Headline Feeds|
'Red October' Cyberspy Attack Hits Diplomats, Governments, Scientists January 15, 2013 
Kaspersky Lab on Monday announced the discovery of a massive cyberespionage operation that has been active for at least five years and has infiltrated computer networks at diplomatic, governmental and scientific research organizations in Europe, North America and Central Asia. The campaign, which the company has named "Red October," is still active and its configuration is as complex as the Flame malware, which
is considered the most complex attack ever launched.
|
Why Bad Security Can Happen to Good People January 15, 2013 
Sometimes you can do everything right and still run into trouble. To see this in action, pay attention the next time you're driving at dusk -- for example during an evening commute, if you have one. If you do this, chances are good that you'll notice at least one person with their headlights turned off. It's not that they're doing anything malicious.
|
|
Oracle's Java Fix Fizzles January 14, 2013 
Oracle released a fix over the weekend for two serious vulnerabilities in Java, but this doesn't seem to have improved matters much. The vulnerabilities, which affect Web browsers using Java 7 plugins, let attackers remotely exploit target systems without needing a username or password.
|
100 Million Systems Vulnerable to Java Flaw January 14, 2013 
A zero-day flaw in Oracle's Java programming language could make as many as 100 million computers connected to the Internet vulnerable to attack by cybercriminals. The threat posed by the Java vulnerability was considered so serious that the U.S. Department of Homeland Security urged computer users to turn off Java on their machines.
|
|
Iran Peppers US Banks With Steady Barrage of Cybertraffic January 09, 2013 
Iran is to blame for a wave of distributed denial of service attacks that hit U.S. banks in the past few weeks, according to a report in The New York Times. The amount of traffic flooding American banks' sites was several times the volume Russia aimed at Estonia in a month-long online assault back in 2007, said James A. Lewis, senior fellow and director at the Center for Strategic and International Studies.
|
US Officials Pin Bank Hack Attack on Iran January 09, 2013 
U.S. government officials and security experts are convinced that a recent cyberattack on American banks was executed by Iran. The U.S. has not yet divulged any evidence to corroborate their accusations, but security experts reportedly say the attack displayed a level of sophistication not possible for an amateur.
|
|
Bogus Google Certificate Exposes Broader Problem January 07, 2013 
Google spotted an impostor certificate on Christmas Eve and took quick action, but the event is calling into question the reliability of Secure Socket Layer security. Turktrust, a Turkish Web certificate authority, acknowledged it gave two entities the power to create certificates when it shouldn't have.
|
Thieves Knock Off Apple Store in Paris January 02, 2013 
On New Year's Eve, armed burglars lifted thousands of dollars -- and potentially more than $1 million -- worth of merchandise from an Apple store in central Paris. The hit targeted a flagship Apple store, which carried a full array of products including iPhones, iPads and Macs. Police declined to comment on reports that put the damage at $1.32 million. The thieves were reportedly masked and escaped in a van.
|
|
FBI Takes 10 Alleged Botnet Operators Offline December 13, 2012 
The Federal Bureau of Investigation has arrested 10 individuals from around the world, including the United States, which it alleges are part of an international cybercrime ring linked to the Yahos malware. Yahos is associated with the notorious Butterfly botnet, which compromised more than 11 million computer systems and resulted in an estimated $850 million in losses.
|
Report: Iran Uses Huawei Gear to Snoop on Citizens December 06, 2012 
Foreign telecommunications companies, including China-based Huawei, have helped Iran collect incredibly detailed data on its citizens' telephone and Internet use, Reuters reported. According to an investigative report, a partner of Huawei offered to sell the Huawei-developed "Lawful Interception Solution" to MobinNet, Iran's first wireless broadband provider.
|
|
Swiss IT Guy Goes Rogue With US, UK Intelligence Data December 04, 2012 
American and British intelligence agencies on Tuesday were warned by the NDB, Switzerland's federal intelligence service, that some shared information related to counterterrorism had been stolen. Last summer, an NDB IT technician reportedly downloaded terabytes of data that had been shared between the NDB, the CIA and Britain's MI6. The man may have looked to sell it.
|
Post-Election Congressional Shuffling Could Impact Feds' IT, Cybersecurity Plans November 16, 2012 
One of the overriding issues in the federal elections was the need to get the government's financial house in order. In the post-election period, Republicans and Democrats have offered conciliatory comments as a deadline for resolving the issue of the fiscal cliff draws near, but positions on the issue remain very much in conflict.
|
|
Senate Tosses Cybersecurity Ball to Obama's Court November 15, 2012 
Well, that was fast. About 24 hours after Sen. Harry Reid, D-Nev., said he would move to bring the once-failed Cybersecurity Act of 2012 to the Senate floor for a vote, its opponents shot it down again. Reid's procedural motion to move the bill forward was rejected 51-47 on Wednesday.
|
Skype Fixes Flaw Allowing Easy Account Hijack November 15, 2012 
Skype on Wednesday fixed a vulnerability that allowed users' accounts to be hijacked using the password reset process. The vulnerability was published two months ago on the Russian site Xeksec. Skype has fixed the problem by updating the password reset process. To exploit the vulnerability, all a hacker needed to know was a victim's email address.
|
|
Stuxnet Spotted Stateside in Chevron Computers November 12, 2012 
Chevron was infected with the Stuxnet malware in 2010, the company revealed last week, raising concerns about the effectiveness of cyberweapons as a policy tool. Because of Stuxnet's design, it didn't do any damage to Chevron's computers, but the fact that a cyberweapon created to attack Iran's nuclear capability ended up on the systems of an American oil company isn't very reassuring to security experts.
|
Feds, US Businesses to Link Arms on Cybersecurity November 07, 2012 
The ever-changing and ever-expanding quest to keep information technology systems secure requires collaboration and coordination among government and business enterprises. To foster such joint efforts, the National Institute of Standards and Technology has put out the word to U.S. businesses to propose ideas and literally work side by side with federal counterparts to develop effective cybersecurity programs.
|
|
Many Hacks Claimed, Few Confirmed on Anon's Day of Mayhem November 06, 2012 
Anonymous has been celebrating Guy Fawkes Day by engaging in various acts of mayhem online and turning out in person at sites across the globe to protest. Some of the reported hacks and other acts have turned out to be unsubstantiated. The attack claims include Symantec and ImageShack. PayPal also was reported to have been hacked, but a spokesperson says that's not true.
|
Big US Banks Under Active Attack, Napolitano Warns November 01, 2012 
Hackers are actively attacking some of the largest banks in the nation, U.S. Homeland Security Secretary Janet Napolitano warned this week. Napolitano declined to go into detail about the types of breaches or what kind of information -- if any -- had been taken. She brought up her concern about attacks on U.S. financial institutions at a cybersecurity event.
|
|
Russian Hacker Gets a Taste of His Own Malware October 31, 2012 
After a persistent series of attacks on its government computers by a Russian hacker, the Republic of Georgia got mad and refused to take it anymore. In a reversal of roles, members of the country's Computer Emergency Response Team suckered the cybermiscreant into downloading a file infected with his own spyware that allowed CERT to photograph the alleged hacker with his computer's webcam and ransack its hard drive for files.
|
Icelanders Give Crowdsourced Constitution Warm Reception October 23, 2012 
Voters in Iceland have responded favorably to the government's offer to let them participate in drafting the nation's new constitution. The idea to let citizens chime in online, namely via Facebook and Twitter, was hatched by 25 people on the Constitutional Council, which was tasked with devising a new constitution.
|
See More Articles in Cybersecurity Section >>
