Vulnerability in BIND and phishing scam targeting tax preparers and other tax professionals.
Connectikpeople.co recalls that the Internet Systems Consortium (ISC) has
released security updates to address a vulnerability in BIND. Exploitation of
this vulnerability may allow a remote attacker to cause a denial of service
condition.
Updates
available include:
- BIND 9.9.6-P2
- BIND 9.10.1-P2
Users and administrators are therefore encouraged to review ISC Knowledge
Base Article AA-01235 and apply the necessary updates.
In addition, the Internal
Revenue Service (IRS) has issued a press release addressing a new spear
phishing scam targeting tax preparers and other tax professionals.
Scam
operators often use fraudulent e-mails to entice their targets to reveal login
credentials.
Connectikpeople.co encourages users and administrators to review the IRS
press release for details and refer to
US-CERT Security Tip ST15-001 for information on "tax" themed phishing attacks.