SANS FBI Top Twenty
Although this news is pretty old in the "Information Security"
context, fyi, FBI alongwith SANS
has come out with a list of the top
20 software vulnerabilities which easily lead to successful
attacks on computers. Actually there are two top ten lists for Windows
and *nix. They traditionally
come out with this list every year. They give information about
how these vulnerabilities can be exploited by a cracker
to get into your system. And how one can go about plugging these
vulnerabilities. You can use this list to prioritize your efforts
to secure your computer. Beware, dont be in the impression that
this list is comprehensive. There are a lot of other bugs, but these
are the mosted used ones by Black
Hats to crack into a computer system. CIS
gives away free tools to benchmark your computer system's security
readiness for these top twenty vulnerabilities. You can check them
out.