<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Cisco Blog &#187; vulnerability</title>
	<atom:link href="http://blogs.cisco.com/tag/vulnerability/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.cisco.com</link>
	<description></description>
	<lastBuildDate>Sat, 25 May 2013 00:10:13 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Department of Labor Watering Hole Attack Confirmed to be 0-Day with Possible Advanced Reconnaissance Capabilities</title>
		<link>http://blogs.cisco.com/security/department-of-labor-watering-hole-attack-confirmed-to-be-0-day-with-possible-advanced-reconnaissance-capabilities/</link>
		<comments>http://blogs.cisco.com/security/department-of-labor-watering-hole-attack-confirmed-to-be-0-day-with-possible-advanced-reconnaissance-capabilities/#comments</comments>
		<pubDate>Sat, 04 May 2013 21:56:28 +0000</pubDate>
		<dc:creator>Craig Williams</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[botnets]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[targeted attacks]]></category>
		<category><![CDATA[TRAC]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=112409</guid>
		<description><![CDATA[Update 2 5/9/2013: Microsoft has released a &#8220;Microsoft fix it&#8221; as a temporary mitigation for this issue on systems which [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/department-of-labor-watering-hole-attack-confirmed-to-be-0-day-with-possible-advanced-reconnaissance-capabilities/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Coordinated Attacks Against the U.S. Government and Banking Infrastructure</title>
		<link>http://blogs.cisco.com/security/coordinated-attacks-against-the-u-s-government-and-banking-infrastructure/</link>
		<comments>http://blogs.cisco.com/security/coordinated-attacks-against-the-u-s-government-and-banking-infrastructure/#comments</comments>
		<pubDate>Wed, 01 May 2013 19:11:28 +0000</pubDate>
		<dc:creator>Mike Schiffman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[advisories]]></category>
		<category><![CDATA[ASA]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[botnets]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[Cloud Computing]]></category>
		<category><![CDATA[cloud security]]></category>
		<category><![CDATA[data center security]]></category>
		<category><![CDATA[DDoS]]></category>
		<category><![CDATA[exploits]]></category>
		<category><![CDATA[firewall]]></category>
		<category><![CDATA[incident response]]></category>
		<category><![CDATA[IPS]]></category>
		<category><![CDATA[IPS signatures]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[mitigations]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[targeted attacks]]></category>
		<category><![CDATA[TRAC]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=111984</guid>
		<description><![CDATA[Prologue On April 10, 2013, a collective of politically motivated  <a href="http://en.wikipedia.org/wiki/Hacktivism">hacktivists</a>  announced a round of planned attacks called  <a href="http://pastebin.com/0HH61ev4">#OPUSA</a> . These attacks, [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/coordinated-attacks-against-the-u-s-government-and-banking-infrastructure/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>CVRF: A Penny For Your Thoughts</title>
		<link>http://blogs.cisco.com/security/cvrf-a-penny-for-your-thoughts/</link>
		<comments>http://blogs.cisco.com/security/cvrf-a-penny-for-your-thoughts/#comments</comments>
		<pubDate>Mon, 22 Apr 2013 14:27:23 +0000</pubDate>
		<dc:creator>Mike Schiffman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[advisories]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[cvrf]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[exploits]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=110766</guid>
		<description><![CDATA[The Common Vulnerability Reporting Framework (CVRF) is a security automation standard intended to make your life easier by offering a [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/cvrf-a-penny-for-your-thoughts/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>I Can’t Keep Up with All These Cisco Security Advisories: Do I Have to Upgrade?</title>
		<link>http://blogs.cisco.com/security/i-cant-keep-up-with-all-these-cisco-security-advisories-do-i-have-to-upgrade/</link>
		<comments>http://blogs.cisco.com/security/i-cant-keep-up-with-all-these-cisco-security-advisories-do-i-have-to-upgrade/#comments</comments>
		<pubDate>Tue, 02 Apr 2013 13:00:48 +0000</pubDate>
		<dc:creator>Omar Santos</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[advisories]]></category>
		<category><![CDATA[CVSS]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[exploits]]></category>
		<category><![CDATA[incident response]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security advisories]]></category>
		<category><![CDATA[security advisory]]></category>
		<category><![CDATA[security notice]]></category>
		<category><![CDATA[security notices]]></category>
		<category><![CDATA[security top of mind]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=108217</guid>
		<description><![CDATA["A security advisory was just published! Should I hurry and upgrade all my Cisco devices now?" This is a question that I am being asked by customers on a regular basis. In fact, I am also asked why there are so many security vulnerability advisories. To start with the second question: Cisco is committed to protecting customers by sharing critical security-related information in a very transparent way. Even if security vulnerabilities are found internally, the Cisco Product Security Incident Response Team (PSIRT) – which is my team – investigates, drives to resolution, and discloses such vulnerabilities. To quickly answer the first question, don't panic, as you may not have to immediately upgrade your device. However, in this article I will discuss some of the guidelines and best practices for responding to Cisco security vulnerability reports.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/i-cant-keep-up-with-all-these-cisco-security-advisories-do-i-have-to-upgrade/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Today&#8217;s the Day: Announcing the Cisco IOS Software Security Advisory Bundle</title>
		<link>http://blogs.cisco.com/security/todays-the-day-announcing-the-cisco-ios-software-security-advisory-bundle/</link>
		<comments>http://blogs.cisco.com/security/todays-the-day-announcing-the-cisco-ios-software-security-advisory-bundle/#comments</comments>
		<pubDate>Wed, 27 Mar 2013 16:57:54 +0000</pubDate>
		<dc:creator>Erin Float</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[cisco ios]]></category>
		<category><![CDATA[Cisco PSIRT]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[cisco sio]]></category>
		<category><![CDATA[IOS]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=107580</guid>
		<description><![CDATA[Today, Cisco is celebrating a milestone in its commitment to helping you act on security intelligence—our 10th bundle of Cisco IOS Software Security [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/todays-the-day-announcing-the-cisco-ios-software-security-advisory-bundle/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>March 2013 Cisco IOS Software Security Advisories: T-7 and Counting!</title>
		<link>http://blogs.cisco.com/security/march-2013-cisco-ios-software-security-advisories-t-7-and-counting/</link>
		<comments>http://blogs.cisco.com/security/march-2013-cisco-ios-software-security-advisories-t-7-and-counting/#comments</comments>
		<pubDate>Wed, 20 Mar 2013 19:08:33 +0000</pubDate>
		<dc:creator>Erin Float</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[IOS]]></category>
		<category><![CDATA[ios bundle]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=106528</guid>
		<description><![CDATA[On Wednesday of next week, the Cisco Product Security Incident Response Team (PSIRT) will release the first Cisco IOS Software Security Advisory Bundled Publication of 2013. As a reminder, Cisco releases bundles of Cisco IOS Software Security Advisories on the fourth Wednesday of March and September each calendar year. As is the case with the vast majority of our Security Advisories, vulnerabilities scheduled for disclosure in the upcoming bundle will normally have a Common Vulnerability Scoring System (CVSS) Base Score from 7.0 to 10.0.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/march-2013-cisco-ios-software-security-advisories-t-7-and-counting/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco Security Vulnerability Management Presentation at (ISC)2 New York City</title>
		<link>http://blogs.cisco.com/security/cisco-security-vulnerability-management-presentation-at-isc2-new-york-city/</link>
		<comments>http://blogs.cisco.com/security/cisco-security-vulnerability-management-presentation-at-isc2-new-york-city/#comments</comments>
		<pubDate>Tue, 12 Feb 2013 15:23:15 +0000</pubDate>
		<dc:creator>Mike Adler</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco PSIRT]]></category>
		<category><![CDATA[Cisco Vulnerability Policy]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=101357</guid>
		<description><![CDATA[This post highlights a presentation made by the Cisco PSIRT team at the (ISC)2′s New York Metro Chapter meeting on evening of February 13th, 2013.  The “Security Vulnerability Handling at Cisco” presentation will cover: 
Collaboration and coordination of Cisco security teams which manage vulnerability detection, mitigation and disclosure
PSIRT: Mission, Process, Engagement Model
Customer Expectations
Top of our mind
Take home points
Question and Answer

By the end of this presentation, attendees will have a better understanding and perspective of what goes into managing security vulnerabilities related to Cisco products, as well as managing security vulnerabilities in general.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/cisco-security-vulnerability-management-presentation-at-isc2-new-york-city/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Securing Cisco 7900 Series Phones (UPDATED)</title>
		<link>http://blogs.cisco.com/collaboration/securing-cisco-7900-series-phones/</link>
		<comments>http://blogs.cisco.com/collaboration/securing-cisco-7900-series-phones/#comments</comments>
		<pubDate>Fri, 11 Jan 2013 18:42:07 +0000</pubDate>
		<dc:creator>Rowan Trollope</dc:creator>
				<category><![CDATA[Collaboration]]></category>
		<category><![CDATA[7900 series]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Columbia University]]></category>
		<category><![CDATA[eavesdropping]]></category>
		<category><![CDATA[ip phone]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=97296</guid>
		<description><![CDATA[Cisco has recently received questions about a vulnerability in some of our 7900 series IP office phones that is said [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/collaboration/securing-cisco-7900-series-phones/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Security Assessments: More Than Meets the Eye</title>
		<link>http://blogs.cisco.com/security/security-assessments-more-than-meets-the-eye/</link>
		<comments>http://blogs.cisco.com/security/security-assessments-more-than-meets-the-eye/#comments</comments>
		<pubDate>Thu, 03 Jan 2013 15:33:17 +0000</pubDate>
		<dc:creator>Mike Adler</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[Cisco Security Intelligence Operations]]></category>
		<category><![CDATA[cisco sio]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[secure software]]></category>
		<category><![CDATA[security to of mind]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=96652</guid>
		<description><![CDATA[Is the product safe to use? I have been asked this question on occasion in a non-technical sense and maybe [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/security-assessments-more-than-meets-the-eye/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco IOS Software Security Advisory Bundle Announced</title>
		<link>http://blogs.cisco.com/security/cisco-ios-software-security-advisory-bundle-announced/</link>
		<comments>http://blogs.cisco.com/security/cisco-ios-software-security-advisory-bundle-announced/#comments</comments>
		<pubDate>Wed, 26 Sep 2012 16:06:35 +0000</pubDate>
		<dc:creator>Clay Kossmeyer</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[IOS]]></category>
		<category><![CDATA[ios bundle]]></category>
		<category><![CDATA[psirt]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=84302</guid>
		<description><![CDATA[Today Cisco Security Intelligence Operations (SIO) has released its Semi-annual Cisco IOS Software Security Advisory Bundle, the second and final IOS bundle publication of 2012. Today’s release includes nine advisories, of which five have workarounds.

As in previous bundle publications, Cisco SIO has provided an array of security resources to help customers secure their networks. This collateral is not unique to bundle security advisories and instead is part of SIO’s response to current security events. Resources include:]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/cisco-ios-software-security-advisory-bundle-announced/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
