[lotuseclat79]

New attack class exploits intranet weaknesses.

A security researcher has developed an interesting new class of attacks that exploit the problems caused by organizations using non-routable IP space on their internal networks, including one attack that compromises VPN users through the use of a persistent JavaScript backdoor.

Hansen's article with VPN diagrams: RFC1918 Caching Security Issues.

Another reason to block JavaScript with NoScript!

-- Tom

[RootbeaR]

Originally Posted by lotuseclat79

Another reason to block JavaScript with NoScript!
-- Tom

Which is an add-on for Firefox, an alternate browser to IE, for those who don't know.