Cisco gear subject to DoS attack
545249
Cisco Systems last week warned that a denial of service (DoS) vulnerability exists for its products. The threat affects all Cisco products running the vendor&#39;s Internetwork Operating System (IOS).
22100
The network is the sting A GPS tracking sting has led to accusations that a reseller defrauded Cisco of millions of dollars in networking gear by fiddling its hardware maintainance program on a grand scale.â¦
198606
A US credit card processing firm has been hit by intermittend and large-scale distributed denial-of-service attacks that have disrupted services.
719658
(InfoWorld) - If you haven't changed the default password on your home router, do so now. That's what researchers at Symantec and Indiana University are saying, after publishing the results of tests that show how attackers could take over your home router using malicious JavaScript code. For the attack to work, the bad guys would need a couple of things to go their way. First, the victim would have to visit a malicious Web site that served up the JavaScript. Second, the victim's router would have to still use the default password that it's pre-configured with it out of the box. In tests, the researchers were able to do things like change firmware and redirect a D-Link Systems DI-524 wireless router to look up Web sites from a DNS (Domain Name System) server of their choosing. They describe these attacks in a paper, authored by Sid Stamm and Markus Jakobsson of Indiana University, and Symantec's Zulfikar Ramzan. "By visiting a malicious Web page, a person can inadvertently open up his router for attack," the researchers write. "A Web site can attack home routers from the inside and mount sophisticated... attacks that may result in denial of service, malware infection, or identity theft." Once the router has been compromised, victims can be redirected to fraudulent Web sites, the researchers say. So instead of downloading legitimate Microsoft software updates, for example, they could be tricked into downloading malware. Instead of online banking, they could be giving up sensitive information to phishers. At the heart of the problem is the fact that consumer routers ship with simple, well-known default passwords, like "admin," which could be exploited by attackers. "Owners of home routers who set a moderately secure password -- one that is non-default and non-trivial to guess -- are immune to router manipulation via JavaScript," the paper states. The researchers blame router makers for shipping products with "poorly secure default settings." Vendors like D-Link and Cisco Systems are aware of the problem. "It's a concern to us," said Karen Sohl, a spokeswoman with Cisco's Linksys group. "We've shipped about 30 million routers and we want those 30 million customers to understand why it's so important to change [the default password]." Both Cisco and D-Link said they've taken steps to avoid this type of security problem. Over the past few years they've introduced step-by-step "wizard" software to configure their routers, and these products always suggest that the user come up with a unique password. The problem is that the routers still work if the password is left as default. And that's not likely to change anytime soon, according to Michael Scott, D-Link's technical media manager. Users wouldn't buy routers that forced them to enter unique passwords, he said. "That would only result in returned products, and then they would buy one of our competitors products," he said.
747496
Go 910s shipped over the past few months have a virus that infects PCs when connected.
688153
Will it become redundant in the face of encryption and protection on endpoints in an open network?
176286
Servers that managed global internet traffic have been subjected to a concerted attack by hackers.
69189
Cisco releases an advisory warning that certain devices running IOS Version 12.2S software can be disabled by hackers. By Preston Gralla, Networking Pipeline.
319386
SEPTEMBER 24, 2004  - A distributed denial-of-service attack that disrupted Web-based systems at credit card payment processing firm Authorize.
640018
A router software bug could lead to denial-of-service attacks--but only techies could launch one, an analyst says.
315862
Ziff Davis - Security sources announce four mostly unrelated enterprise vulnerabilities in Cisco Unity, Cisco Guard, Veritas' Backup Exec, and Samba, the Windows file-sharing utility for Linux.
629541
BOSTON - Networking equipment maker Cisco Systems Inc. warned customers about security holes in two products that provide user authentication and authorization services for network devices such as firewalls and routers.
666009
Good-guy sites, like CastleCops.com, are suffering Web site outages from distributed denial-of-service attacks.
716663
Networked multifunction devices share PC vulnerabilities to worms, hackers.
391310
Internet Security Systems' intrusion prevention software on Crossbeam Systems security switches.
602170
Can't parse that Sysadmins can look forward to clocking some overtime this week after Cisco warned of flaws in how its core operating system handles malformed Secure Sockets Layer (SSL) traffic.â¦
164025
InfoWorld - Cisco Systems&#160;has&#160;expanded&#160;a&#160;range of security mechanisms for wired LANs&#160;to the&#160;wireless side of enterprise networks.