Vulnerabilities


Expert: Stuxnet Just Latest in U.S. Hacks of Covert Nuke Programs

CORRECTION: This article originally included the incorrect name for an associate of  A.Q. Khan. The correct name of the associate is “Friedrich Tinner,” a Swiss nuclear engineer. The name has been corrected in the article.The author of a new book on the evolution of the world’s first nuclear black market says that Stuxnet is just the latest in a long string of efforts by the U.S. and its allies to slow or stop the creation of nuclear programs by rogue nations.

GAO Warns Of Cyber Insecurity on Smart Grid

The U.S. Government’s watchdog, the Government Accountability Office (GAO) has warned that the rapid adoption of so-called “smart grid” infrastructure in the U.S. electric industry is going forward without adequate planning for cybersecurity and the combined physical and cyber attacks that are likely to occur.


Details of the Stuxnet worm’s origins and functioning have been seeping into the media, tidbit by intriguing tidbit, since last Summer, when news of the worm went mainstream. But a new exclusive from the New York Times breaks the Stuxnet story wide open, confirming oft-cited theories that it was a state-sponsored attack and pointing the finger at both the U.S. and Israel as the creators of the worm.

After a lull in the fourth quarter of 2010, spam appears to be back in full force, according to reports from both Websense, Commtouch and Symantec Corp.Spam volume was up 45% in the first half of January after diving in Q4 according to a Commtouch spam report.

China’s Computer Emergency Response Team (CERT) admitted that it missed a September e-mail message from a researcher at NSS Labs that pointed out a critical vulnerability in a commonly used SCADA (Supervisory Control And Data Acquisition) software package. The lapse resulted in a gap of almost four months before the hole was patched.

The Web sites of some of the nation’s top universities were discovered to be serving up links to bogus online stores offering everything from popular software by Microsoft to student visas and Viagra, according to a report from security firm zScaler.