-
Cost of cyberattacks on the rise
A new study shows that cybercrime is costing corporations 56 percent more than last year; the study conducted by the Ponemon Institute and sponsored by ArcSight, an HP company, found that the median cost of cybercrimes for the fifty companies surveyed was $5.9 million; the increase in costs were largely due to hackers using stealthier techniques
-
-
Microsoft offers $250,000 in cybersecurity competition
Last Wednesday at the annual Black Hat and Defcon convention for hackers, Microsoft announced a competition for cyber security specialists in which it would award $200,000 to the individual who develops the most innovative computer protection technology
-
-
DHS officials: Stuxnet can morph into new threat
Government cybersecurity experts warn that the Stuxnet virus, which damaged Iran’s nuclear centrifuges, could morph into something even more destructive; DHS officials worry that hackers could design more complex versions of the virus that can evade detection and bypass existing software fixes
-
-
New drone listens in on cell phone calls and hacks Wi-Fi networks
At this week’s annual Defcon security conference for hackers, two hobbyists will showcase their sophisticated unmanned Wi-Fi detecting, cell-phone eavesdropping spy drone; the drone was assembled using an old Army target drone that had been converted to run on electric batteries and is now equipped with an HD camera, eleven antennas, and a cigarette pack sized computer that is loaded with hacking tools
-
-
Detecting fake Web sites
A team of researchers develop a new — and more reliable — way to detect fake Web sites; the team developed five categories with thousands of cues, finding that the best results were attained when utilizing thousands of highly visible and also deeply embedded cues, such as placement, URL length, the number of links, characters types on the site and how thorough the site’s “frequently asked questions” section is detailed, among other features
-
-
DHS warns utilities at risk from insider threats
Last week DHS warned critical infrastructure operators like chemical facilities, nuclear power plants, and electric utility companies that terrorists could be targeting major facilities from the inside; officials cautioned that “violent extremists have, in fact, obtained insider positions,” and that “outsiders have attempted to solicit utility-sector employees” for damaging physical and cyber attacks.
-
-
After FBI arrests LulzSec announces more cyber mayhem
In response to the FBI’s arrest of several hackers, the recently disbanded hacking group known as LulzSec has vowed to return and the group says it will renew its attacks on corporations and government agencies; the announcement comes after U.S. authorities arrested sixteen people last week in relation to the groups’ previous attacks which included bringing down PayPal’s website after it suspended its service to WikiLeaks
-
-
Recent deluge of cyber attacks results in record spending
The deluge of high profile cyber attacks on major corporations and government entities like the U.S. Senate, the CIA, and Sony has driven a sharp increase in demand for cyber security experts; in the first six months of this year alone, cyber attacks and data breaches have cost U.S. companies approximately $96 billion, nearly the total for 2010; analysts project 2011 to be the busiest year yet with an estimated $75.6 billion in cyber security spending, surpassing last year’s record $63 billion
-
-
Combating counterfeit microchips // by Dr. James Hayward, Ph.D, Sc.D.
Dr. James Hayward, the chairman, president, and CEO of Applied DNA Sciences, argues that the U.S. government needs to do more to prevent corrupted microchips from entering U.S. computers that make it easier for hackers and foreign governments to infiltrate networks
-
-
Malware imported into U.S. on foreign-made components
A high level DHS official acknowledged that malware built into imported electronic components sold in the United States poses a serious threat to U.S. economy and security; he also said it was a complex threat which the federal government has been trying to address in different ways; Greg Schaffer, acting deputy undersecretary for the National Protection and Programs Directorate at DHS, said the threat is “one of the most complicated and difficult challenges we have”
-
-
AntiSec hacks IRC Federal, posts passwords online
Last Friday, AntiSec, a prominent hacking group, announced that it had successfully infiltrated the servers of IRC Federal; the company has contracts with several major government agencies including the Department of Justice, the Army, Navy, and NASA; in an announcement on their website, AntiSec wrote, “We laid nuclear waste to their systems, owning their pathetic Windows box, dropping their databases and private emails, and defaced their professional looking website”
-
-
Critical vulnerability found in Apple iPhones and iPads
Apple is scrambling to develop a fix for a software vulnerability that leaves its iPhone, iPad, and iPod Touch devices susceptible to hackers; according to Germany’s Federal Office for Information Security, which discovered the critical software vulnerability, hackers can steal confidential data from the devices without the user even suspecting it by exploiting a flaw in the program that allows users to “jail-break” their devices and run non-Apple software
-
-
Foreign made chips could be allowing hackers into U.S. networks
Foreign-made computer parts could be manufactured with flaws or viruses that make it easier for hackers to later infiltrate U.S. computer networks; last week before the House Oversight and Government Reform Committee, Greg Schaffer, DHS’s acting deputy undersecretary national protection and programs director, admitted that some foreign chips are being made with security vulnerabilities
-
-
Top hackers to teach children at DEFCON Kids
At an upcoming gathering of some of the world’s most talented hackers, children will have the opportunity to learn hacking skills from the best;DEFCON, the infamous annual gathering of hackers, will hold DEFCON Kids for the first time; the decision to teach children hacking skills is controversial and is even drawing criticism from members within the DEFCON community
-
-
Apple latest victim of Anonymous cyberattacks
Apple appears to be the latest victim of the mysterious group of international hackers known as Anonymous; the data breach appears to be relatively minor as the hackers only infiltrated a survey used to process technical support follow-up surveys and obtained twenty-seven internal Apple user names and passwords
-
More headlines
Who's online
The long view
U.S. contemplates responses to a cyber-Pearl Harbor attack on critical infrastructure
Cybersecurity experts often contemplate how U.S. security agencies would react to a cyber-9/11 or a digital Pearl Harbor, in which a computer attack would unplug the power grid, disable communications lines, empty bank accounts, and result in loss of life. “Ultimately, it absolutely could happen,” says one expert. “Yeah, that thought keeps me up at night, in terms of what portion of our critical infrastructure could be really brought to its knees.”
U.S. adopts a more assertive cyber defense posture
Recent cyberattacks and intrusions by hackers, operating alone or backed by nation-states, have prompted the Pentagon and DHS to reaffirm their commitment to upholding the reliability and integrity of America’s cyber network and the systems connected to it. Americans rely on the connected Web to deliver critical services such as water and electricity, and should the Web be breached by bad actors, the consequences could threaten national security. “If we look at cyberspace as a hostile environment and there are bad people out there who want to do bad things to us, it may cause a wholesale re-examination of the way we build our systems in the first place,” noted one expert.