Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Microsoft Sues To Seize Domains Responsible For Millions Of Infections
Threaded  |  Newest First  |  Oldest First
Charlie Babcock
Charlie Babcock,
User Rank: Ninja
7/1/2014 | 3:56:57 PM
When suing is a public service
This may be necessary for Microsoft's business, I don't know, but I'm viewing it as a public service move.
User Rank: Apprentice
7/2/2014 | 10:15:53 AM
Re: When suing is a public service
As a user of No-IP that is a paying and legit customer and is STILL down. This is just wrong. They took millions of ip's down to close about 2000 bad accounts. This is like shooting everyone to kill one guilty person
Kelly Jackson Higgins
Kelly Jackson Higgins,
User Rank: Strategist
7/2/2014 | 10:57:30 AM
Re: When suing is a public service
@amueller651 What are you doing in the meantime? Is this hurting business for you?
User Rank: Apprentice
7/2/2014 | 11:24:22 AM
Re: When suing is a public service
I am creating new DDNS names, there is a whole lot more than just changing a name though. Every client that logs into that server must be setup too with the new info. This will take days at least, clients do not care how it works they just want to click and be there
Dan Euritt
Dan Euritt,
User Rank: Apprentice
7/2/2014 | 2:01:34 PM
Re: When suing is a public service
Well done, Microsoft!
Sara Peters
Sara Peters,
User Rank: Author
7/2/2014 | 3:54:50 PM
Re: When suing is a public service
@amueller651  I'm working on a follow-up story and would love to hear more about how you're managing. If you're willing to talk more, drop me a line at sara.peters AT ubm.com.
User Rank: Strategist
7/3/2014 | 4:45:56 AM
From what I hear....
trojans like zeus use a DGA in the org, net and com domains.
Perhaps MS should seize those as well, and let only the "good" traffic though?

I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Current Issue
Incorporating a Prevention Mindset into Threat Detection and Response
Threat detection and response systems, by definition, are reactive because they have to wait for damage to be done before finding the attack. With a prevention-mindset, security teams can proactively anticipate the attacker's next move, rather than reacting to specific threats or trying to detect the latest techniques in real-time. The report covers areas enterprises should focus on: What positive response looks like. Improving security hygiene. Combining preventive actions with red team efforts.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
PUBLISHED: 2022-05-27
The package protobufjs before 6.11.3 are vulnerable to Prototype Pollution which can allow an attacker to add/modify properties of the Object.prototype. This vulnerability can occur in multiple ways: 1. by providing untrusted user input to util.setProperty or to ReflectionObject.setParsedOption ...
PUBLISHED: 2022-05-27
The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.
PUBLISHED: 2022-05-27
The Master operator may be able to embed script tag in HTML with alert pop-up display cookie.
PUBLISHED: 2022-05-27
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
PUBLISHED: 2022-05-27
Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient va...