Category «Cybersecurity»

Not Even Close: The State of Computer Security (with slides) – James Mickens

“In this bleak, relentlessly morbid talk, James Mickens will describe why making computers secure is an intrinsically impossible task. He will explain why no programming language makes it easy to write secure code. He will then discuss why cloud computing is a black hole for privacy, and only useful for people who want to fill …

Subjects: Cybercrime, Cybersecurity, Internet, Knowledge Management, Legal Research, Microsoft, Privacy

Cyber crimes against NATO and its members

Via Atlantic Council – New Twists in Russia’s Cyber Campaign Against NATO and Its Members By Sam Jones, Financial Times: “Russia’s aggressive actions in cyber space are all carefully designed to fall short of warranting any kind of serious military or aggressive response. One of Moscow’s new favoured tactics is to arm crime syndicates with …

Subjects: Cybercrime, Cybersecurity, Defense, E-Government, Economy, Financial System, Government Documents, Internet, Knowledge Management, Privacy

GasPot Experiment: Unexamined Perils in Using Gas-Tank-Monitoring Systems

TrendMicro Report, Kyle Wilhoit and Stephen Hilt Forward-Looking Threat Research (FTR) Team: “…In places like the United States (US) and others worldwide, gas stations are primarily privately owned. Some business owners can be described as independent, tech-savvy, and modern. Gas retailers are aware of the risks tied to their business and so heavily invest in …

Subjects: Cybercrime, Cybersecurity, Transportation

Report on How Shadowy Cyberlocker Businesses Use Credit Card Companies to Make Millions

Behind the Cyberlocker Door: A Report on How Shadowy Cyberlocker Businesses Use Credit Card Companies to Make Millions A NetNames Report for Digital Citizens Alliance “As a society, we can no longer shrug off content theft as the isolated activity of high school and college students who want to watch a movie or listen to …

Subjects: Cybercrime, Cybersecurity, Economy, Education, Financial System, ID Theft, Internet

Key Findings from Global State of API Security Survey 2015

Akana Report (reg reqd) – “The front lines of information security risk management evolve in parallel with the dominant technologies in common use.  The emergence of the Web brought Web-based threats and resulting countermeasures.   The rise of SQL databases brought SQL injection and its mitigations.  Now, we have the increasing usage and business importance of …

Subjects: Cybercrime, Cybersecurity, Internet

Govt posts Request for Quotations in response to massive employee data breach

FCW.com -“At long last, vendors can size up the official requirements for protecting the identities of 21.5 million affected by the Office of Personnel Management background check breach. The full load could be more like 28 million, and whoever wins will have to let the feds inside their own databases. Quotations are due Aug. 14 …

Subjects: Cybercrime, Cybersecurity, Government Documents, ID Theft, Privacy

Privacy Laws in Asia – free download available

Bloomberg BNA – “With its critical impact on the world economy and global trade, privacy legislation in Asia has been extremely active in the last several years. A recently released report, Privacy Laws in Asia, written by Cynthia Rich of Morrison & Foerster LLP for Bloomberg BNA, analyzes commonalities and differences in the privacy and …

Subjects: Cybercrime, Cybersecurity, Internet, Knowledge Management, Legal Research, Privacy

FireEye – Uncovering Malware Backdoor that Uses Twitter

FireEye announcement: “It hides in network communications, in all the noise—designed so that defenders can neither detect nor characterize its activity. But its purpose is transparent: to use Twitter, GitHub, and cloud storage services to relay commands and extract data from compromised networks. Download the report [reg. req’d] and read about the recently discovered HAMMERTOSS, …

Subjects: Blogs, Cybercrime, Cybersecurity, Intellectual Property, Internet, Knowledge Management, Privacy, Social Media

Cyber Intrusion into U.S. Office of Personnel Management: In Brief

CRS – Cyber Intrusion into U.S. Office of Personnel Management: In Brief, July 17, 2015. “On June 4, 2015, the U.S. Office of Personnel Management (OPM) revealed that a cyber intrusion had impacted its information technology systems and data, potentially compromising the personal information of about 4.2 million former and current federal employees. Later that …

Subjects: Congress, Cybercrime, Cybersecurity, E-Government, E-Records, Government Documents, Privacy

CRS Insights – OPM Data Breach

OPM Data Breach: Personnel Security Background Investigation Data. Michelle D. Christensen, Analyst in Government Organization and Management, July 24, 2015 (IN10327): “In a July 9, 2015, news release on the cyber-intrusions of its systems, OPM “concluded with high confidence that sensitive information, including the Social Security Numbers (SSNs) of 21.5 million individuals, was stolen from the …

Subjects: Cybercrime, Cybersecurity, E-Government, E-Records, Government Documents, Knowledge Management, Legal Research, Privacy