SECUR> Vulnerability, Scams

  • From: Gleason Sackmann <gleason@xxxxxxxxxxxxxxx>
  • To: NetHappenings <nethappenings@xxxxxxxxxxxxx>
  • Date: Wed, 12 Feb 2003 09:02:44 -0600

**************************************************************
Net Happenings - From Educational CyberPlayGround
**************************************************************

How Vulnerable Is the Internet Now?

The author comments on the number of vulnerabilities being discovered in
technologies forming the foundation of the Internet. Richard Stiennon,
Internet security research director at Gartner, lists router protocols as
insecure - an adversary could send spoofed router tables to a poorly
configured router and misdirect Internet traffic. Mr. Stiennon notes that
major carriers like AT&T, WorldCom, and Sprint, need to harden their
routers against attacks. Root DNS servers are better protected after 2002's
well-publicized attack. Attacks which do not target the Internet directly,
such as the Slammer worm, can significantly disrupt traffic, after only
infecting a small number of machines. Art Manion, of the Computer Emergency
Response Team (CERT), notes that the flaw Slammer exploits had been
publicized and a patch had been available for months. Companies need to
make security a priority, whether producing software or securing networks.
http://www.newsfactor.com/perl/story/20704.html


Title: Yahoo! UK! admits! scam!

Yahoo! UK and Ireland has informed its customers of a scam masquerading as
official Yahoo! business. Some customers of the Yahoo! Express service
received fraudulent e-mails claiming that they needed to pay £199 for an
annual Yahoo! listing review. Yahoo! UK and Ireland advised customers that
the e-mails were fraudulent; that Yahoo! only charges a one-time,
non-refundable processing fee per submission; to send any such e-mails to
uk-legal@xxxxxxxxxxxxxxxx; and to contact law enforcement if they've
already given credit card information in response to the fraud. The author
asks how long Yahoo! knew of the scam, and why it took over two weeks for
Yahoo! to respond.
http://www.theregister.co.uk/content/6/29281.html

**************************************************************************
Educational CyberPlayGround links to Technology
<http://www.edu-cyberpg.com/Technology/Home_TECHNOLOGY.html>
Find Information on Security for
Teachers, Administrators, Ed. Tech, and Classroom Resources
**************************************************************************

Microsoft security warning is a hoax
Online scam artists are sending out a hoax Microsoft security warning to
trick unsuspecting users into calling a premium rate phone number. The hoax
alert, which is sent from technicalsupport@xxxxxxxxxxxxxxxxxxxxx (a
non-existent website), warns of a vulnerability in the Windows operating
system and urges users to call the number to find out more about how to
download a patch. A Microsoft spokesperson suggests that people should
simply delete the e-mail.
http://www.vnunet.com/News/1138686

**************************************************************
The Net Happenings mailing list is a service of
Educational CyberPlayGround - http://www.edu-cyberpg.com/
**************************************************************
Linking and Announcements For Net Happenings are provided
by http://www.EricWard.com and http://www.URLwire.com
**************************************************************
If you have any questions, concerns, suggestions, or
would like to sponsor the Net Happenings service -
<http://www.edu-cyberpg.com/Community/Subguidelines.html>

Subscribe | Unsubscribe | Change Email Preferences -
<http://www.edu-cyberpg.com/Community/NetHappenings.html>
**************************************************************

Other related posts:

  • » SECUR> Vulnerability, Scams