Slashdot Mirror
US Vulnerability Database Yanked Over Malware Infestation
hypnosec writes "The US government's National Vulnerability Database (NVD) maintained by National Institute of Standards and Technology (NIST) has been offline for a few days because of malware infestation. The public-facing site has been taken offline because traces of malware were found on two of the web servers that house it. A post on Google+ containing an email from Gail Porter details the discovery of suspicious activity and subsequent steps taken by NIST. As of this writing the NVD website is still serving a page not found message."
For the unenlightened, the NVD is where the official NIST computer configuration baselines and DISA STIGs are hosted. For example, the USGCB (formerly FDCC) is also down.
Learning HOW to think is more important than learning WHAT to think.
Way to sell yourself you arrogant prick. If you hire me, I'll help you with your image and this will never happen again.
I'm here to help.
...IRONY
I need a +1fear
...THIS is ironic!
Apart from the great irony of this incident, it is also a sign of things to come in cyber security and the computer industry in general. It seems we're at a point of time when you don't have to be stupid and/or high-visibility in order to get hacked, most contemporary software is ill-equipped to deal with the rising security threat, and even security service providers cannot be fully trusted. Hopefully this translates to more employment for us geeks and opportunities to build all the security features and plug up all the holes like we always wanted to but couldn't spare the time for.
Nope it is still funny. They couldn't put up a clean IIS install for the website down message in case it got infected as well.
Naturally they went for Apache.