Threat Intelligence

3/5/2018
05:00 PM
50%
50%

CERT.org Goes Away, Panic Ensues

Turns out the Carnegie Mellon CERT just moved to a newly revamped CMU Software Engineering Institute website.

When a major security-based website goes away, people notice and often assume the worst. So while the Carnegie Mellon Computer Emergency Response Team (CERT)'s stand-alone website recently was removed, it caused some confusion. It turns out the CERT remains in operation.

A blog post by Risk Based Security reflected the uncertainty that ensued in the wake of the recent disappearance of the cert.org site. The confusion began after a tweet by a CERT employee that the website had been removed. Risk Based Security then found that the content of cert.org had folded into the Software Engineering Institute website at Carnegie Mellon. It seemed ominous that typing in the former CERT URL took visitors not to the CERT site, but to the site of the SEI.

"The important thing is that this [website change] doesn't portend anything about CERT itself," a CERT spoksperson said, adding that the work of CERT is more important than ever.

All of the information formerly found at cert.org - from blog posts to podcasts to research reports - is available at www.sei.cmu.edu, and CERT's knowledge base of security issues remains accessible under its traditional URL, https://kb.cert.org.

CERT announced the changes in late January, he said. "We put banners on most of the main websites, and on the blog and resource library and other sites, we put splashes up about a month in advice. We gave a link to preview the new site well ahead of the launch," the spokesperson said. "We were managing a large number of external Web properties. These were two of the largest and for a variety of organizational reasons we decided to combine them," he said.

Read more here and here.

Interop ITX 2018

Join Dark Reading LIVE for two cybersecurity summits at Interop ITX. Learn from the industry’s most knowledgeable IT security experts. Check out the Interop ITX 2018 agenda here.

Related Content:

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
'Hidden Tunnels' Help Hackers Launch Financial Services Attacks
Kelly Sheridan, Staff Editor, Dark Reading,  6/20/2018
Inside a SamSam Ransomware Attack
Ajit Sancheti, CEO and Co-Founder, Preempt,  6/20/2018
Tesla Employee Steals, Sabotages Company Data
Jai Vijayan, Freelance writer,  6/19/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-12716
PUBLISHED: 2018-06-25
The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scan_results JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its l...
CVE-2018-12705
PUBLISHED: 2018-06-24
DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).
CVE-2018-12706
PUBLISHED: 2018-06-24
DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.
CVE-2018-12714
PUBLISHED: 2018-06-24
An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c could be called with no filter, which is an N=0 case when it expected at least one line to have been read, thus making the N-1 index invalid. This allows attackers to cause a denial o...
CVE-2018-12713
PUBLISHED: 2018-06-24
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was ...