.NL Registrar Compromisse
Based on a note on the website of SIDN [1], as SQL injection vulnerability was used to compromisse the site and place malicious files in the document root. SIDN is the registrar for the .NL country level domain (Netherlands). As a result of the breach, updates to the zone file are suspended. There is no word as to any affects to the zone files, or if the attackers where able to manipulate them.
[1] https://www.sidn.nl/en/news/news/article/preventieve-maatregelen-genomen-2/
------
Johannes B. Ullrich, Ph.D.
SANS Technology Institute
Twitter
Websense Appliance at 100% CPU
Some readers have reported in (Thanks!) that their inline Websense appliances are spiking to 100% after an update. The Websense team is aware and quickly working on a fix we are told. If you are seeing this behavior please let us know!
Richard Porter
@packetalien
richard at pedantictheory dot com
Comments