Two of the accused Mariposa botnet operators in Spain requested jobs at Panda Security in March some 2 months after their arrest, according to a Panda Security official. Read the full article. [KrebsonSecurity]
A 605-page NSA document from 2004 reads like a listing of the pros and cons for a
huge array of defensive and counterintelligence approaches and
technologies that an entity might adopt in defending its networks. There is a key section on deception technologies that discusses the use of honeynet technology to learn more about
attackers’ methods, as well as the potential legal and privacy aspects
of using honeynets. Read the full article. [KrebsonSecurity]
European ministers are considering establishing a
new agency that would tie together law enforcement agencies and other
entities dedicated to fighting cybercrime. The Council of the European Union, composed of ministers from 27 countries, issued a document earlier this week calling for the European Commission to draw up a feasibility study on the idea. Read the full article. [IDG News Service]
A data breach in the United States could cost
enterprises twice as much as the same breach costs companies in other
countries with less stringent disclosure and notification laws, according to Ponemon Institute research. Read the full article. [Dark Reading]
After a six-month trial, San Francisco city admin Terry Childs was found guilty
of a sole felony count of hijacking the city’s computer system. Read the full article. [Wired]
An Indian national was sentenced to 81 months in prison for
hacking into online brokerage accounts and using those accounts to
manipulate stock prices for personal gain. Read the full article. [Computerworld]
Affinity Health Plan, a New York managed care
service, is notifying more than 400,000 current and former customers
employees that their personal data might have been leaked through the
loss of an unerased digital copier hard drive. Read the full article. [Dark Reading]
The SANS Institute has released critical security controls for cyber defense agreed to by a consortium of agencies including: “NSA, US Cert, DoD, DoD JTF-GNO, the Department of Energy Nuclear Laboratories, Department
of State, DoD Cyber Crime Center plus the top commercial forensics
experts and pen testers that serve the banking and critical
infrastructure communities,” according to the SANS website. Read the SANS Institute consensus audit guidelines.
Two Belarusian nationals suspected of operating a rent-a-fraudster
service for bank and identity thieves have been arrested overseas,
according to New York authorities, who unsealed an indictment for one of
the suspects. Read the full article. [Wired]
Google learned some hard security lessons after it was attacked late last year by hackers, said CEO Eric Schmidt.”Google is now particularly paranoid about that,” Schmidt said during a question-and-answer session following Google’s Atmosphere 2010 conference before about 400 CIOs. Read the full article. [CNet]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
