Security researchers have discovered a set of seven vulnerabilities in dnsmasq - a utility used in many Linux-based systems, especially routers and other IoT devices, to provide DNS services - which allow attackers to redirect users or execute malicious code. This dangerous set of flaws has been named DNSpooq. Patch dnsmasq now! . Security researchers have found several serious vulnerabilities in dnsmasq, a utility used in many Linux-based systems, especially routers and other IoT devices, to provide DNS services. Attackers can exploit the flaws to redirect users to rogue websites when trying to access legitimate ones or to execute malicious code on vulnerable devices. Dnsmasq is a lightweight tool that provides DNS caching, DNS forwarding and DHCP (Dynamic Host Configuration Protocol) services. The utility has been around for around 20 years and is part of the standard set of tools in many Linux distributions, including Android. As a utility that provides network services, dnsmasq is widely used in networking devices such as home business routers but is also present in many other types of embedded and IoT systems including firewalls, VoIP phones and car WiFi systems. . Critical flaws in dnsmasq place countless Linux devices at risk of exploitation. Take immediate action to protect your infrastructure!. Dnsmasq Security, IoT Device Threats, Linux Networking Flaws, DNS Services Exploitation. . Brittany Day
Researchers at the University of Pennsylvania say they've discovered a way to circumvent the networking technology used by law enforcement to tap phone lines in the U.S. The flaws they've found "represent a serious threat to the accuracy and completeness of wiretap records used for both criminal investigation and as evidence in trial," the researchers say in their paper, set to be presented Thursday at a computer security conference in Chicago.. Following up on earlier work on evading analog wiretap devices called loop extenders, the Penn researchers took a deep look at the newer technical standards used to enable wiretapping on telecommunication switches. They found that while these newer devices probably don't suffer from many of the bugs they'd found in the loop extender world, they do introduce new flaws. In fact, wiretaps could probably be rendered useless if the connection between the switches and law enforcement are overwhelmed with useless data, something known as a denial of service (DOS) attack. The link for this article located at Network World is no longer available. . Recently uncovered vulnerabilities in communication systems may threaten the reliability of surveillance methods, making it challenging for authorities to gather solid evidence.. Network Exploitation, Telecommunication Security, Criminal Investigation. . LinuxSecurity.com Team
Three Brisbane university students have discovered a major flaw in wireless network technology that means hackers can bring down critical infrastructure in as little as five seconds. . . .. Three Brisbane university students have discovered a major flaw in wireless network technology that means hackers can bring down critical infrastructure in as little as five seconds. The finding, which is likely to have worldwide ramifications - was identified by the Queensland University of Technology's Information Security Research Centre. Wireless technology is booming in popularity because it allows for access to the Internet without the need for cables and it is also used in some countries - but not Australia - to control infrastructure such as railways and electricity. Associate Professor Mark Looi, the deputy head of QUT's School of Software Engineering and Data Communications, said the discovery should send a warning to government and industry worldwide. "Any organisation that continues to use the standard wireless technology (IEEE 802.11b) to operate critical infrastructure could be considered negligent," Professor Looi said. "This wireless technology should not be used for any critical applications, as the results could potentially be very serious." The link for this article located at TheCourierMail is no longer available. The link for this article located at TheCourierMail is no longer available. The link for this article located at TheCourierMail is no longer available. . Melbourne researchers uncover a significant vulnerability in cellular networks, threatening essential systems and international safety.. Brisbane Students, Wireless Technology, Security Threats, Network Vulnerability. . Anthony Pell
We can't rely any longer on the comforting urban legend that the Internet is impervious to attack. The Internet is a massive collection of remotely accessible, often poorly maintained networks supported by software systems with little diversity and a history of . . . . We can't rely any longer on the comforting urban legend that the Internet is impervious to attack. The Internet is a massive collection of remotely accessible, often poorly maintained networks supported by software systems with little diversity and a history of serious security flaws. Fragile software is one major area of risk. The January 1990 systemwide meltdown of AT&T's phone network, the August 1996 nine-state power grid failure and the April 1997 partial Internet collapse were all tremendously destructive accidents. What if these systems are skillfully targeted? Another concern is the vulnerability of the Internet to physical attack. While the Net is resilient to individual routes dropping off, a few well-placed attacks at major peering points, at cable choke points at bridges and tunnels, or on cross-country runs beside isolated rail lines would be very damaging. A chemical fire in Baltimore's Howard Street tunnel disrupted area Internet traffic for days last July. The link for this article located at eWeek is no longer available. . Cybersecurity is a pressing concern since network infrastructures are prone to breaches, and software weaknesses pose serious threats. Discover key challenges in IT protection.. Internet Threats, Network Vulnerabilities, IT Security Strategies. . Anthony Pell
The FBI is monitoring "potential vulnerabilities" in computer networks that could leave portions of the Internet open to disruption by hackers, the agency said on Tuesday. "We're aware of potential vulnerabilities... and to date there have been no confirmed exploitations of . . . . The FBI is monitoring "potential vulnerabilities" in computer networks that could leave portions of the Internet open to disruption by hackers, the agency said on Tuesday. "We're aware of potential vulnerabilities... and to date there have been no confirmed exploitations of these vulnerabilities," said Steven Berry, spokesman for the FBI's National Infrastructure Protection Center. An advisory disclosing a flaw was issued on Tuesday by the Computer Emergency Response Team at Carnegie Mellon University in Pittsburgh. It said the flaw leaves systems vulnerable to paralyzing denial-of-service attacks, service interruptions, and possible break-ins. It recommends ways to minimize the vulnerabilities, but says some of the assaults can significantly affect the performance of a computer system. The link for this article located at TechTV is no longer available. . The FBI is monitoring 'potential vulnerabilities' in computer networks that could leave portions of . monitoring, 'potential, vulnerabilities', computer, networks, leave, portions. . Anthony Pell
Well, thanks to lax security by vendors and network administrators, not to mention an underground network of devious and talented souls churning out user-friendly cracking tools, it's never been easier. The latest such tool to hit the Internet is called SMBRelay, . . . . Well, thanks to lax security by vendors and network administrators, not to mention an underground network of devious and talented souls churning out user-friendly cracking tools, it's never been easier. The latest such tool to hit the Internet is called SMBRelay, and it exploits a well-known flaw in Microsoft Corp.'s Windows NT and Windows 2000 software that enables an attacker to hijack NetBIOS connections. Gaining unauthorized access to networks used to be a game that only a small handful of gifted crackers with a lot of time on their hands could play. They would laboriously comb the Internet for vulnerable machines, poke and prod until they found a way in, and then execute whatever attack they had in mind. The link for this article located at ZDNet / eWeek is no longer available. . The proliferation of sophisticated hacking tools has made it simpler for cybercriminals to take advantage of vulnerabilities in security systems.. Hacker Tool, Network Security, Unauthorized Access, Security Exploitation, User Privacy. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.