Chinese Manufacturer Recalls IOT Gear Following Dyn DDoS

Hangzhou Xiongmai said that it will recall millions of cameras sold in the U.S. in response to Friday’s DDoS attack against DNS provider Dyn that kept a number of web-based services such as Twitter, Github and others offline for much of the day. The Chinese manufacturer sells OEM white-label...

Microsoft Windows NAT帮助程序远程拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows NAT帮助程序模块在处理畸形DNS报文时存在漏洞，远程攻击者可能利用此漏洞执行拒绝服务攻击。 如果Windows XP用户启用了Internet连接共享的话，则远程攻击者可以通过发送Additional RRs（也被称为Additional Information）部分包含有两个空字节的DNS报文导致服务和主机进程（svchost.exe）崩溃。由于ICS服务关系到防火墙服务，因此ICS崩溃就会导致防火墙服务失效。 Microsoft Windows XP SP2 Microsoft...