Support Archives - Page 3 of 7

What is a DNS Attack, what is the risk and how can you mitigate that risk?

Cyberattacks, Support

What are NTP Service Mode 6 Queries, what is the risk and how can you mitigate that risk?

Cyberattacks, Support

The remote NTP server responds to mode 6 queries (Mode 6 is the recommended protocol used to get status information from a running ntpd to configure some of its behaviors on the fly). Devices that respond to these queries have the potential to be used in NTP amplification attacks. An attacker sends a massive amount of mode 6 messages to a huge number of recipient servers or clients in your organization. A remote attacker could potentially exploit this, via a specially crafted mode 6 query, to cause a reflected denial of service condition. Reflection Denial of Service attacks makes use of a third party component to send the attack traffic to a victim, ultimately hiding the attackers’ own identity. The attackers send packets to the reflector servers with a source IP address set to their victim’s IP, indirectly overwhelming the victim with the response packets.

Sources: www.netsecaddict.com; www.security.radware.com

Read Full Article →

What is an SNMP Attack, what is the risk and how can you mitigate that risk?

Cyberattacks, Support

An SNMP attack is a type of Distributed Denial of Service (DDoS) attack.

Instead of Domain Name Servers (DNS), SNMP attacks use the Simple Network Management Protocol (SNMP) – a common network management protocol used for configuring and collecting information from network devices like servers, hubs, switches, routers and printers.

SNMP attacks can generate attack volumes of hundreds of gigabits per second, which can be directed at targets from multiple broadband networks. Attacks are sometimes hours in duration and are highly disruptive to targets. SNMP attacks elicit a flood of responses to a single spoofed IP address. During an attack, the perpetrator sends out a large number of SNMP queries with a forged IP address (the victim’s) to numerous connected devices that, in turn, reply to that forged address. The attack volume grows as more and more devices continue to reply, until the target network is brought down under the collective volume of these SNMP responses.

Source: www.imperva.com

Read Full Article →

Skyway West

What is a DNS Attack, what is the risk and how can you mitigate that risk?

What are NTP Service Mode 6 Queries, what is the risk and how can you mitigate that risk?

What is an SNMP Attack, what is the risk and how can you mitigate that risk?

What is an RDP Service Exploit, what is the risk and how can you mitigate that risk?

What is an SSDP Service Exploit, what is the risk and how can you mitigate that risk?

What is a multicast DNS Service Exploit, what is the risk and how can you mitigate that risk?

What is an Open Portmapper Vulnerability, what is the risk and how can you mitigate that risk?

What is a NetBios Vulnerability, what is the risk and how can you mitigate that risk?

What is a Microsoft (MS) SQL Server Resolution Service Vulnerability and How Does it Affect You?

What is an SMB Protocol Vulnerability, what is the risk and how can you mitigate that risk?

Pages

The Latest

What is a Malware Vulnerability, what is the risk and how can you mitigate that risk?

More