa-closer-look/</link>
		<comments>http://blogs.cisco.com/security/product-security-incident-managersa-closer-look/#comments</comments>
		<pubDate>Thu, 12 Jul 2012 16:22:29 +0000</pubDate>
		<dc:creator>Mike Adler</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[incident]]></category>
		<category><![CDATA[incident response]]></category>
		<category><![CDATA[psirt]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=76261</guid>
		<description><![CDATA[This article gives the reader an insider's look into the life of a Cisco Product Security Incident Response Team (PSIRT) member, the roles and responsibilities of PSIRT, and the processes and procedures that are followed by PSIRT Incident Managers (IMs).]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/product-security-incident-managersa-closer-look/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
