Attacks/Breaches
11/30/2010
12:27 PM
50%
50%

WikiLeaks Under Hack Attack

DDOS hit comes days after the Web site slipped highly sensitive government information to media outlets.

WikiLeaks was under cyber-attack Tuesday, several days after the rogue Web site released classified U.S. government documents to major newspapers around the world. According to a posting on its site, WikiLeaks was hit with a distributed denial of service (DDOS) strike of unknown origin. "DDOS attack now exceeding 10 Gigabits a second," said a WikiLeaks representative, in a message on Twitter.

Speculation about the source of the attack ranged from the U.S. government, to foreign regimes embarrassed by the information WikiLeaks disclosed to The New York Times, Der Spiegel, Le Monde, and other major newspapers.

None of the speculation, however, has been confirmed.

Among other things, the documents revealed serious concerns within the U.S. diplomatic community about the resolve and trustworthiness of several key allies, including Afghanistan and Pakistan, in the war on terror.

They also disclosed Saudi Arabia's wish for a U.S. military strike against Iran, and painted unflattering pictures of Western leaders like German Chancellor Angela Merkel and Italian Prime Minister Silvio Berlusconi.

In the wake of the leak, the White House ordered a security clampdown.

The administration is telling agency heads to develop stricter criteria for determining which federal employees are given access to secured computer systems and networks that store classified data.

"Our national defense requires that sensitive information be maintained in confidence to protect our citizens, our democratic institutions, and our homeland," said Office of Management and Budget director Jacob Lew, in a letter to agency heads. "Any failure by agencies to safeguard classified information pursuant to relevant laws, including but not limited to Executive Order 13526 … is unacceptable and will not be tolerated," wrote Lew. President Obama signed Executive Order 13526 on Dec. 29, 2009.

It mandates that federal agencies undertake a broad series of steps to protect information.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-9605
Published: 2015-09-04
WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and create a system backup tarball, restart the server, or stop the filters on the server via a ' (single quote) character in the login and password parameters to webup...

CVE-2015-2990
Published: 2015-09-04
Directory traversal vulnerability in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter.

CVE-2015-2991
Published: 2015-09-04
Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data.

CVE-2015-5612
Published: 2015-09-04
Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image.

CVE-2015-5688
Published: 2015-09-04
Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.

Dark Reading Radio
Archived Dark Reading Radio
Another Black Hat is in the books and Dark Reading was there. Join the editors as they share their top stories, biggest lessons, and best conversations from the premier security conference.