Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

WikiLeaks Allies Knock MasterCard Off Line

Credit card giant is one of numerous companies targeted for refusing to do business with Julian Assange's rogue Web site.

MasterCard was the victim of a coordinated denial of service attack Wednesday that was apparently perpetrated by supporters of WikiLeaks and its jailed founder, Julian Assange.

MasterCard's Web site was still unavailable as of mid-morning after having been offline for several hours. Several hacker groups that have expressed support for WikiLeaks claimed credit for the attacks, including Anonymous and a group that calls itself Operation: Payback.

WikiLeaks allies said they attacked MasterCard in retribution for the company's decision to block WikiLeaks from its payments network, a move that made it more difficult for the rogue Web site to collect donations from supporters.

"The reason is amazingly simple," said Anonymous member Gregg Housh. "We all believe information should be free, and the Internet should be free," said Housh, in an interview with The New York Times published Monday.

WikiLeaks has also been cut off by PayPal, and Amazon booted it from its Web hosting servers for violating its Terms of Service agreement.

Meanwhile, Assange is in jail in London fighting an extradition request by Swedish authorities who have charged him with rape and other sex crimes. Assange has denied the charges, which relate to complaints filed by two Swedish women.

U.S. authorities are also said to be mulling espionage and other charges against Assange who, through WikiLeaks, provided several major newspapers—including the Times, The Guardian, Le Monde, and Der Spiegel—with excerpts from classified diplomatic documents.

The leaked documents revealed serious concerns within the U.S. diplomatic community about the resolve and trustworthiness of several key allies, including Afghanistan and Pakistan, in the war on terror.

They also disclosed Saudi Arabia's wish for a U.S. military strike against Iran, and painted unflattering pictures of Western leaders like German Chancellor Angela Merkel and Italian Prime Minister Silvio Berlusconi.

The documents also raise questions about whether British authorities released a prisoner jailed in connection with the Pan Am 103 bombing over Lockerbie to preserve oil deals with Libya.

 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 8/3/2020
Pen Testers Who Got Arrested Doing Their Jobs Tell All
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/5/2020
New 'Nanodegree' Program Provides Hands-On Cybersecurity Training
Nicole Ferraro, Contributing Writer,  8/3/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Changing Face of Threat Intelligence
The Changing Face of Threat Intelligence
This special report takes a look at how enterprises are using threat intelligence, as well as emerging best practices for integrating threat intel into security operations and incident response. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-15479
PUBLISHED: 2020-08-07
An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The driver's IOCTL request handler attempts to copy the input buffer onto the stack without checking its size and can cause a buffer overflow. This could lead to arbitrary Ring-0 code...
CVE-2020-15480
PUBLISHED: 2020-08-07
An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The kernel driver exposes IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the address space of the calling process. This could lead to arbitr...
CVE-2020-5412
PUBLISHED: 2020-08-07
Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can se...
CVE-2020-13376
PUBLISHED: 2020-08-07
SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie.
CVE-2020-15907
PUBLISHED: 2020-08-07
In Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places could execute file or folder names containing JavaScript.