Arbor Security Blog

The Effects of War: Gaza and Israel

Jose Nazario, January 5, 2009 | No Comments

The ongoing Israeli-Gaza crisis has had an effect, it seems, on Internet activity. Our monitors have been crunching all sorts of data, some of it related to Israel and the conflict in Gaza. Many reports are out and have analyzed a wave of website defacements around this conflict, so we wont cover those here.
We were [...]

Read More

Buy Buy Exploitation

Jose Nazario, January 3, 2009 | No Comments

We stumbled across a set of links recently via the MITRE Honeyclient, which we feed our spam URLs to. A handful of URLs that have been spammed out were triggered as malicious. Analysis shows that they are roughly the same basic injected code.
WARNING — LIVE EXPLOIT LINKS BELOW
Here’s the exploit chain, IFRAMEs and reloads.
http://flemminglind.dk/images/buybuy.html
-> http://numeralingenuity.com/
-> [...]

Read More

On the ‘09 Infrastructure Security Radar

Danny McPherson, January 2, 2009 | 1 Comment

In considering the past year and what’s in store forĀ  2009 and beyond, there’s a broad spectrum of Internet infrastructure security related issues that are sure to make for absorbing times in the coming years. Given that security, availability, performance, reliability and stability all go hand in hand, some of the [roughly ordered] things on [...]

Read More

The End Of 2008 In A Few Sentences

Jose Nazario, December 31, 2008 | 1 Comment

In these wee small hours of 2008, some quick thoughts.
Researchers have broken SSL CA root certificates via the MD5 collision issues. No great surprise, I think anyone who gave this some serious thought saw this coming. End of the world? No, not really. Invalid SSL certs rarely stop anyone. This will make it tougher to [...]

Read More

Follow the ASERT blog with Twitter

Arbor Networks, December 23, 2008 | 4 Comments

Twitter is a free service that lets you keep in touch with people through the exchange of quick, frequent answers to one simple question: What are you doing? Join today to start receiving Arbor Networks updates, or add http://twitter.com/arbornetworks to your favorites!
UPDATED to fix the HREF. Thanks to all who noted it to us :)

Read More