Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

Virus Hits Part Of U.S. Commerce Dept.

Economic Development Administration has disabled its website and email while attack is investigated.

Best Government Web Sites
(click image for larger view)
Slideshow: Best Government Web Sites
A virus has caused the Department of Commerce's Economic Development Administration (EDA) to disable its email and Internet access indefinitely while the nature and origin of the attack is investigated.

Visitors to the EDA's website are greeted with a banner across the top with the message that the agency's site and email system is "experiencing a disruption in service."

"The agency is working to address the issue and resume normal operations as soon as possible," according to the message.

In the meantime, the EDA--which awards business-development grants to communities that need economic stimulation--has put up a simple, temporary website giving people access to key information, such as funding opportunities and contact information.

[ FBI warns that hack attacks will increase. See Cyber Attacks Becoming Top Terror Threat, FBI Says. ]

"We continue to operate as fully as possible to meet our core mission," the agency said in an emailed statement, adding that it is still processing grant applications and serving customers. Staffers will be working using phone and fax lines until service is restored.

Commerce spokeswoman Jennifer Friedman confirmed in an interview Friday that the department isolated the network and systems by disconnecting them out of caution on Jan. 24 after a virus attack. The attack is still under investigation by the department's IT team, the United States Computer Emergency Readiness Team (US-CERT), and an outside team of experts.

Officials don't have details on the scope of the attack nor do they know when the systems will be back online, she said.

The virus initially was discovered Jan. 20, after which EDA IT staff issued McAfee system updates to all EDA staff computers over the next several days. However, the EDA discovered additional virus contamination, which led to the disconnection of the systems.

The feds haven't had the best luck lately keeping their websites at the top of their service, but this has been mainly due to back-end issues rather than security woes.

Sites that have experienced service disruptions over the last several months include the Defense Information System Agency, USA.gov, and CIO.gov.

However, security was the cause of a shutdown of Internet access at another federal department website in the last year. A phishing attack on the Department of Energy's Oak Ridge National Laboratory last April caused the lab to shut down Internet and email access for more than a week.

InformationWeek's 2012 Government IT Innovators program will feature the most innovative government IT organizations in the 2012 InformationWeek 500 issue and on InformationWeek.com. Does your organization have what it takes? The nomination period for 2012 Government IT Innovators closes April 27.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
h4zzmatt@yahoo.com
50%
50%
[email protected],
User Rank: Apprentice
2/4/2012 | 2:51:16 PM
re: Virus Hits Part Of U.S. Commerce Dept.
They shut the network down because of a simple virus? There is something missing from this article. People do not shut down networks and turn off email for simple viruses anymore. They stopped doing that back in the 90s. Either an IT admin is incompetent at his job or there is something else going on here, some sort of APT attack perhaps. Unfortunately there is not enough detail in the article to know for sure.

-h4zzmatt
COVID-19: Latest Security News & Commentary
Dark Reading Staff 9/25/2020
Hacking Yourself: Marie Moe and Pacemaker Security
Gary McGraw Ph.D., Co-founder Berryville Institute of Machine Learning,  9/21/2020
Startup Aims to Map and Track All the IT and Security Things
Kelly Jackson Higgins, Executive Editor at Dark Reading,  9/22/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
How IT Security Organizations are Attacking the Cybersecurity Problem
How IT Security Organizations are Attacking the Cybersecurity Problem
The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-15208
PUBLISHED: 2020-09-25
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determining the common dimension size of two tensors, TFLite uses a `DCHECK` which is no-op outside of debug compilation modes. Since the function always returns the dimension of the first tensor, malicious attackers can ...
CVE-2020-15209
PUBLISHED: 2020-09-25
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLite model can force a node to have as input a tensor backed by a `nullptr` buffer. This can be achieved by changing a buffer index in the flatbuffer serialization to convert a read-only tensor to a read-write one....
CVE-2020-15210
PUBLISHED: 2020-09-25
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite saved model uses the same tensor as both input and output of an operator, then, depending on the operator, we can observe a segmentation fault or just memory corruption. We have patched the issue in d58c96946b and ...
CVE-2020-15211
PUBLISHED: 2020-09-25
In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in the flatbuffer format use a double indexing scheme: a model has a set of subgraphs, each subgraph has a set of operators and each operator has a set of input/output tensors. The flatbuffer format uses indices f...
CVE-2020-15212
PUBLISHED: 2020-09-25
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger writes outside of bounds of heap allocated buffers by inserting negative elements in the segment ids tensor. Users having access to `segment_ids_data` can alter `output_index` and then write to outside of `outpu...