CERT Coordination Center Studies Internet security vulnerabilities, provides incident response services to sites that have been the victims of attack, publishes a variety of security alerts, researches security and survivability in wide-area-networked computing, and develops information to improve site security. http://www.cert.org/

CERIAS - Center for Education and Research in Information Assurance and Security University center for multidisciplinary research and education in areas of information security. Provides hotlist covering all aspects of security. http://www.cerias.purdue.edu/

PatchManagement.org Mailing list dedicated to the discussion of patch management. http://www.patchmanagement.org/

Center for Internet Security Non-profit enterprise whose mission is to help organizations reduce the risk of business and e-commerce disruptions resulting from inadequate technical security controls. http://www.cisecurity.org

Patchlink Corporation - Patch Management Offers fully Internet-based, automated, cross-platform, enterprise security patch management software so IT administrators can assess and resolve security vulnerabilities across operating systems and applications. http://www.patchlink.com

Patchcompliance.com Offers patch management information and products. http://www.patchcompliance.com

PatchEasy Patch management tool that helps secure systems by remotely managing service packs and hotfixes. Conduct research, take inventory, deploy updates and validate installations to networked machines. http://www.patcheasy.com/

FedCIRC Federal Computer Incident Response Capability. Advisories and tools. http://www.fedcirc.gov/

AusCERT Australian Computer Emergency Response Team. Advisories and tools. http://www.auscert.org.au

Bugtraq Independent source for security vulnerabilities, alerts, and threats. http://www.securityfocus.com/archive/1

CVEbrowser CVE browser is a Java Web search engine for the Mitre CVE vulnerability dictionary. http://cvebrowser.sourceforge.net

DeepSight Fee based security alert service by Symantec. http://enterprisesecurity.symantec.com/products/products.cfm?ProductID=158

ISS X-Force Security alerts, advisories, and alert summaries from ISS. http://xforce.iss.net/xforce/alerts

Makesecure.com Network security news, alerts and updates http://www.makesecure.com

OpenNet - Security Database of daily updated security alerts. http://security.opennet.ru

PatchAdvisor Patch alert service. http://www.patchadvisor.com

Secunia Provides security advisories and information about patches. http://secunia.com/

Secureroot Advisories Database Listing of security advisories and warnings. http://www.secureroot.com/security/advisories/

Security Patch Notification Service Keep system administrators fully up to date with the very latest patches that are relevant to devices and software. http://www.uksecurityonline.com/services/patch.php

SecurityMetrics Bulletin Service Security Bulletins that are compiled from multiple leading sources and condensed to reduce your efforts in reviewing them regularly. http://www.securitymetrics.com/freesubscription.adp