Government


Operation Aurora Still Out There

The targeted attacks that hit Google, Adobe,
and other U.S. organizations are still ongoing and have affected many
more companies than the original 20 to 30 or so reported by Google and
others. One researcher believes they are close to naming the suspected coder. Read the full article. [Dark Reading]

U.S. Gov to Simulate Cyber Attack Next Week

Security industry analysts and lawmakers will get an unprecedented
chance next week to evaluate how the government might respond to a
cyber-attack on critical infrastructure targets. Read the full article. [Computerworld]

Mudge to Work For Uncle Sam at DARPA

Peiter Zatko — a respected hacker known as “Mudge” — has been tapped to
be a program manager at DARPA, where he will be in charge of funding
research designed to help give the U.S. government tools needed to
protect against cyberattacks. Read the full article. [cnet]


The prosecution of a Swedish man charged with breaching the computer
networks of NASA and Cisco Systems and making off with sensitive source
code will be transferred to Swedish authorities, US federal prosecutors
said Monday. Read the full article. [The Register]

Criminals are spamming the Zeus banking Trojan in a convincing e-mail that spoofs the National Security Agency. Initial reports indicate that a large number of government systems may have been compromised by the attack. Read the full article. [KrebsonSecurity]

The recent disclosure by Google, Adobe and other companies that their networks had been thoroughly compromised by attackers who may have been after their source code has prompted a tremendous amount of discourse both in the security community and in the general public about the political and commercial implications of the attacks. But the fact of the matter is that the attacks themselves were neither remotely unique nor particularly clever. And that is what should be worrying lawmakers, corporate security specialists and anyone else with some skin in the game.

The House today overwhelmingly passed a bill aimed at building up the United States’ cybersecurity army and expertise, amid growing alarm over the country’s vulnerability online. Read the full story [New York Times].

Credit card numbers are so passe. Today’s hackers know the real powerhouse data to steal is emission certificates. That’s exactly what hackers went after last week when they obtained
unauthorized access to online accounts where companies maintain their
carbon credits. Read the full article. [Wired]