Cryptography

The 2010 CWE/SANS Top 25 Most Dangerous Programming Errors is a list
of widespread and critical programming errors that can lead
to serious software vulnerabilities. Read the full article. [Common Weakness Enumeration/Mitre]

While many outside of the security industry
still perceive “hackers” as teenagers or isolated geeks who work alone, a recent research report encourages the general
public to see malware as a cooperative industry that supports
specialists, economies, and supply chains. Read the full article. [Dark Reading]

The City of Norfolk, Virginia is reeling from a massive computer meltdown in which an unidentified family of malicious code destroyed data on nearly 800 computers citywide. Read the full article. [KrebsonSecurity]

A loose consortium of security experts from more than 30 organizations
today called on enterprises to exert more pressure on their software
vendors to ensure that they use secure code development practices. Read the full article. [Computerworld]

Security industry analysts and lawmakers will get an unprecedented
chance next week to evaluate how the government might respond to a
cyber-attack on critical infrastructure targets. Read the full article. [Computerworld]

Peiter Zatko — a respected hacker known as “Mudge” — has been tapped to
be a program manager at DARPA, where he will be in charge of funding
research designed to help give the U.S. government tools needed to
protect against cyberattacks. Read the full article. [cnet]

A metals supply company in Michigan is suing its bank for poor security
practices after a successful phishing attack against an employee
allowed thieves to steal more than half a million dollars last year. Read the full article. [KrebsonSecurity]