BCP/DRP
Question, what do Bing.com and Authorize.net have in common? Who would have guessed that they both have servers located in a data center that has had a fire? Or that they may have to put more into the planning portion of Disaster Recovery and Business Continuity? Authorize.net has been completely down for several hours now. Bing.com/travel had this to say: "A fire occurred at Fisher Plaza in downtown Seattle just after midnight on Friday morning. The blown transformer knocked out power to the entire building, which is home to the Bing Travel servers. We're hard at work to restore service following this unexpected event. Our current estimate for re-establishing Bing Travel functionality is 5pm PST, July 3rd." Perhaps they should have read one of our SANS papers on BCP/DRP planning. Reading room link is here. More information is available at this twitter http://twitter.com/authorizenet where Authorize.net are tweeting. The media are also following the story, KOMO a local station was knocked offline but are broadcasting from a backup site.
Update: Authorize.net appear to be at least partially back up and running.
Cheers,
Adrien de Beaupré
Intru-shun.ca Inc.
Happy 4th of July!
Celebrate, watch fireworks, but don't click on links in emails or surf to sites with Fourth of July, Independence day, or Fireworks as key words. Websense is reporting that Waledac will be using the above subjects in emails with links to sites that appear to be a video, but instead downloads malware. Their alert is here. More information is also available at the ESET blog here.
Authorize.net down
The credit card payment gateway authorize.net is currently down. A fire at their data center is apparently the cause. Thanks to Joey, Tommy, and Jonathan for writing in.
FCKEditor advisory
"FCKeditor, a web based open source HTML text editor, suffers from a remote file upload vulnerability." The advisory is here. CVE-2009-2265 has been assigned to the vulnerability. The patch and a new version of the editor will be available next week (06 July). Keep a close eye on any system with this package installed on it, it is recommended to follow mitigation steps in the advisory in the meantime. A number of compromises have been reported as a result of the exploit being used prior to now. Thanks Andrea.
Comments