Government


Pentagon to Obama: icanhasbilliondollars plz?

Capitol Hill may be awash in tough talk on cuts to domestic programs, but that’s not stopping the Pentagon from seeking an additional billion dollars in funding for cyber security, according to a report from Nextgov.com.

Forged Certificates: Five Steps To Secure Your Enterprise

The high profile compromise of Comodo, a Certificate Authority, has raised the spectre of a security compromise in one of the Internet’s few security pillars: SSL (Secure Sockets Layer) encryption that secures a dizzying array of Internet- and Web based transactions. 

Phony SSL Certificates issued for Google, Yahoo, Skype, Others

UPDATED: A major issuer of secure socket layer (SSL) certificates acknowledged on Wednesday that it had issued 9 fraudulent SSL certificates to seven Web domains, including those for Google.com, Yahoo.com and Skype.com following a security compromise at an affiliate firm. The attack originated from an IP address in Iran, according to a statement from Comodo Inc.


The veil surrounding the group Anonymous may be falling, now that a group claiming to have defected from the ranks of the online mischief making group has begun publishing what it claims are the identities of the hacker collective’s leadership and their roles in recent high profile hacks, including the theft of e-mail from security firm HBGary Federal.

U.S. hosting firms accounted for the bulk of the command and control centers for the Rustock botnet, with many firms claiming that they had no idea they were harboring an illegal criminal network on their infrastructure, according to a story in Krebsonsecurity.com.

It was a big week in security, what with the takedown of the Rustock botnet takedown, there was a major attack against security firm RSA Security. Threatpost Editor Paul Roberts had a chance to sit down with Bill Sell, host of the weekly IT security news show ITEC This Week on the Pulse Network. Paul and Bill talk about the week’s events, and do a round up of the recent RSA Security Conference.

RSA, the security division of EMC Corp. has warned customers to be on the lookout for targeted attacks, including suspicious messages and links sent over social media networks in the wake of a sophisticated attack that spilled confidential information about the workings of the company’s SecurID strong authentication product.

RSA Security, a division of EMC Corp. has admitted that it was the victim of a sophisticated attack that resulted in the theft of secrets related to its SecurID two-factor authentication product.