Another Look at ATM Skimmers
Brian Krebs talks with Rick Doten, chief scientist at Lockheed Martin’s Center for Cyber Security Innovation. Doten has built an impressive slide deck on ATM fraud attacks. Read the full article. [KrebsonSecurity]
Government
80K Records’ Breached in Iowa Gaming Hack
Around 80,000 Iowa employee names, birth dates and social security numbers have been exposed after an Iowa Gaming Commission server was hacked. Read the full article. [Secure Computing]
Cloud Computing’s Inconvenient Truth
Google may have threatened to leave China in order to keep us all from concluding that “the cloud” can’t be secured. But isn’t that precisely what we should conclude based on the fact that Google chose to leave China? Read the full article. [Computerworld]
The website of the Oklahoma Tax Commission was the apparent victim of a hack yesterday, one in which visitors to the website were prompted to accept an Adobe license agreement and download software. Read the full article. [Infosecurity]
A number of Congressional websites were defaced with abuse aimed at
President Obama following Wednesday’s State of the Union address. Read the full article. [The Register]
A significant discovery in the recent Aurora attack that affected Google, Adobe, Yahoo and others is that the attackers had selected
employees at the companies with access to proprietary data, then learnt
who their friends were. The hackers compromised the social network
accounts of those friends, hoping to enhance the probability that their
final targets would click on the links they sent. Read the full article. [The Financial Times]
A machine equipment company in Texas is tousling with its bank after
organized crooks swiped more than $800,000 in a 48-hour cyber heist
late last year. While many companies similarly victimized over the past
year have sued their banks for having inadequate security protection,
this case is unusual because the bank is preemptively suing the victim. Read the full article. [KrebsonSecurity]
By Scott Crawford & Nick SelbyThere has been much talk recently about the “Advanced Persistent Threat.” According to Richard Bejtlich [1] and others, the term originated with the US Air Force around 2006, which explains why Bejtlich and others with an Air Force pedigree, such as Mandiant founder Kevin Mandia, have made much of the term.
Botnets give the common hacker espionage tools formerly reserved for nation states. Brian Krebs interviews Roland Dobbins on the “democratization of espionage.” Read the full article. [CSOonline]
The cost of a data breach increased last year to $204 per compromised
customer record, according to the Ponemon Institute’s annual study. The
average total cost of a data breach rose from $6.65 million in 2008 to
$6.75 million in 2009. Read the full article. [IDG News]
