News

CERT-FI Statement on the Outpost24 TCP Issues

In February 2009, CPNI of UK published a thorough security assessment of the TCP protocol, which presents a number of TCP vulnerabilities and mitigation advice. The report can be downloaded at http://www.cpni.gov.uk/Products/technicalnotes/Feb-09-security-assessment-TCP.aspx

Researchers Find Massive Botnet On Nearly 2 Million Infected Consumer, Business, Government PCs

More than 70 government-owned domains hit, and nearly half of the overall infections are in the U.S.

OpenSSH (and possibly SSH) flaw made public

An underlying flaw in the widely used encryption protocol Open Secure Shell (OpenSSH) has been made public by researchers from the Royal Holloway, University of London.

Slowloris HTTP DoS

A low-bandwidth DoS attack which many webservers are vulnerable to has been released.

After links to cybercrime, Latvian ISP is cut off

 

Security certificate warnings don't work, researchers say

 

Researchers Try to Stalk Botnets Used by Hackers

 

BIND denial of service (server crash) caused by receipt of a specific remote dynamic update message.

 

Military set to lay out $42M to develop advanced network prioritization, security technology

 

Linux webserver botnet pushes malware

 

PayPal Null-Prefix SSL Certificate

PayPal no longer secure from IE, Chrome, Safari on Windows.

Widespread Linux bug may give root access

""" "The null pointer dereference flaw was only fixed in the upcoming 2.6.32 release candidate of the Linux kernel, making virtually all production versions in use at the moment vulnerable. While attacks can be prevented by implementing a common feature known as mmap_min_addr..." """

Man-In-the-Middle Vulnerability For SSL and TLS

"The SSL 3.0+ and TLS 1.0+ protocols are vulnerable to a set of related attacks which allow a man-in-the-middle (MITM) operating at or below the TCP layer"

Google SPDY alternative protocol

Google releases alternative to HTTP protocol to speed up web access.

SSL renegotiation attack implemented

A Turkish grad student has devised a serious, real-world attack on Twitter that targeted a recently discovered vulnerability in the secure sockets layer protocol.

EDUCASE to implement DNSSEC and sign .edu TLD

EDUCASE and Verisign to deploy DNSSEC for .edu TLD by March 2010.

XML flaw threatens apps built with Sun, Apache, Python libraries

Vulnerabilities discovered in XML libraries from Sun, Apache Software Foundation and Python Software Foundation could result in successful denial-of-service attacks on applications built with them, according to Codenomicon.

SSLSniff 0.6 Includes Null-Prefix Attack

 

Null-prefix SSL flaw

 

New AES Attack