Hackers
Mandatory Data Breach Reporting Appears Dead
Mandatory Data Breach Reporting Appears Dead (via slashdot) A plan by the Obama Administration to set up a framework for exchanging cybersecurity information could be dead—at least as a mandatory requirement. But that doesn’t mean such an information-sharing framework is off the table. The Washington Post reported April 26 that, while a national plan that… continue…
Obama Administration Confirms Secret Cybersecurity Policy
Obama Administration Confirms Secret Cybersecurity Policy (via slashdot) The Obama Administration has confirmed Presidential Policy Directive 20, which will create a classified national policy for handling attacks on the country’s national computing infrastructure. Details of the policy remain scant; the Electronic Privacy Information Center (EPIC) announced April 22… continue…
Ways AP Could Have Avoided Its Twitter Hack
A single tweet with a phony bit of news sent the stock market into a brief dive Tuesday, pushing the Dow Jones Industrial Average down more than 140 points in the three minutes from 1:07 to 1:10 p.m. ET. When the “news” — that two bombs had exploded in the White House, injuring the president — was debunked, the market regained its footing. Of course, phony information blasts out through Twitter all the time. The difference here is that… continue…
Hacking an Airliner with an Android App
Hacking an Airliner with an Android App (via slashdot) Hacking an airplane’s onboard systems and forcing it to crash sounds like the opener of a bad action movie. But at the Hack In The Box conference in Amsterdam, security consultant Hugo Teso demonstrated how someone armed with an Android smartphone could make such a disaster happen. Teso, who works… continue…
Are Hackers a Killable Target in a Cyberwar?
Are Hackers a Killable Target in a Cyberwar? (via slashdot) Cyber attacks are much in the news lately, thanks to some well-publicized hacks and rising concerns over malware. It’s certainly not out of the question — although many publications choose to rather delicately tiptoe around the issue — that many of these attacks are backed in some way by governments… continue…
Cyber-Spying: Boredom, Bitterness
The Cost of Cyber-Spying: Boredom, Bitterness (via slashdot) Shanghai. People’s Liberation Army hackers: they’re just like us. As noted by IT security firm Mandiant, and detailed in a new article by The Los Angeles Times, a blogger calling themselves “Rocy Bird” had posted several hundred blog entries over a three-year period about life as a Chinese… continue…
A Brute Force Defense Against Injection Attacks
Injection attacks are a common security problem for Web developers. The interpreted nature of most development languages makes them especially vulnerable to these attacks. This article explains what an injection attack is and provides some simple steps that you can take to defend your site against them. What is an Injection Attack? An injection attack takes place when a malevolent programmer puts code in the query string or other parts of the HTTP request. The interpreter executes the malicious code,… continue…
The 2012 Breakdown of Data Breaches. Ho ho ho
Security breaches are expected nowadays. Their occurrence can seem routine to those of us who don’t spend our professional lives preoccupied with finding new ways to stop them. If you want to get a sense of how the numbers break down, here’s an infographic that sums it all up nicely, with a holiday theme to lighten it up. Infographic: Mobistealth
For Hacker Intelligence, Visit Their Forums
The best way to protect your networks is to think like a hacker, and the best way to find out what hackers think is to spend some time on their public discussion boards. This is exactly what the analysts from Imperva, a security research firm, did and the results are intriguing. In last month’s Hacker Intelligence Report #13, they looked at one of the largest discussion forums (they don’t reveal which one, but it has a quarter of a million… continue…
Has Sony’s PlayStation 3 Finally Been Hacked For Good?
Sony’s PlayStation 3 has had its share of security meltdowns, of course, but a recent development might mean that the aging console is hacked for good. In the past, PS3 security has been something of a cat and mouse game. Sony’s had to deal with a range of piracy-enabling firmware and USB dongles, not to mention Geohot’s release of the “metldr” root key. The release of firmware 3.60 largely patched things up and security systems were implemented to keep those… continue…
Alice Hill
C.S. Magor
Cat Miller
David Brumbaugh
David Chie
Dawn Kawamoto
Don Willmott
Elisabeth Greenbaum Kasson
Gayle Laakmann McDowell
Lekan Oguntoyinbo
Leslie Stevens-Huffman
M Noivad
Mark Feffer
nick kolakowski
Stephen Lahanas
Susan Hall
Vincent Chow
