Accumuli Community

DDoS & Cyber-Attacks: the business case for investing in defence . The Internet is a fantastic invention and application of technology. Originating from the US government and private companies, in order to create a reliable and distributed information network, it became fully commercialised in 1995 with restrictions removed with the decommissioning of NSFNET laying the foundation of the modern way of communication, business and retail. For the online retailer, it's a huge opportunity to sell wares to a truly global audience in a rapidly growing market to which many organisations such as Amazon, Google and Betfair owe their successes.

Security is a complex and often misunderstood beast which often doesn’t attract the (financial) understanding of organisations, so it probably comes as no surprise that some of the technologies and their configurations that we come across are, shall I say, ‘interesting’.

Infoblox release version 6.3 of their NIOS operating system to provide additional features and facilities, such as task automation, reserved ranges, Trinzic reporting, DNS query redirection, IPv6 network maps, IPv6 discovery, scheduled upgrades, support for SafeNet HSM, security enhancements, SNMP enhacements, enhanced member permissions, HA NIC failover support via LAN2, various GUI and API enhancements.

Many organisations use compliance as drivers for their security activities, and in some cases it could be argued that security really wouldn’t get a great deal of buy in from the corporate powers without the presence of compliance demanding that measures exist. Whilst compliance & legislation outlines some ground rules of security, there are two key points in the nature of enforcing compliance that ultimately - and ironically - means that correct level of security is not achieved following a compliance mandate alone.

On November 16, 2011, ISC announced a vulnerability that causes issues for BIND 9 based DNS resolvers (CVE-2011-4313).

Alcatel-Lucent has released VitalQIP 7.2 Patch Release 4

Infoblox release version 6.2 of their NIOS operating system to provide additional features and facilities, such as sort lists for DNS Views, multi-grid management, support for the IB-4010 appliance, advanced DHCP option logic, IF-MAP client enhancements, TACACS+ AAA, Thales HSM support, forwarders for DNS views, match destination views and RFC 2317 exclusion.

On July 5, 2011 the Internet Systems Consortium (ISC) announced vulnerabilities in BIND 9 (CVE-2011-2464 and CVE-2011-2465) which can be exploited to cause a Denial of Service (DoS).

We are pleased to announce the general availability of VitalQIP 7.3. This is a significant update and contains various enhancements.

The Internet Systems Consortium (ISC) has announced a vulnerability in BIND 9 that could allow a malicious party to crash the BIND name server set up to be a caching resolver.