Attacks/Breaches
9/24/2008
04:57 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Sarah Palin E-Mail Hacking Grand Jury Returns No Indictment

A Tennessee Democratic state representative's son was linked last week to involvement in the breach of the Republican vice presidential candidate's Yahoo Mail account.

A federal grand jury convened in Chattanooga, Tenn., to hear evidence in the alleged hacking of vice presidential candidate Sarah Palin's Yahoo Mail account ended its session on Tuesday without an indictment against University of Tennessee student David Kernell.

Kernell, the 20-year-old son of Tennessee Democratic state representative Mike Kernell, was linked last week to an e-mail account that was used to post a purported confession of involvement in the breach of Palin's Yahoo Mail account that was posted to an online forum.

According to Wired.com and Portfolio.com, the IP address used to access Palin's Yahoo account belongs to Pavlov Media, an Illinois-based ISP that provides Internet service to the Knoxville, Tenn., housing where Kernell lives.

Federal investigators searched Kernell's apartment in Knoxville, Tenn., over the weekend, local newspapers report.

Three of Kernell's friends testified behind closed doors at the grand jury hearing, according to The Chattanoogan.

U.S. Department of Justice spokesperson Laura Sweeney declined to discuss the grand jury's actions. She said that the DOJ's review of the allegations that Alaska Gov. Sarah Palin's personal e-mail account had been hacked is ongoing.

Kernell's family has retained Wade V. Davies, a Knoxville attorney with Ritchie, Dillard & Davies PC, to represent him.

In a statement to the media, Davies said, "This is a difficult time for David and his family. The Kernell family wants to do the right thing, and they want what is best for their son. We are confident that the truth will emerge as we go through the process."

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-0914
Published: 2014-07-30
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 6.2 through 6.2.8 for Tivoli IT Asset Management f...

CVE-2014-0915
Published: 2014-07-30
Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2.8...

CVE-2014-0947
Published: 2014-07-30
Unspecified vulnerability in the server in IBM Rational Software Architect Design Manager 4.0.6 allows remote authenticated users to execute arbitrary code via a crafted update site.

CVE-2014-0948
Published: 2014-07-30
Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to execute arbitrary code via a crafted ZIP archive.

CVE-2014-2356
Published: 2014-07-30
Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.

Best of the Web
Dark Reading Radio