Weatherford, Kaminsky: Top 2010 Security Issues
Mark Weatherford, CISO for California, and Dan Kaminsky, finder of last year’s DNS flaw, offer five security predictions for 2010. Read the full article. [CSO]
Government
On the Hunt for Conficker
There are several ongoing investigations attempting to find the authors of the Conficker botnet, one of the fastest spreading worms in history, but those responsible for the worm have proven elusive. Read the full article. [TechTarget]
Hackers Target MS Police Software
Hackers have released software they say sabotages a suite of forensics utilities Microsoft provides for free to hundreds of law enforcement agencies across the globe known as Computer Online Forensic Evidence Extractor (COFEE). Read the full article. [The Register]
Threatpost editor Dennis Fisher talks with Eugene Spafford of Purdue’s CERIAS center about cybercrime, funding for long-term security research projects and whether the federal cybersecurity coordinator position matters.
A hacker has posted a proof-of-concept attack
exploiting vulnerabilities on the Pentagon’s public Website that were
first exposed several months ago and remain unfixed. Read the full article. [Dark Reading]
The websites of NASA’s Instrument Systems and Technology unit and
Software Engineering division were broken into by taking advantage of SQL Injection flaws and poor access controls. Read the full article. [The Register]
The Defense Department will not meet its end-of-the-year deadline for
removing Social Security numbers from military ID cards as they are issued or
renewed, the Pentagon has confirmed. Read the full article. [Stars & Stripes]
Two Bulgarians have been sentenced for their roles in an online
money-laundering scheme that collected about $1.2 million from U.S.
residents and sent it to a criminal group in Eastern Europe, the U.S.
Department of Justice said. Read the full article. [Computerworld]
Although the combined number of reported data breaches in the
government and the military has dropped in 2009 compared to last year,
many more records were compromised in those breaches, according to
recent figures compiled by the Identity Theft Resource Center. Read the full article. [Government Technology]
Malware attacks and infections are up 50 percent from 2008 and losses are down, according to a Computer Security Institute report, but the industry organization says very few companies are willing to disclose dollar amounts. Read the full article. [Security Focus]
