Office of Information Technology

Below you find information and security-related resources. If you have a reference that you think belongs here, let us know.

Operating Systems and Network Configuration & Hardening

• http://www.nsa.gov/ia/guidance/security_configuration_guides/operating_systems.shtml - NSA's security configuration guides by operating system.
• http://www.team-cymru.org/ReadingRoom/Templates/ - Team Cymru's Secure Templates

Vulnerability & Disclosure Lists

• http://www.securityfocus.com/ - RSS: http://www.securityfocus.com/rss/vulnerabilities.xml - SecurityFocus
• http://seclists.org/ - SecLists.Org Security Mailing List Archive - full disclosure mailing lists including Bugtraq
• http://www.exploit-db.com/ - Exploit Database - Source of Pentest/POC information

Security News & Blogs

• http://threatpost.com
• http://www.team-cymru.org 
• http://blog.sucuri.net 
• http://blog.spiderlabs.com
• http://packetstormsecurity.org

Online virus/malware analysis

• http://www.threatexpert.com/submit.aspx 
• http://www.virustotal.com

Who to follow on Twitter

• @teamcymru - Team Cymru - Specialized Internet security research firm and 501(c)3 non-profit dedicated to making the Internet more secure.
• @jeremiahg - Founder / CTO of WhiteHat Security, Web security aficionado, an InfoWorld Top 25 CTO.
• @threatpost - The Kaspersky lab security news service - http://threatpost.com
• @briankrebs - Brian Krebs is a journalist who writes about security & cyber crime on his site krebsonsecurity.com.