20 Most Critical Internet Security Vulnerabilities

[war59312]

Not sure if this was posted yet but you may want to check these two out:

The Twenty Most Critical Internet Security Vulnerabilities:

http://www.sans.org/top20/

The majority of the successful attacks on operating systems come from only a few software vulnerabilities. This can be attributed to the fact that attackers are opportunistic, take the easiest and most convenient route, and exploit the best-known flaws with the most effective and widely available attack tools. They count on organizations not fixing the problems, and they often attack indiscriminately, scanning the Internet for any vulnerable systems. System compromises in the Solar Sunrise Pentagon hacking incident, for example, and the easy and rapid spread of the Code Red and NIMDA worms can be traced to exploitation of unpatched vulnerabilities.

National Infrastructure Protection Center CyberNotes - Jan. 13 2003:

CyberNotes is published every two weeks by the National Infrastructure Protection Center (NIPC). Its mission is to support security and information system professionals with timely information on cyber vulnerabilities, malicious scripts, information security trends, virus information, and other critical infrastructure-related best practices.

http://www.nipc.gov/cybernotes/2003/...es-2003-01.htm