Attacks/Breaches
5/18/2011
04:51 PM
50%
50%

Despite Reports, Sony Says PlayStation Network Was Not Hacked Again

Password reset issues cause network downtime, but no new hacks occurred, company says.

Reports that Sony has suffered yet another hack are greatly exaggerated, the gaming company said today.

A report on Nyleveia.com earlier today stated that new vulnerabilities had been discovered on the Sony PlayStation Network and that user account data was at risk.

Several news outlets followed the initial story with reports that the PlayStation Network, which was down for almost three weeks following a series of three hacks, had been compromised again.

In several updates, however, Nyleveia reported that the exploit was a new discovery and that its reports were intended as a warning to users that they should reset their passwords.

"If the current downtime for the web based forms results in the exploit being patched, then our job is done and the potential thieft of countless user accounts has been nipped in the bud as early as humanly possible," the site says.

Sony conceded that it did block PSN login access to a number of users on its site, and the PSN password reset site was also taken offline for a period of hours. "Unfortunately this also means that those who are still trying to change their password via Playstation.com or Qriocity.com will be unable to do so for the time being," the company said.

In a later statement on it its company blog, Sony said that the systems had been restored and no new hacks had occurred.



Read the rest of this article on Dark Reading.

In the new, all-digital issue of InformationWeek: Our 2011 Strategic Security Survey shows increased executive interest in security. Here's what you should do next. Download it now. (Free registration required.)

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-6501
Published: 2015-03-30
The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_s...

CVE-2014-9652
Published: 2015-03-30
The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote atta...

CVE-2014-9653
Published: 2015-03-30
readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory ...

CVE-2014-9705
Published: 2015-03-30
Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.

CVE-2014-9709
Published: 2015-03-30
The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

Dark Reading Radio
Archived Dark Reading Radio
Good hackers--aka security researchers--are worried about the possible legal and professional ramifications of President Obama's new proposed crackdown on cyber criminals.