Accurate, Focused Research on Law, Technology and Knowledge Discovery With Daily Postings Since 2002
By Dan Mcwhorter on February 18, 2013 -“Today, The Mandiant® Intelligence Center™ released an unprecedented report exposing APT1′s multi-year, enterprise-scale computer espionage campaign. APT1 is one of dozens of threat groups Mandiant tracks around the world and we consider it to be one of the most prolific in terms of the sheer quantity of information it has stolen. Highlights …
News release: “When writing or speaking, good grammar helps people make themselves be understood. But when used to concoct a long computer password, grammar good or bad provides crucial hints that can help someone crack that password, researchers at Carnegie Mellon University have demonstrated. A team led by Ashwini Rao, a software engineering …
“This document contains proposed regulations that create a new taxpayer identifying number known as an IRS truncated taxpayer identification number, a TTIN. As an alternative to using a social security number (SSN), IRS individual taxpayer identification number (ITIN), or IRS adoption taxpayer identification number (ATIN), the filer of certain information returns may use a TTIN …
Monitoring Hacker Forums ADC Monthly Web Attacks Analysis, October 2012: “Imperva analyzed one of the largest-known hacker forums with roughly 250,000 members, as well as other smaller forums. Using search capabilities, we analyzed conversations by topic using specific keywords. We found: SQL injection is now tied with DDoS as the most discussed topic. Both topics …
“As part of nCircle’s commitment to improving Internet security, we asked some of the brightest minds in security to help us compile a list of security tips and tricks for a wide range of readers. The resulting eBook includes a wide range of topics from passwords and public Wi-Fi to Java configuration and sandboxing …
Mobile Device Location Data – Additional Federal Actions Could Help Protect Consumer Privacy, GAO-12-903, Sep 11, 2012 “Using several methods of varying precision, mobile industry companies collect location data and use or share that data to provide users with location-based services, offer improved services, and increase revenue through targeted advertising. Location-based services provide consumers access …
“The Department of Homeland Security (DHS) Control Systems Security Program manages and operates the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) to provide focused operational capabilities for defense of control system environments against emerging cyber threats…This report provides a summary of cyber incidents, onsite deployments, and associated findings from the time ICS-CERT was established …
“The Federal Trade Commission, the nation’s consumer protection agency, offers updated information explaining how to protect your child’s information and your own, and the immediate steps to take to limit the damage identity theft can cause. Taking Charge: What To Do If Your Identity Is Stolen is a step-by-step guide that includes sample letters, forms …
News release: “Check Point® Software Technologies Ltd…announced the results of a new ZoneAlarm report revealing differences in the use of computer security between Gen Y and Baby Boomers. The report, The Generation Gap in Computer Security, found that Gen Y is more confident in its security knowledge than Baby Boomers. However, 50 percent of Gen …
Google Online Security Blog: “Approximately 12-14 million Google Search queries per day show our warning to caution users from going to sites that are currently compromised. Once a site has been cleaned up, the warning is lifted.”
Follow up to June 6, 2012 posting, LinkedIn Member Passwords Compromised, this update via the LinkedIn Blog: An Update On Taking Steps To Protect Our Members, June 9, 2012: “…In this post, we want to address questions weve been receiving and share what weve learned so far about the incident, how weve responded, and what …
Vicente Silveira, June 6, 2012: “We want to provide you with an update on this mornings reports of stolen passwords. We can confirm that some of the passwords that were compromised correspond to LinkedIn accounts. We are continuing to investigate this situation and here is what we are pursuing as far as next steps for …
