A serious new security vulnerability that could affect large parts of the Internet as well as corporate networks has been identified by the Department of Homeland Security's National Cybersecurity Division and the U.K.-based National Infrastructure Security Coordination Centre. The flaw involves the ubiquitous Transmission Control Protocol used for Internet traffic, the two groups warned Tuesday.
Hackers could use the "TCP injection vulnerability" in conjunction with a vulnerability in the Border Gateway Protocol, a widely used routing protocol, to launch denial-of-service attacks that would affect "a large segment of the Internet community," according to the Homeland Security advisory.
Also, because of a "TCP/IP Initial Sequence Number vulnerability," Web sites and Internet services that rely on constant TCP sessions could be attacked and suffer from data corruption, session hijacking, or denial-of-service attacks.
Networking products from Certicom, Check Point, Cisco Systems, Cray, and Juniper Networks are among those vulnerable because of the flaws, according to the National Infrastructure Security Coordination Centre. More details are available here.
Businesses using equipment from those vendors, some of which have not yet issued patches, should implement IP Security to encrypt network traffic so TCP information won't be available to attackers, reduce the TCP window size, and not publish their source TCP port information, the U.K. security center advises.
To realize the benefits of cloud-native software, an application must actually be cloud-native—designed to run in the cloud, interacting with disaggregated cloud services, fully manageable as code—to deliver the expected benefits.
By combining resources and expertise, the AI-Enabled ICT Workforce Consortium will offer a blueprint for how industries can adapt to an AI-dominated future.
IT leaders should heed the guidance of cybersecurity insurance providers who think businesses should prioritize security education, incident preparedness, regular internal audits, and ongoing vulnerability scanning and patching.
