This information is correct and the first address security-alert [at] austin.ibm.com mentioned is a primary reporting address. This address is located at OSVDB Vendor database too;http://www.osvdb.org/vendor_dict.php?section=vendor&id=1215&c=I listed as International Business Machines Corporation and IBM.
They will reply to abroad too (I have personal experience). Regards, Juha-Matti
Try: security-alert@xxxxxxxxxxxxxx and cert@xxxxxxxxxx (these are in the US, not sure if they segment responsibility) -- Michael Scheidell, CTO 561-999-5000, ext 1131 SECNAP Network Security Corporation Keep up to date with latest information on IT security: Real time security alerts: http://www.secnap.com/news