Donald Sears

Splunk Inadvertently Exposes User Passwords

The passwords of customers on Splunk.com were revealed after some debug
information leaked on to its production servers. The debug code exposed
users passwords to Splunk.com as clear text, the company said. Read the full article. [The Register]


Faced with stricter Internet security measures like CAPTCHAS, some spammers have begun
borrowing a page from corporate America’s playbook: they are
outsourcing. Read the full article. [The New York Times]

The UK’s National Health Service has been hit by a voracious,
data-stealing worm that’s easily detected by off-the-shelf security
software, according to researchers who directly observed the mass
compromise. Read the full article. [The Register]

Microsoft has withdrawn an update for Windows Server because the patch, issued eight days ago, does not treat the root cause of the problem it was meant to fix. MS10-025 was designed to address a flaw specific to Windows 2000 Server installations also running Windows Media Services. Read the full article. [The Register]