Welcome to the Network Security website at the IAS

This website is intended to bring you the latest news, how to's, tools and resources in Information Security.  Security Awareness of our Faculty, Members and Staff is key in creating a safer computing environment.

The three major Principles of Information Security, Availability, Integrity and Confidentiality, will be covered throughout the security awareness program at the Institute.  For a description of these principles, please see our About section.

In keeping with the spirit of the Institute, I encourage questions and open discussions about security.  And if you discover anything out of the ordinary, please feel free to bring it to my attention so that we can work together to create a more productive, safer environment.

Thanks,
Brian Epstein <security@ias.edu>
twitter: @epepepep


Sun Java System Directory Server 'core_get_proxyauth_dn' Denial of Service Vulnerability

http://www.securityfocus.com/bid/37699

"Sun Java System Directory Server is prone to a denial-of-service
vulnerability.

An attacker can exploit this issue to crash the effected application,
denying service to legitimate users.

Directory Server 7.0 is vulnerable; other versions may also be affected."

No patches have been released at this time.

Sun Java System Directory Server 'core_get_proxyauth_dn' Denial of Service Vulnerability

http://www.securityfocus.com/bid/37699

"Sun Java System Directory Server is prone to a denial-of-service
vulnerability.

An attacker can exploit this issue to crash the effected application,
denying service to legitimate users.

Directory Server 7.0 is vulnerable; other versions may also be affected."

No patches have been released at this time.

Sun Java System Directory Server 'core_get_proxyauth_dn' Denial of Service Vulnerability

http://www.securityfocus.com/bid/37699

"Sun Java System Directory Server is prone to a denial-of-service
vulnerability.

An attacker can exploit this issue to crash the effected application,
denying service to legitimate users.

Directory Server 7.0 is vulnerable; other versions may also be affected."

No patches have been released at this time.

Open season on tax-payers

http://www.viruslist.com/en/weblog?weblogid=208188001

As tax season approaches, users should use caution when choosing their
online tax preparer. Some security analysts are predicting a surge of
malicious tax phishing sites targeted at stealing PII (Personally
Identifiable Information) which could lead to identity theft.

It is recommended to verify the URL in the location bar, and choose a
trusted Tax Preparation site.

Thanks,
ep

Open season on tax-payers

http://www.viruslist.com/en/weblog?weblogid=208188001

As tax season approaches, users should use caution when choosing their
online tax preparer. Some security analysts are predicting a surge of
malicious tax phishing sites targeted at stealing PII (Personally
Identifiable Information) which could lead to identity theft.

It is recommended to verify the URL in the location bar, and choose a
trusted Tax Preparation site.

Thanks,
ep

Sunbelt Software Security Labs releases Data Doctor Decryption Software

http://sunbeltblog.blogspot.com/2010/01/data-doctor-2010-encrypted-files...

Ransomeware, "Data Doctor 2010", has been cracked by Sunbelt Software Security Labs.  They have released a tool that can decrypt your files, which are held hostage by the program.  If you have been denied access to your files by Data Doctor 2010, follow the link above.

Thanks,
ep

Open season on tax-payers

http://www.viruslist.com/en/weblog?weblogid=208188001

As tax season approaches, users should use caution when choosing their
online tax preparer. Some security analysts are predicting a surge of
malicious tax phishing sites targeted at stealing PII (Personally
Identifiable Information) which could lead to identity theft.

It is recommended to verify the URL in the location bar, and choose a
trusted Tax Preparation site.

Thanks,
ep

Pages