Attackers are exploiting phpBB open-source forum software, says researcher.
Apply today for a FREE subscription to CIO Magazine!
Attackers are exploiting phpBB open-source forum software, says researcher.
I find it stunning that so many companies operating servers that support so many websites are still unaware they've been hacked! As of May 15, 2008, I assure you that the numbers of infected servers are going to prove much higher than reported. I've attempted to notify a company I deal with which hosts my website and have found complete disbelief from them despite the fact that their own forums are being deleted post by post by this WoW Hack (or whatever it's being called at the moment). So far as I've been able to learn it's an SQL Injection attack which inserts new HTML code into the web address through a vulnerability in JavaScript.
I'm also amazed that there is little or no information being released to the general public as to the actual effects and damage caused by this attack, nor is there any information about how to protect ones home computers if they are vulnerable or capable of spreading this around the web. I have no doubt that this is a much larger issue than is currently recognized and the damage done will be incredible if the word of it does not get out fully to the public.
There's a lot of buzz about Windows 7 out there. Each month in our webcast series, listen to analysts and customers discuss how Windows 7 and the Windows Optimized Desktop is impacting large companies around the world. Learn how they evaluated Windows 7, including the cost of deployment, deployment strategies, and tangible benefits.
Sponsored by Microsoft
Listen to on-demand Recordings »
Service Level Management Best Practices Life Cycle Overview - Improve Service Levels
Best practices for Service Level Management (SLM) is a process for consistently meeting customer requirements and delivering on IT's promises. See the steps required to ensure high-quality SLM.
Sponsored by Compuware
Read this White Paper »
Keeping Your Members Safe from Online Scams and Predators
In order to keep fraudsters out, romance sites must deploy effective solutions that look at information independent of what is supplied by users. A device fingerprinting solution such as iovation ReputationManager™ provides unique insight into the computers being used to create multiple accounts and exposes hidden device-account relationships that identity-based fraud solutions often miss.
Sponsored by iovation
Read this White Paper »
| CIO MARKETPLACE | buy a link![]() |
Use your Intranet to manage Software Licenses, plan for Windows XP/2000 upgrades, do Security Audits and more. Click to try and ask for our white paper - PC Management for the Internet Age.
UNIX and Linux Performance Tuning SimplifiedSarCheck is a performance analysis and tuning tool for most UNIX & Linux operating systems. It produces recommendations with full explanations, and both supporting graphs and tables. Get the most from your hardware by keeping your systems tuned.
.NET Developer Wanted - Boston - Local CandidatesAIR provides sophisticated analytical tools and software systems to help companies manage that risk. We are seeking a Sr .NET Developer with 8-10 yrs exp in .Net & OO development. ASP.NET, VB.NET skills required. Annual bonus - Apply Now
Get More from Your Oracle DatabaseDBAs are constantly challenged to increase performance and keep costs down. This paper discusses the industry best-practice Wait-Event analysis and how Confio has combined this with their Resource Mapping Methodology to optimize DB performance.