Experts: DNS Attacks Could Go Deeper
,----[ Quote ]
| And although the latest botnet-related exploits don't mean much to
| the Internet's DNS infrastructure, their potential to redirect
| traffic rings reminiscent of previous cache-poisoning attacks on
| the Net's DNS servers, experts say. "This has made people more
| aware of the damage if DNS is subverted," Mockapetris says. "And
| it may have motivated the dark side to think about how to do
| that" on the Internet.
`----
http://www.darkreading.com/document.asp?doc_id=122003&WT.svl=news1_2
Related:
Microsoft: Patch for critical DNS flaw may be ready by 8 May
,----[ Quote ]
| The cmopany has been under pressure to address the flaw, reported
| last week, since software that exploits it has now been widely
| disseminated, and criminals are beginning to use it in attacks.
`----
http://www.computerworlduk.com/technology/servers-data-centre/infrastructure-management/news/index.cfm?newsid=2650
http://tinyurl.com/27wje2
Microsoft DNS Server Attacks Continue
,----[ Quote ]
| The concept enables malicious users to run code remotely under the
| system privileges generally granted to the DNS service itself.
`----
http://www.betanews.com/article/Microsoft_DNS_Server_Attacks_Continue/1176828918
Attack code raises Windows DNS zero-day risk
,----[ Quote ]
| At least four exploits for the vulnerability in the Windows domain
| name system, or DNS, service were published on the Internet over the
| weekend, Symantec said in an alert Monday.
`----
http://news.zdnet.com/2100-1009_22-6176429.html
Cybercrooks exploiting new Windows DNS flaw
,----[ Quote ]
| Cybercrooks are using a yet-to-be-patched security flaw in certain
| Windows versions to attack computers running the operating systems,
| Microsoft warned late Thursday.
`----
http://news.zdnet.com/2100-1009_22-6175743.html
Microsoft's advisories giving clues to hackers
,----[ Quote ]
| How's this for a new twist on the old responsible disclosure debate:
| Hackers are taking advantage of information released in Microsoft's
| pre-patch security advisories to create exploits for zero-day
| vulnerabilities.
`----
http://blogs.zdnet.com/security/?p=167
|
|