|
|
|
January 8, 2002
Microsoft UPnP Buffer Overflow and DoS Vulnerabilities Advisory
Multiple vulnerabilities in the Universal Plug and Play (UPNP) service have recently been discovered in Microsoft Windows XP and ME and in Microsoft Widows 98 and 98SE running the XP Internet Connection Sharing Client. Additional vulnerabilities can result in either a Denial of Service (DoS) against the targeted system or a possible Distributed Denial of Service (DDoS) attack against a network. Both CERT Coordination Center (Carnegie Mellon) and NIPC (National Infrastructure Protection Center) recommend immediately downloading and installing the appropriate patch for each affected operating system:
Top 10 Virus Threats
The National Infrastructure Protection Center (NIPC) recently released its list of the Top 10 Virus Threats for 2001. Several of these virus threats (Goner, Nimda, Sicam) remain among the most widely widespread risks infecting computer systems today. To limit the possibility of infection, readers are reminded to update their anti-virus software on a regular basis.
Assessing Your Information Security Readiness
Can you answer these three important questions?
1. Will our information security program pass regulatory scrutiny and satisfy the examiners?
2. Will the program actually protect our customer information? Is it workable? Is it properly implemented? What safeguards do we have in place to guard against deviations from it? Are our people properly trained and monitored?
3. Is it good enough? If you have an information security breach that results in litigation against your institution, will the plaintiff's attorneys make mincemeat out of you? Did you do your research? When you assessed the likelihood of various types of threats, were you thorough enough? Did you utilize outside expertise where necessary?
Additional resources on Information Security are available from the BOL InfoSec Clearinghouse
Top 5 NEW YEAR'S Technology Resolutions at your Institution
- Require users to routinely install anti-virus signature updates and apply them to all files.
- NEVER Open unsolicited e-mail attachments without verifying their source.
- Install security patches-especially for Microsoft Office, Microsoft Internet Explorer, and Netscape.
- Backup critical files and test backups.
- Educate all users to recognize potential security breaches.
Previous Tech Alerts:
12/20/01 Holiday Themed Computer Virus Unleashed
Home | Compliance | Lending | Operations | Security | Marketing | Technology | eBanking
BOL Archives Privacy Policy Important Disclaimer Recommend This Site ! Contact Us
BankersOnline is a free service made possible by the generous support of our
advertisers and sponsors. Advertisers and sponsors are not responsible for site content. Please help us keep BankersOnline FREE to all
banking professionals. Support our advertisers and sponsors by clicking
through to learn more about their products and services.
|
|
|
