What's New in Security News (July 2008)
Judge Orders Google to Turn Over YouTube Records
By Miguel Helft
A federal judge in New York has ordered Google to turn over to Viacom a database
linking users of YouTube, the Web’s largest video site by far, with every clip
they have watched there.
http://www.nytimes.com/2008/07/04/technology/04youtube.html?hp

Public institutions' Web sites target of cyber-attacks
By
The Yomiuri Shimbun
Since March, many Web sites of public institutions such as municipal governments
have been altered by cyber-attacks using the method called SQL injection, it has
been learned. The attacks are conducted ingeniously by hacking into the server
that manages the Web site and setting up a program that infects the site with
computer viruses.
http://www.yomiuri.co.jp/dy/national/20080702TDY03305.htm

June 2008
Hackers Hijack Sites of Internet Organizations
By
Stefanie Hoffman
Turkish hackers broke into two of the most established international Websites
that oversee and regulate the Internet in order to reroute visitors to a rogue
domain, the New York Times reported Friday.
http://www.crn.com/security/208801497

Cyber-terrorism legislation approved by State Senate
By Eric Gross
Legislation sponsored by State Senator Vincent Leibell that cracks down on
computer transgression by creating the new crimes of cyber-terrorism, computer
intrusion and the use of a minor in the commission of a computer offense has
been approved in the New York State Senate.
http://www.zwire.com

Lloyd's faces up to threat of e-crime
By Neon Kelly
The growing trend of organised gangs turning to e-crime has been confirmed by
Lloyd’s of London, whose networks have been bombarded by structured and
competent attacks.
http://www.whatpc.co.uk/computing/analysis/2219887/lloyd-faces-threat-crime

Congress Reaches Deal on Wiretapping Bill
By
Eric Lichtblau
After months of wrangling, Democratic and Republican leaders reached a deal
Thursday that would re-write the rules for the government’s wiretapping powers,
and would provide what amounts to limited immunity to the telephone companies
that took part in President Bush’s warrantless eavesdropping program after the
Sept. 11 attacks.
http://www.nytimes.com/2008/06/20/washington/20fisacnd.html?hp

Groups ask court to reverse ruling, limit laptop searches at border
By Gautham Nagesh
Two advocacy groups are pressing a federal appeals court to rule that government
officials at U.S. borders are not allowed to search, download or seize
information on travelers’ laptop computers without reasonable suspicion.
http://www.nextgov.com/nextgov/ng_20080613_2643.php?zone=itsecurity

Data breaches usually come from company soft spots, study finds
By
Joseph Menn
Most thefts of sensitive information from corporations occur when the victimized
companies don't know what data they have, where they have it or who has access
to it, according to a study released Wednesday by Verizon Communications Inc.
http://www.latimes.com/la-fi-breaches11-2008jun11,0,6127882.story

Cyber criminals overseas steal U.S. electronic health records
By Bob Brewin
In 2004, when Bush administration officials unveiled a project to provide every
American with an electronic health record by 2014, they pledged to put privacy
and security first. But the discovery in April of stolen health records
containing sensitive medical information about U.S. patients on a computer
server in Malaysia controlled by cyber criminals indicates such records so far
do not pass the privacy and security test.
http://www.nextgov.com/nextgov/ng_20080613_6536.php?zone=ngtoday

Security hole in software exposes world's utilities to Net attacks
By
Jordan Robertson
Attackers could gain control of water treatment plants, natural gas pipelines
and other critical utilities because of a vulnerability in the software that
runs some of those facilities, security researchers reported Wednesday.
http://www.usatoday.com

NJ congressman's computer hacked from China
By
Robert Cohen
A New Jersey congressman says he is one of at least three lawmakers whose
computers have been hacked from China, apparently in search of information about
political dissidents and human rights legislation.
http://www.nj.com/news/index.ssf/2008/06/nj_congressmans_computer_hacke.html

N.Y. attorney general forces ISPs to curb Usenet access
By Declan McCullagh
New York Attorney General Andrew Cuomo announced on Tuesday that Verizon
Communications, Time Warner Cable, and Sprint would "shut down major sources of
online child pornography."
http://news.cnet.com/8301-13578_3-9964895-38.html

The evolution of national security
By Andrew B. Einhorn
Last week, the White House issued a new directive providing instructions for
standardizing the methods employed by federal agencies to collect, maintain and
share biometric data such as fingerprints and other physiological or behavioral
characteristics of suspected terrorists.
http://ohmygov.com/blogs/general_news/archive/2008/06/10/white-house-issues-order-to-share-terrorist-biometric-data.aspx

Taking a byte into crime
By
Editorial Staff
From the beginning, we opposed creation of a KBI -- a Kentucky Bureau of
Investigation. We thought that, in the hands of the wrong attorney general, it
could become a political dark arts squad, assigned to partisan mischief. The
good news is that Kentucky's new attorney general, Jack Conway, has renamed the
thing and given it needed focus. It's now his Department of Criminal
Investigations, in which he has created a Cybercrimes Division to pursue
wrongdoers on the Internet, taking responsibility for evidence that is found in
computer and cell phone memory and helping parents protect youngsters from
Internet predators.
http://www.courier-journal.com/apps/pbcs.dll/article?AID=/20080610/OPINION01/806100348

NY Bank ‘loses’ 4.5M unencrypted customer records
By
Michael Krigsman
In yet another unbelievable story of data irresponsibility, the Bank of New York
(BNY) Mellon lost two sets of unencrypted backup tapes containing private data
belonging to 4.5 million individuals. Third-party vendors misplaced the tapes
during transport to off-site locations. According to the bank, the tapes
“included shareowner and plan participant account information, such as name,
mailing address, Social Security number, and transaction activity.”
http://blogs.zdnet.com/projectfailures/?p=603&tag=nl.e550

May 2008
Comcast.net site is hacked briefly
By Associated Press Staff
Hackers took over Comcast Corp.'s Web portal
for several hours overnight, denying 14.1 million subscribers access to the
cable company's site for e-mail, news and technical support.
http://www.chicagotribune.com/business/technology/sns-ap-tec-comcast-web-hack,0,3610680.story

Chinese hackers pose serious danger to U.S. computer networks
By Shane Harris
Computer hackers in China, including those
working on behalf of the Chinese government and military, have penetrated deeply
into the information systems of U.S. companies and government agencies, stolen
proprietary information from American executives in advance of their business
meetings in China, and, in a few cases, gained access to electric power plants
in the United States, possibly triggering two recent and widespread blackouts in
Florida and the Northeast, according to U.S. government officials and
computer-security experts.
http://www.govexec.com/story_page.cfm?articleid=40112&dcn=e_gvet

Cyber Terrorism Threat Growing, EU Agency Says
By Jennifer LeClaire
The threat of cyber terrorism is growing, the
European Network and Information Security Agency has warned. ENISA urged more
European Union investments in security to avoid a "digital 9/11." Andrea Pirotti,
executive director of ENISA, urged the EU to require reporting on security
breaches and more cooperation among member states.
http://www.newsfactor.com/news/EU-Warned-of-Growing-Cyber-Threat/story.xhtml?story_id=1230048OPVML

Hackers make way for criminals in cyberspace
By Huw Jones
Attacking the European Union's Internet
backbone is now the preserve of organised crime, not young hackers out to prove
a point, the head of the bloc's Web security body said on Tuesday. Andrea
Pirotti, executive director of the European Network and Information Security
Agency (ENISA), said public authorities have been able to hold their own in the
contest -- so far.
http://www.guardian.co.uk/business/feedarticle/7542606

FBI releases details of expansive data-sharing program
By Andrew Noyes
The FBI released details this week about a
little-known information-sharing initiative known as N-DEx, or the Law
Enforcement National Data Exchange, which lets agents search and analyze crime
data on a secure Web site to help connect the dots between people, places and
events.
http://www.govexec.com/story_page.cfm?articleid=39839&sid=60

Homeland Security, FBI must reveal whether detained travelers are on watch list,
court order says
By Antonio Olivo
After years of being detained and interrogated
for hours by federal agents each time he returned from a trip abroad, Chicago
entrepreneur Akif Rahman could finally know whether his name is on a government
watch list for suspected terrorists, his attorneys said Wednesday.
http://www.chicagotribune.com/news/local/chi-watchlist-24-apr24,0,7847146.story

Home Office plans to create 'Big brother' database for phones calls, emails and
web use
By Andy Bloxham
The Home Office will create a database to
store the details of every phone call made, every email sent and every web page
visited by British citizens in the previous year under plans currently under
discussion, it has emerged. The Government wants to create the system to fight
terrorism and crime. The police and security services believe it will make it
easier to access important data as communications become more complex.
http://www.telegraph.co.uk

Analysis: Feds bust Romanian cyber-ring
By Shaun Waterman
U.S. indictments unsealed this week charge 38
people with being part of a multinational cybercrime ring that fooled thousands
of Americans into giving up credit card and bank information through spam "phishing"
e-mails and used it to steal millions of dollars.
http://www.upi.com

ID-protection ads come back to bite pitchman
By Associated Press Staff
Todd Davis has dared criminals for two years
to try stealing his identity: Ads for his fraud-prevention company, LifeLock,
even offer his Social Security number next to his smiling mug. Now, Lifelock
customers in Maryland, New Jersey and West Virginia are suing Davis, claiming
his service didn't work as promised and he knew it wouldn't, because the service
had failed even him.
http://www.mercurynews.com/ci_9343471?source=rss

US Air Force Prepares for Cyber Warfare
By Will Spencer
The Air Force has begun intensive research and
development to create cyber warfare tools. An announcement was placed in the
government website soliciting ideas for business opportunities. The solicitation
notice was released as the Dominant Cyber Offensive Engagement and Supporting
Technology effort by the Air Force Research Library.
http://www.americanchronicle.com/articles/62296

Routine conduct at risk with MySpace suicide case
By Anick Jesdanun
Think twice before you sign up for an online
service using a fake name or e-mail address. You could be committing a federal
crime. Federal prosecutors turned to a novel interpretation of computer hacking
law to indict a Missouri mother on charges connected to the suicide of a
13-year-old MySpace user. Prosecutors alleged that by helping create a MySpace
account in the name of someone who didn't exist, Lori Drew, 49, violated the
News Corp.-owned site's terms of service and thus illegally accessed protected
computers.
http://www.physorg.com/news130180938.html

Woman indicted in fatal cyber-bully case
By Dan Whitcomb
A Missouri woman who prosecutors say used a
fake MySpace persona to "torment, harass, humiliate and embarrass" a 13-year-old
girl who committed suicide was indicted on Thursday on federal charges.
http://www.reuters.com/article/domesticNews/idUSN1531758020080515

Internet fuels emergence of violent Islamist groups in the United States
By Katherine McIntire Peters
The violent Islamist terrorist threat has
evolved and expanded since al Qaeda planned the Sept. 11, 2001, terrorist
attacks, and radicalization of disaffected Muslims and recent converts to Islam
is increasingly occurring here in the United States. Yet the federal government
has "no cohesive and comprehensive outreach and communications strategy in place
to confront this thread." Those are among the findings of a new report by the
staff of the Senate Homeland Security and Governmental Affairs Committee.
http://www.govexec.com/story_page.cfm?articleid=39998&dcn=e_gvet

Criminals try to 'copyright' malware
By Jordan Robertson
Even criminal hackers want to protect their
intellectual property, and they've come up with a method akin to copyrighting —
with an appropriate dash of Internet thuggery thrown in. Professional virus
writers are now selling a suite of software on the Internet with an unusual
attachment: a detailed licensing agreement that promises penalties for
redistributing the malicious code without permission.
http://www.usatoday.com/tech/news/computersecurity/2008-04-30-criminals-malware_N.htm

April 2008
The Art of Cyber Warfare, Part 1: The Digital Battlefield
By Jack M. Germain
Computer network attacks are often perpetrated
by gangs of criminal hackers attempting to break into a system for financial
gain. However, cyber attacks for political purposes could just as easily be --
and sometimes are -- perpetrated. A country's national security could be
severely threatened should a team of hackers successfully crack certain computer
systems.
http://www.technewsworld.com/story/The-Art-of-Cyber-Warfare-Part-1-The-Digital-Battlefield-62779.html#

German intel agency blasted for cyber espionage
By Robert Lemos
Eight months after the nation's chancellor
accused China of information attacks, Germany now faces criticism over its
intelligence agency's use of software designed to spy on other countries'
officials.
http://www.securityfocus.com/brief/730

Agencies getting serious about virtual worlds
By Anne Laurent
The National Defense University is building a
600-seat auditorium above an island in a virtual world. Ten days ago, the Air
Force put out a call to gauge companies’ interest in prototyping a virtual base.
The Transportation Department has constructed a synthetic world with IBM. Last
year, the State Department held an eight-hour jazz fest for 300 avatars and
chatted in Second Life with 20 others from Canada and Poland about student
visas.
http://www.nextgov.com/nextgov/ng_20080428_3630.php?zone=ngtoday

Radio Free Europe says it’s under cyber attack
By Associated Press
Several Web sites of the U.S.-funded Radio
Free Europe/Radio Liberty have been attacked, the broadcaster said today,
suggesting the Belarus government could be responsible. In the form of a
denial-of-service attack that floods servers with fake traffic so legitimate
visitors cannot get through, the assault began Saturday and continues, the
network said in a statement.
http://www.bostonherald.com/news/international/europe/view.bg?articleid=1090260&srvc=rss

FBI releases details of expansive data-sharing program
By Andrew Noyes
The FBI released details this week about a
little-known information-sharing initiative known as N-DEx, or the Law
Enforcement National Data Exchange, which lets agents search and analyze crime
data on a secure Web site to help connect the dots between people, places and
events.
http://www.govexec.com/story_page.cfm?articleid=39839&dcn=e_gvet

Malicious microprocessor opens new doors for attack
By Robert McMillan
Researchers have found a difficult but viable
method for hacking a PC's microprocessor -- an attack that would be devastating
and virtually undetectable. For years, hackers have focused on finding bugs in
computer software that give them unauthorized access to computer systems, but
now there's another way to break in: Hack the microprocessor.
http://www.infoworld.com/article/08/04/15/Malicious-microprocessor-opens-new-doors-for-attack_1.html

Europe facing radicalization over the Web
By Olivier Guitta
Bernard Squarcini the head of the DST
(Direction de la Surveillance du Territoire), the French equivalent of the FBI,
told the French daily Libération regarding Islamic radicalization: "An
ideological transformation can be done in three months on the Web. An individual
can at night auto-radicalize himself via the Web and get in touch with leaders
of terrorist organizations." This assessment shows how dire the situation is in
Europe when it comes to al-Qaida's use of the Web.
http://www.metimes.com/International/2008/04/20/europe_facing_radicalization_over_the_web/5616/

Unwittingly hosting terror
By Brian Grow, Keith Epstein and Chi-Chu
Tschang
For more than a year, a Burlington-based
Internet company hosted a website that taught its members how to outfit a
suicide bomber, aired Al Qaeda propaganda videos, and offered an "exclusive"
Taliban video showing the beheadings of three "spies," according to computer
records.
http://www.boston.com/news/nation/articles/2008/03/27/unwittingly_hosting_terror/

The New E-spionage Threat
By Brian Grow, Keith Epstein and Chi-Chu
Tschang
A BusinessWeek probe of rising attacks on
America's most sensitive computer networks uncovers startling security gaps.
The e-mail message addressed to a Booz Allen Hamilton executive was mundane—a
shopping list sent over by the Pentagon of weaponry India wanted to buy. But the
missive turned out to be a brilliant fake. Lurking beneath the description of
aircraft, engines, and radar equipment was an insidious piece of computer code
known as "Poison Ivy" designed to suck sensitive data out of the $4 billion
consulting firm's computer network.
http://www.businessweek.com/print/magazine/content/08_16/b4080032218430.htm

FBI Data Transfers Via Telecoms Questioned
By Ellen Nakashima
When FBI investigators probing New York
prostitution rings, Boston organized crime or potential terrorist plots anywhere
want access to a suspect's telephone contacts, technicians at a
telecommunications carrier served with a government order can, with the click of
a mouse, instantly transfer key data along a computer circuit to an FBI
technology office in Quantico.
http://www.washingtonpost.com/wp-dyn/content/article/2008/04/07/AR2008040702364.html?hpid=moreheadlines

Army urged to develop process to wage war in cyberspace
By Greg Grant
With wars increasingly fought among the
people, information is now an element of combat power as important as lethal
action in determining a conflict's eventual outcome, said an Army officer who
heads the services computer warfare efforts.
http://www.govexec.com/story_page.cfm?articleid=39733&dcn=e_gvet

Commercial Espionage: Travelers Beware
By Scott Louis Weber
We are addicted to information and cannot go
long without being "connected." Indeed, while you are reading this article you
will likely check your e-mail or instant message a friend or colleague.
Traveling with technology is commonplace. Whether we are on the move for
business or pleasure, technology allows us to remain in communication with our
personal and business lives, 24/7, without any travel interruptions. But look
out. All this can be just fodder for spies.
http://www.forbes.com/opinions/2008/04/08/viator-corporate-espionage-oped-cx_slw_0408viator.html

Nato creates cyber-defence command
By Nick Heath
Nato is creating a cyber-defence command to
protect its allies against crippling online attacks on national infrastructures.
The Cyber Defence Management Authority (CDMA) will co-ordinate cyber-defence
among Nato allies after its formation was backed by members at a Nato summit in
Bucharest last week.
http://news.zdnet.co.uk/security/0,1000000189,39382597,00.htm

Zombie Computers Decried As Imminent National Threat
By Ryan Singel
Across the world, thousands of home computers
have been conscripted into zombie computer gangs that cyber criminals use to
spam, attack and defraud others on the net, causing considerable consternation
to law enforcement and security professionals alike, who count the so-called
botnets as the most vexing net threat today.
http://blog.wired.com/27bstroke6/2008/04/zombie-computer.html

Congress to industry: 'We need your help'
By William Jackson
Making national cybersecurity policy is an
always difficult and often thankless task, the director of a House subcommittee
told an audience Wednesday at the RSA Security conference. “One of the things
that make cybersecurity difficult is that there are a lot of mixed messages out
there,” said Jacob Olcott of the House Homeland Security Subcommittee on
Emerging Threats, Cyber Security, and Science and Technology. Some see the
threat of cyberterrorism as a reality, and others think dire pronouncements are
overblown. “There is a lot of disagreement about what, exactly, we’re dealing
with.”
http://www.gcn.com/online/vol1_no1/46086-1.html

US Cyberwarfare Prep Includes Offense
By Anick Jesdanun
U.S. military officials seeking to boost the
nation's cyberwarfare capabilities are looking beyond defending the Internet:
They are developing ways to launch virtual attacks on enemies. But first the
military will have to figure out the proper boundaries.
http://www.wtopnews.com/?nid=108&sid=1381656

March 2008
EU Debates Cybercrime Law Enforcement
By Jan Sliva
Two groups working separately to boost
Europe's defenses against online crime will present proposals this week, almost
a year after most of the nation of Estonia's links to the Internet were
disrupted for days or weeks.
http://www.physorg.com/news126199429.html

Mukasey: piracy funding terror
By Jordon Robertson
Attorney General Michael Mukasey warned Friday
that the huge profits generated from piracy and counterfeiting are increasingly
flowing into the coffers of terrorist groups.
http://www.thestate.com/technology-wire/story/359147.html

Cyberterrorism, hacktivism: Trying to find hope
By Scott Stewart
Watching the behavior of countries like China
and the United States underscores one of the most important insights you can
have into geopolitics: Essentially, the world community is in anarchy. The world
stage is in a Hobbesian state of nature; there are no rules for those with
enough strength or influence to avoid them.
http://media.www.unogateway.com

Hannaford breach raises new fears
By Clarke Canfield and Brian Bergstein
At first, it sounded like another in a long
line of credit card breaches: Up to 4.2 million account numbers were stolen by
thieves who cracked computers at Hannaford Bros. Co., an Eastern supermarket
chain. But the specifics of the crime, revealed this week, included some
troubling twists that might expose big holes in the payment industry's security
standards.
http://www.denverpost.com/nationworld/ci_8640617

Military to Boost Cyber-Protections
By Lolita Baldor
The military is beefing up efforts to gather
intelligence, fend off cyber-attacks and improve relations with other nations as
part of a strategy for keeping the U.S. safe while fighting two wars, according
to a Pentagon document.
http://www.gopusa.com/news/2008/march/0319_military_cyber1.shtml

Some Viruses Come Pre-Installed
By Jordan Robertson
From iPods to navigation systems, some of
today's hottest gadgets are landing on store shelves with some unwanted extras
from the factory - pre-installed viruses that steal passwords, open doors for
hackers and make computers spew spam.
http://www.physorg.com/news124646014.html

Online Terrorism is Global Concern
By Mandy Clark
While people work hard on their computers - so
too do the Internet viruses or malicious software known as malware. Cyber
experts say hundreds of thousands of them bombard personal computers every day.
Far from being a mere nuisance, these bugs threaten modern life.
http://www.voanews.com/english/2008-03-13-voa17.cfm

NSA's Domestic Spying Grows As Agency Sweeps Up Data
By Siobhan Gorman
Five years ago, Congress killed an
experimental Pentagon antiterrorism program meant to vacuum up electronic data
about people in the U.S. to search for suspicious patterns. Opponents called it
too broad an intrusion on Americans' privacy, even after the Sept. 11 terrorist
attacks.
http://online.wsj.com/public/article/SB120511973377523845.html?mod=blog

U.S. unprepared for ongoing cyberwar, say top military and intelligence
officials
By Bob Brewin
The United States is in the midst of a
cyberwar and is not prepared to deal with it, top Defense Department and
intelligence officials acknowledged this week.
http://www.govexec.com/story_page.cfm?articleid=39466&dcn=todaysnews

Windows Hacked in Seconds Via Firewire
By Matthew Broersma
A New Zealand security researcher has
published a software tool allowing attackers to quickly gain access to Windows
systems via a Firewire port.
http://computerworld.co.nz/news.nsf/scrt/939892823D52DE75CC25740300048AD0

OMB reports 60 percent increase in information security incidents
By Jill R. Aitoro
The number of information security incidents
reported by federal agencies jumped from 5,146 in fiscal 2006 to 12,986 last
year, with a 70 percent increase in unauthorized access to federal networks
alone, according to a report from the Office of Management released Saturday.
http://www.govexec.com/story_page.cfm?articleid=39425&dcn=e_nextgov

February 2008
Why no united front on cyber crime? Divided we fall…
By Simon Moores
The internet is certainly not safe. The
statistics may show the risk of crime is decreasing in some areas because of new
technical measures and policies. But elsewhere, under the extreme pressures of
criminal interests, new leaks are appearing in the collective firewall. They may
become a flood if not tackled quickly. That growing influence of serious and
organised crime in cyberspace is the focus of representatives from business,
finance, government and law enforcement agencies at next week's sixth
international e-Crime Congress in London.
http://management.silicon.com/government/0,39024677,39170197,00.htm

German court limits cyber spying
By Staff Reporter
Germany's highest court has restricted the
right of the security services to spy on the computers of suspected criminals
and terrorists.
http://news.bbc.co.uk/1/hi/world/europe/7266543.stm

Report: Agencies lack identity theft protections even after lapses
By Frederic J. Frommer
Nearly two years after an embarrassing flap in
which veterans' personal information was put at risk of identity theft, federal
agencies are still not doing all they can to prevent further lapses,
investigators have found.
http://www.govexec.com/story_page.cfm?articleid=39347&sid=1

Government still suffers from information insecurity
By Jill R. Aitoro
Federal agencies continue to struggle with
information security, according to a new report from the Government
Accountability Office. Weak access controls, network device configuration, and
management procedures leave systems vulnerable to malicious attacks and data at
risk of exposure.
http://www.govexec.com/story_page.cfm?articleid=39314&dcn=e_gvet

Cyberterrorism, Inc
By Peter Buxbaum
A new report says that 2008 will see an
expansion of economic espionage in which nation-states and companies will use
cybertheft of data to gain economic advantage in multinational deals.
http://www.speroforum.com/site/article.asp?id=14354&tag=

Combating Enemies Online
By James Jay Carafano and Richard Weitz
Even before the terrorist attacks of September
11, 2001, security experts were becoming increasingly concerned about the
vulnerability of U.S. computer systems and associated infrastructure. The 9/11
attacks amplified these concerns.
http://frontpagemagazine.com/Articles/Read.aspx?GUID=4FC31039-5A9C-4ADC-97EB-583829145052

Microsoft Helps Nab $900M Piracy Ring
By Jessica Mintz
Near-perfect knockoffs of 21 different
Microsoft programs began surfacing around the world just over a decade ago.
Soon, PCs in more than a dozen countries were running illegal copies of Windows
and Office, turning unwitting consumers into criminals and, Microsoft says,
exposing them to increased risk of malicious viruses and spyware.
http://www.examiner.com/a-1208462~Microsoft_Helps_Nab__900M_Piracy_Ring.html?cid=sec-promo

Bush administration proposes $7.3 billion for IT security
By Jill R. Aitoro
President Bush's proposed budget for fiscal
2009 includes $7.3 billion for cybersecurity efforts -- a 9.8 percent increase
from last year and a 73 percent increase from fiscal 2004.
http://www.govexec.com/story_page.cfm?articleid=39252&dcn=e_nextgov

U.S. Intelligence Uncovers ‘Russian Threat’
By Dmitry Sidorov
U.S. Congress held annual hearings on security
issues, based on the report by National Intelligence Director Michael McConnell.
Along with al-Qaeda, Iraq, and Iran, U.S. intelligence officials listed Russia
and China among the outer threats. Moscow and Beijing are charged with using
their growing economic influence in the world for advancing their own political
goals, and with cyber-terrorism.
http://www.kommersant.com/p850125/r_527/U.S._spy_chiefs_list_Russia_among_threats/

January 2008
Swedish Bank Stops Digital Theft
By Staff Reporter
A gang of Swedish criminals was seconds away
from completing a digital bank heist when an alert employee literally pulled the
plug on their brazen scam, investigators said Wednesday. The would be bank
robbers had placed "advanced technical equipment" under the employee's desk that
allowed them to take control of his computer remotely, prosecutor Thomas Balter
Nordenman said in a statement.
http://www.newsvine.com/_news/2008/01/30/1265825-swedish-bank-stops-digital-theft

Bush To Request $6 Billion to Combat Cyber-Terrorism
By Tim Stevens
Just last week it was revealed that the group
that perpetrated the cyber-attacks on Estonian networks, escalating the already
high tension between that nation and its neighbor Russia, wasn't really a group
at all. It was a 20-year-old hacker from within Estonia itself. That revelation
was a bit of a wake-up call for the global community -- that a strong-minded
individual could create an international incident without much trouble.
President Bush seems to have been paying attention and is reportedly ready to
propose a $6 billion project to create some sort of National Security Agency for
American networks.
http://www.switched.com/2008/01/29/bush-wants-6-billion-for-cyberterrorism-protection/

Half Million Computers Infected by Bots Every Day
By Staff Reporter
Every day, some half a million computers are
infected by bots, according to data compiled by PandaLabs in its annual report
on malware activity in 2007. Bots are programs that operate as agents for a user
or another program to simulate human activity, and malicious bots can take
complete control of the infected system. Once they have control over several
hundred computers, cyber-criminals can connect them to create botnets.
http://www.govtech.com/gt/252775?topic=117671

Bush Order Expands Network Monitoring
By Ellen Nakashima
President Bush signed a directive this month
that expands the intelligence community's role in monitoring Internet traffic to
protect against a rising number of attacks on federal agencies' computer
systems.
http://www.washingtonpost.com/wp-dyn/content/article/2008/01/25/AR2008012503261.html?hpid=moreheadlines

Free Encryption Tool for Al Qaeda Supporters Gets an Upgrade
By Kelly Jackson Higgins
A Website frequented by al Qaeda supporters
has released an upgrade to an encryption software tool for Islamic militants to
communicate more privately and securely over the Internet -- with a stronger
form of encryption, according to a Reuters report.
http://www.darkreading.com/document.asp?doc_id=143780

CIA Says Hackers Have Cut Power Grid
By Robert McMillan
Criminals have been able to hack into computer
systems via the Internet and cut power to several cities, a U.S. Central
Intelligence Agency analyst said this week.
http://www.pcworld.com/article/id,141564-c,hackers/article.html

Hack Attack Hits 10,000 Web Sites
By Gregg Keizer
A large-scale hack of legitimate Web sites to
infect visitors' PCs is much more massive than first thought, researchers said
Friday. At least 10,000 sites have been compromised, and have hijacked unpatched
systems that steered to their URLs.
http://www.pcworld.com/article/id,141544-page,1/article.html

Al Qaeda Claims Its Space On The Web
By Staff Reporter
The internet has long been an al Qaeda
stronghold - a center for raising money and spreading propaganda. A record 97
messages were posted in 2007. But now, the cyber world has also largely replaced
conventional training camps and has become the primary location where Islamic
radicals are recruited, trained and sent on their way to carry out attacks.
http://www.cbsnews.com/stories/2008/01/17/eveningnews/main3725693.shtml

FBI wants instant access to British identity data
By Owen Bowcott
Senior British police officials are talking to
the FBI about an international database to hunt for major criminals and
terrorists. The US-initiated programme, "Server in the Sky", would take
cooperation between the police forces way beyond the current faxing of
fingerprints across the Atlantic. Allies in the "war against terror" - the US,
UK, Australia, Canada and New Zealand - have formed a working group, the
International Information Consortium, to plan their strategy.
http://www.guardian.co.uk/humanrights/story/0,,2241005,00.html

US drafting plan to allow government access to any email or Web search
By Staff Reporter
National Intelligence Director Mike McConnell
is drawing up plans for cyberspace spying that would make the current debate on
warrantless wiretaps look like a "walk in the park," according to an interview
published in the New Yorker's print edition today.
http://rawstory.com//printstory.php?story=8868

Al-Qaeda’s 007
By Gordon Corera
The extraordinary story of the solitary
computer geek in a Shepherds Bush bedsit who became the world’s most wanted
cyber-jihadist.
http://women.timesonline.co.uk/tol/life_and_style/women/the_way_we_live/article3191517.ece

One Way to Stop Exposing SSNs
By Allan Holmes
A Wisconsin government agency, like some
companies, federal agencies and other organizations, has decided that the way to
avoid accidentally exposing Social Security Numbers is to, well, not use them at
all to identify citizens. The state's Department of Health and Family Services,
which administers the state's Medicaid program, said this week that it would
randomly generate ID numbers for the state's 800,000 Medicaid recipients instead
of using their Social Security Number. The announcement immediately follows an
incident in which EDS, which holds the contract to process the state's Medicaid
claims, accidentally printed and mailed the Social Security Numbers of Wisconsin
Medicaid recipients on newsletters. Another Wisconsin agency made a similar
mistake last year.
http://blogs.govexec.com/techinsider/archives/2008/01/one_way_to_stop_exposing_ssns.php

Calif. Expands Privacy Protections; U.S. Sits By
By Allan Holmes
California has led the nation in passing laws
to protect private data, and it continues to hold true to the role. This past
Tuesday, a California law went into effect expanding the state's groundbreaking
security breach notification law, the nation's first law requiring companies to
notify customers if a cyberattack exposes personal financial information.
http://blogs.govexec.com/techinsider/archives/2008/01/calif_expands_privacy_protecti.php

Nato secrets USB stick lost in Swedish library
By Jan Libbenga
The discovery of a USB memory stick containing
classified NATO information in a library in Stockholm has prompted a meeting
between the Swedish Military Intelligence and Security Service and foreign
defence officials.
http://www.theregister.co.uk/2008/01/04/another_stick_with_military_secrets_found/

Missing computer has info on 10,500 airmen
By Erik Holmes
A laptop computer with personal information of
10,501 active-duty and retired airmen is missing from Bolling Air Force Base in
Washington, an Air Force official confirmed Wednesday.
http://www.airforcetimes.com/news/2008/01/airforce_missing_computer_080102/

Hackers From China Force Pa. To Shut Down State Web Site
By Staff Reporter
HARRISBURG, Pa. -- Pennsylvania's state
government Web site was almost completely shut down Friday after it was
infiltrated by hackers from China, but officials said they found no evidence of
damage. Four departments had security problems with their Web pages, leading to
a decision to take nearly all of the state's Internet site down on Friday
morning. Office of Administration spokeswoman Mia DeVane said there was no
reason to think anyone's personal data had been compromised or that any damage
occurred when a hacker "got into what we would say is a back door."
http://www.nbc10.com/technology/14982217/detail.html?rss=phi&psp=news

If Your Hard Drive Could Testify ...
By Adam Liptak
A couple of years ago, Michael T. Arnold
landed at the Los Angeles International Airport after a 20-hour flight from the
Philippines. He had his laptop with him, and a customs officer took a look at
what was on his hard drive. Clicking on folders called “Kodak pictures” and
“Kodak memories,” the officer found child pornography.
http://www.nytimes.com

IRS incorrectly claimed security issues had been corrected
By Jill R. Aitoro
In addition to addressing less than 30 percent
of the information security weaknesses highlighted in a 2007 Government
Accountability Office report, the Internal Revenue Service provided false claims
about its progress, according to a Government Accountability Office auditor.
http://www.govexec.com/story_page.cfm?articleid=38990&dcn=e_gvet

FAA warns of Boeing 787 hacker vulnerability
By Paul Miller
Boeing's still in the final stages of
production on its 787 Dreamliner mid-sized jet, but the FAA has already spotted
what looks to be a serious security vulnerability in the plane's IT
infrastructure. Apparently the computers that provide the 787's passenger area
with in-flight internet access and other amenities are physically networked with
the main plane computers, including control, navigation and communication
systems, which could theoretically provide a path for a hacker to screw with the
plane, and even go as far as take full control of the 787.
http://www.engadget.com/2008/01/06/faa-warns-of-boeing-787-hacker-vulnerability/

December 2007
Groups: Record data breaches in 2007
By Mark Jewell
The loss or theft of personal data such as
credit card and Social Security numbers soared to unprecedented levels in 2007,
and the trend isn't expected to turn around anytime soon as hackers stay a step
ahead of security and laptops disappear with sensitive information.
http://www.businessweek.com/ap/financialnews/D8TRVTIO0.htm

Satellite-Surveillance Plan Aims to Mollify Critics
By Siobhan Gorman
After delaying a domestic
satellite-surveillance program for more than two months, Homeland Security
Secretary Michael Chertoff expects to finalize a new charter for it this week, a
move that attempts to quell civil-liberties concerns and get the program back on
track.
http://online.wsj.com/article/SB119812248622741723.html?mod=hps_us_whats_news

Hackers Use Stealthy, New Prg Banking Trojan to Attack Commercial Banking
Clients in Four Countries - Hackers Break Into Accounts without
Username/Passwords
By Don Jackson
SecureWorks has discovered a stealthy, new Prg
Banking Trojan. This new variant is the malware behind Zbot, a new botnet
designed specifically to do banking fraud. The hackers using this new malware
are specifically targeting banking clients that have commercial accounts. The
banking variant has been designed and is being used by the Russian UpLevel
hacking group and some German affiliates. The UpLevel hackers are staging their
latest attacks using data centers in Moscow, Russia, and Mumbai, India.
http://www.secureworks.com/research/threats/bankingprg/?threat=bankingprg

Israel used cyberwar against Syria
By Staff Reporter
The Israeli military used cyberwar techniques
to help blind Syrian air defenses prior to its strike on an alleged nuclear
facility at Dayr az-Zawr.
http://www.upi.com

NASA will check backgrounds despite criticism
By Aliya Sternstein
NASA is going forward with what some are
calling "invasive" background checks at all but one of its field centers despite
ongoing litigation to end the process at that facility, NASA officials said
Thursday.
http://www.govexec.com/story_page.cfm?articleid=38776&dcn=e_gvet

Hackers Launch Major Attack on US Military Labs
By John E. Dunn
Hackers have succeeded in breaking into the
computer systems of two of the U.S.' most important science labs, the Oak Ridge
National Laboratory (ORNL) in Tennessee and Los Alamos National Laboratory in
New Mexico.
http://www.pcworld.com/article/id,140390-c,hackers/article.html

Air Force moving ahead with Cyber Command
By Gautham Nagesh
The Air Force is moving ahead on establishing
its new Cyber Command, searching for permanent facilities and planning meetings
to establish rules by which it will operate, according to Air Force officials.
http://www.govexec.com/dailyfed/1207/120707n1.htm

Despite controversy, DHS continues use of data mining
By Alice Lipowicz
Although the Homeland Security Department
terminated a controversial visual analytics data mining program this summer, it
continues to engage in visual analytics research in a separate program, a
spokeswoman confirmed. The ongoing visual analytics research at the Science and
Technology Directorate is being publicized as a means of eventually identifying
terrorists through potential use of data collected from video surveillance
footage, cell phone calls, photos, bank records, chat rooms and e-mails. But no
real-world, operational data is actually being used in the research, said DHS
spokeswoman Amy Kudwa.
http://www.gcn.com/online/vol1_no1/45491-1.html?topic=homeland-security

Passport applicant finds massive privacy breach
By Kenyon Wallace
A security flaw in Passport Canada's website
has allowed easy access to the personal information - including social insurance
numbers, dates of birth and driver's licence numbers - of people applying for
new passports.
http://www.theglobeandmail.com

DHS launches pilot to integrate fingerprint databases with FBI
By Jill R. Aitoro
The Homeland Security Department began this
week testing a fingerprint scanning application in certain airports so it can
tap into an FBI database to identify more accurately whether visiting foreigners
may be criminals, illegal immigrants or terrorists.
http://www.govexec.com/story_page.cfm?articleid=38755&dcn=e_gvet

Chinese Hackers Accused of Attacking Shell, Rolls Royce
By Jeremy Kirk
Britain's domestic intelligence agency is
warning that cybercrime perpetrated by China is on the rise following hacking
attacks against Rolls-Royce and Royal Dutch Shell.
http://www.pcworld.com/article/id,140221-c,hackers/article.html

Government 'failing on e-crime'
By Rory Cellan-Jones
Responsibility for investigating e-crime is
split between agencies. IT chiefs at some of the UK's biggest companies have
accused the government of failing to take e-crime seriously.
http://news.bbc.co.uk/2/hi/technology/7128491.stm

Al Qaeda-linked Web sites number 5,600: researcher
By Ibtihal Hassan
RIYADH (Reuters) - There are now about 5,600
Web sites spreading al Qaeda's ideology worldwide, and 900 more are appearing
each year, a Saudi researcher told a national security conference on Tuesday.
Saudi Arabia, the world's biggest oil exporter, has identified the Internet as a
key battlefield with militants who launched a campaign to topple the U.S.-allied
ruling royal family in 2003.
http://www.reuters.com/article/topNews/idUSL0488465620071204?feedType=RSS&feedName=topNews&sp=true

The Trojans are inside the computer gates
By Michael Evans
The golden rule in the counter-espionage
business is that when your “enemies” get more sophisticated you have to keep one
step ahead of them, particularly when the threat is an electronic one. The
Chinese and Russians have now become so adept at hacking into computer systems
that MI5 has had to issue a general warning to all government departments and
defence companies to take extra precautions to protect their most sensitive
information.
http://www.timesonline.co.uk/tol/news/politics/article2980544.ece

November
Hacker threat to U.S. rising
By Dave Montgomery
While U.S. forces in Iraq and Afghanistan
engage the enemy with guns, tanks, airplanes and missiles, the American military
is quietly fighting a much different kind of war on a new front – cyberspace.
http://www.sacbee.com/111/story/520067.html

U.K. rocked by loss of 25m records
By Joab Jackson
U.S. agency officials stung by data loss can
take some solace in the fact that the United States isn’t the only country
struggling with data security issues. A U.K. finance head admitted last week
that Her Majesty's Revenue and Customs department (HMRC) lost 25 million records
with personal information.
http://www.gcn.com/online/vol1_no1/45464-1.html

Cyber wars and the West
By Staff Reporter
In the spring of 2005, Mirsad Bektasevic and
Cesur Abdulkadir shared a small apartment in Sarajevo. They watched with dismay
as Western television networks gave their take on the wars in Iraq and
Afghanistan. They grew enraged. And they vowed to strike back.
http://www.cbc.ca/news/viewpoint/vp_gillespie/2007/11/cyber_wars_and_the_west_1.html

Militants refine web tactics
By Staff Reporter
Islamist militants are becoming more skilled
at tailoring their message to specific audiences, including women and children,
and Western societies are struggling to find a response. That was the message
from a meeting hosted by the Organisation for Security and Cooperation in Europe
(OSCE) this week, attended by leading experts on Islamist radicalisation.
http://www.stuff.co.nz/stuff/4280823a28.html

States clammed up after 9/11
By John Gramlich
The 2001 terrorist attacks led every state but
South Dakota to restrict access to information deemed critical to homeland
security — from architectural blueprints to emergency evacuation routes,
according to a comprehensive, state-by-state study of post-9/11 changes to
open-government laws.
http://www.stateline.org/live/details/story?contentId=258013

Bureau warns on tainted discs
By Yang Kuo-wen, Lin Ching-chuan and Rich
Chang
Portable hard discs sold locally and produced
by US disk-drive manufacturer Seagate Technology have been found to carry Trojan
horse viruses that automatically upload to Beijing Web sites anything the
computer user saves on the hard disc, the Investigation Bureau said. Around
1,800 of the portable Maxtor hard discs, produced in Thailand, carried two
Trojan horse viruses: autorun.inf and ghost.pif, the bureau under the Ministry
of Justice said.
http://www.taipeitimes.com/News/taiwan/archives/2007/11/11/2003387202

EU justice ministers agree limited data protection rules (Roundup)
By Staff Reporter
Brussels - European Union justice ministers
Friday agreed on a minimum set of rules protecting the cross-border exchange of
personal data by law-enforcement agencies in the 27 member states.
http://news.monstersandcritics.com/

Alicia Keys' MySpace Page Sings with Malicious Code
By Steven Schwankert
When a visitor views the page, an exploit
first attempts to install malware on the visitor's computer if it is not
properly patched. Thompson said he was not sure yet which flaw the malware was
looking to exploit. If that is not successful, the user is then asked to install
a fake codec to view a video.
http://www.pcworld.com/article/id,139472-c,hackers/article.html

Intelligence community developing virtual world analysis tools
By Mark Mazzetti
The Intelligence Advanced Research Projects
Activity project is directed by Jeffery Morrison, who runs the Analyst Space for
Exploitation (A-SpaceX) program. Morrison says his project is designed to
harness technologies to help the 15 agencies that report to the Office of the
Director of National Intelligence to change from a "need to know" culture to a
"need to share" culture.
http://www.govexec.com/story_page.cfm?articleid=38498&dcn=todaysnews

October
$43.5 Billion Spying Budget for Year, Not Including Military
By Mark Mazzetti
Congress authorized spending of $43.5 billion
over the past year to operate spy satellites, remote surveillance stations and
C.I.A. outposts overseas, according to a budget figure released Tuesday by Mike
McConnell, director of national intelligence.
http://www.nytimes.com/2007/10/31/washington/31intel.html?_r=1&oref=slogin

Austria plans to start conducting secret online searches in 2008
By Staff Reporter
It is planned that the police will use online
searches in Austria from autumn 2008 onwards. According to a report of the radio
station Ö1, the Minister of Justice, Maria Berger (SPÖ) [Social Democratic Party
of Austria] and her colleague, the Minister for Internal Affairs, Günther
Platter (ÖVP) [Austrian People's Party] have agreed to this. In the station's
morning news show called "Morgenjournal" Platter maintained that online searches
would only be used in the case of serious crime or suspicion of supporting a
terrorist organisation. The law drafted by Platter and Berger is to be discussed
today in a cabinet meeting. After that a group of experts will settle the legal
and technical details arising from the use of a Trojan program.
http://www.heise.de/english/newsticker/news/97595

Reports of federal security breaches double in four months
By Jill R. Aitoro
Federal agencies report an average of 30
incidents a day in which Americans' personally identifiable information is
exposed, double the number of incidents reported early this summer, according to
the top information technology executive in the Bush administration.
http://www.govexec.com/story_page.cfm?articleid=38348&dcn=e_hsw

IG: DHS has yet to properly secure networks
By Jill R. Aitoro
The Homeland Security Department, chastised by
Congress and security experts for having some of the worst information security
practices in government, has improved its security plan and policies but now
must begin deploying its plan, according to a report recently released by the
department's inspector general.
http://www.govexec.com/story_page.cfm?articleid=38312&dcn=e_tcmg

Tighter security over power plant computer systems urged
By Jill R. Aitoro
Current regulations to protect the control
systems that support power plants nationwide fall short of federal
recommendations, posing a serious threat to the electric infrastructure and
national security, witnesses testified at a hearing Wednesday. One lawmaker
threatened legislation if standards don't improve.
http://www.govexec.com/story_page.cfm?articleid=38319&dcn=e_tcmg

Verizon Says It Turned Over Data Without Court Orders
By Ellen Nakashima
Verizon Communications, the nation's
second-largest telecom company, told congressional investigators that it has
provided customers' telephone records to federal authorities in emergency cases
without court orders hundreds of times since 2005.
http://www.washingtonpost.com/wp-dyn/content/article/2007/10/15/AR2007101501857.html?hpid=topnews

Critical Infrastructure Protection: Multiple Efforts to Secure Control Systems
Are Under Way, but Challenges Remain
By GAO
Control systems--computer-based systems that
monitor and control sensitive processes and physical functions--perform vital
functions in many of our nation's critical infrastructures, including electric
power, oil and gas, water treatment, and chemical production. The disruption of
control systems could have a significant impact on public health and safety,
which makes securing them a national priority. GAO was asked to (1) determine
cyber threats, vulnerabilities, and the potential impact of attacks on critical
infrastructure control systems; (2) determine the challenges to securing these
systems; (3) identify private sector initiatives to strengthen the cybersecurity
of control systems; and (4) assess the adequacy of public sector initiatives to
strengthen the cybersecurity of control systems. To address these objectives, we
met with federal and private sector officials to identify risks, initiatives,
and challenges. We also compared agency plans to best practices for securing
critical infrastructures.
http://www.gao.gov/docsearch/abstract.php?rptno=GAO-07-1036

An Internet Jihad Aims at U.S. Viewers
By Michael Moss
When Osama bin Laden issued his videotaped
message to the American people last month, a young jihad enthusiast went online
to help spread the word.
http://www.nytimes.com/2007/10/15/us/15net.html?_r=2&oref=slogin&oref=slogin

19 year old to be arraigned for breaching US 911 emergency call system
By Staff Reporter
Washington State resident Randall Ellis, 19,
will be arraigned on 22nd October for abusing the 911 emergency call system. It
appears that he has a method for spoofing the origin of a 911 call, and is
believed to have used this to make over 200 hoax emergency calls throughout the
US over a period of a couple of years. However, as reported by the Orange County
Register, his latest exploit came near to ending in tragedy on the night of 29th
March this year. He reported a bogus drug-related shooting at an apparently
randomly selected private address in Lake Forest, Orange County, California,
eliciting a full armed response from the authorities.
http://www.heise-security.co.uk/news/97549

Researchers Take 'Internet Census'. Computer Security, Infrastructure Issues Top
List of Reasons for Study
By Ashley Phillips
For the first time, researchers have conducted
an Internet census by mapping the Web's nearly 3 billion assigned IP addresses,
an effort that could provide important clues to how to fight computer viruses,
according to the University of Southern California Information Sciences
Institute.
http://abcnews.go.com/Technology/TenWays/story?id=3713460&page=1

Qaeda Goes Dark After a U.S. Slip, Enemy Vanishes From Its Web Sites
By Eli Lake
Al Qaeda's Internet communications system has
suddenly gone dark to American intelligence after the leak of Osama bin Laden's
September 11 speech inadvertently disclosed the fact that we had penetrated the
enemy's system.
http://www.nysun.com/article/64163

August VA systems outage crippled western hospitals, clinics
By Bob Brewin
A day-long system outage at a new Veterans
Affairs Department data processing center in northern California on Aug. 31
crippled critical information systems used to manage patient care at VA
hospitals and clinics scattered across more than a third of the world, according
to details from an internal VA after-action report.
http://www.govexec.com/story_page.cfm?articleid=38235&sid=1

September
"Cyber Jihadist" Trial Opens New Front in Anti-Terror Fight
By Sonia Phalnikar
Defining what constitutes terrorism on the
Internet poses new challenges for governments. In a landmark case, a court in
Germany will decide whether posting terrorist propaganda and calls to violence
on the Internet is tantamount to supporting terrorism as it tries a man for
conducting a "virtual jihad."
http://www.dw-world.de/dw/article/0,2144,2800263,00.html

Estonia urges UN Member States to cooperate against cyber crimes
By UN Staff
The international community should step up its
efforts to defeat cyber crime, starting by acceding to an international
convention on the issue and eventually building to the development of a globally
negotiated and comprehensive law of cyberspace, Estonia’s President Toomas
Hendrik Ilves told the General Assembly tonight.
http://www.un.org/apps/news/story.asp?NewsID=23977&Cr=general&Cr1=debate

Contractor Blamed in DHS Data Breaches
By Ellen Nakashima and Brian Krebs
The FBI is investigating a major information
technology firm with a $1.7 billion Department of Homeland Security contract
after it allegedly failed to detect cyber break-ins traced to a Chinese-language
Web site and then tried to cover up its deficiencies, according to congressional
investigators.
http://www.washingtonpost.com/wp-dyn/content/article/2007/09/23/AR2007092301471.html

Mouse click could plunge city into darkness, experts say Story Highlights
By Jeanne Meserve
Researchers who launched an experimental cyber
attack caused a generator to self-destruct, alarming the government and
electrical industry about what might happen if such an attack were carried out
on a larger scale, CNN has learned.
http://www.cnn.com/2007/US/09/27/power.at.risk/index.html

GIMF Develops Defensive and Offensive Software for Jihadi Operations
By Abdul Hameed Bakier
In July 2007, jihadi forums announced the
creation of a new computer program called the Secrets of the Mujahideen, version
1.0. The objective of the program—which was published and distributed by the
Global Islamic Media Front (GIMF) through many jihadi websites—is to replace the
old and unreliable PGP corporation encryption tools that jihadis had used in the
past. Since the release of the program, jihadi websites, especially the GIMF,
are instructing their subscribers to communicate using the program's encryption
keys (http://ebnseren.modawanati.com, March 22). Furthermore, al-Qaeda
operatives are using Secrets of the Mujahideen in an attempt to avoid U.S.
eavesdropping operations against them (http://el-bilad.com, July 6).
http://www.jamestown.org/terrorism/news/article.php?articleid=2373681

Terrorism and Internet Use
By Brent MacLean
The great and many wondrous virtues of the
Internet—its ease of access, lack of regulation, the potential audiences it
caters to, and its fast flow of information, among others have been turned to
the advantage of groups committed to terrorizing societies to achieve their
selective goals. Today, most active terrorist groups have established their
presence in some way or another on the Internet. Terrorism on the Internet is an
extremely dynamic phenomenon: websites suddenly emerge, frequently modify their
formats, and then swiftly disappear—or, in many cases, seem to disappear by
changing their online address but retaining much the same content.
http://www.canadafreepress.com/2007/internet-security092107.htm

Swedish hacker slams US agencies, thanks Indians for support
By Abhishek Behl
In an exclusive telephonic interview, a
Swedish hacker slammed the US government in believing the dictum ‘security in
obscurity’. He appreciated the support of Indians in exposing the security
loopholes.
http://www.merinews.com/catFull.jsp?articleID=126448

Bin Laden, Brought to You by . . .
By Joby Warrick
Early yesterday morning, a South Carolina Web
designer who works at home managed to scoop al-Qaeda by publicly unveiling its
new video, a feat she has accomplished numerous times since 2002. Within hours,
cable news stations were broadcasting images of Osama bin Laden commemorating
the Sept. 11, 2001, terrorist attacks, and crediting the 50-year-old woman, who
uses the pseudonym Laura Mansfield.
http://www.washingtonpost.com/wp-dyn/content/article/2007/09/11/AR2007091102465.html

Pa. Welfare Department Computers Stolen
By Staff Writer
HARRISBURG, Pa. — Burglars stole two computers
containing records on people who receive medical assistance benefits for mental
health and substance abuse treatment, state officials said Tuesday.
http://www.chron.com/disp/story.mpl/ap/fn/5125978.html

Cyber attacks: a new weapon in the state arsenal
By Staff Writer
Cyber-attacks against government networks in
recent months illustrate how states like China are discovering the power of a
new weapon that is less expensive and more discreet than battalions of tanks or
spies.
http://afp.google.com/article/ALeqM5izkiUz-8u1rsvfDH29rJEsd17clw

TSP to halt use of Social Security numbers as account IDs
By Brittany R. Ballenstedt
In an effort to enhance security, the 3.8
million participants in the federal Thrift Savings Plan will no longer be
identified by their Social Security numbers, officials for the retirement
savings program announced Friday.
http://www.govexec.com/story_page.cfm?articleid=37972&dcn=e_gvet

Homeland Security drops data-mining program
By Michael J. Sniffen
The Homeland Security Department has given up
on one of its broadest anti-terrorism data-mining tools after investigators
found it was tested with information about real people without the required
privacy safeguards.
http://www.govexec.com/story_page.cfm?articleid=37936&dcn=todaysnews

Alleged Chinese hacker attack stirs fears of digital cold war
By Tom A. Peter
Since news broke this week that Chinese
hackers, allegedly part of China's People's Liberation Army (PLA), had hacked
into US, British, and German government computers to access defense and
foreign-policy-related information, analysts have begun to speculate that the
West may be moving into something of a new age cold war stand-off with China.
http://www.csmonitor.com/2007/0906/p99s01-duts.html

Cyberwarfare: The mouse that roared
By Economist.com
A decade or so ago, thinkers and pundits were
fond of discussing the emerging threat of cyber attacks as a matter of
international affairs. The growing reliance of advanced economies on the
internet, and the increasing use of the internet by governments and armies,
seemed to offer vulnerability along with riches and convenience. The scare of
the “Y2K bug” seemed to highlight the danger, at least until it became obvious
that the bug was of no threat to anyone.
http://www.economist.com/displaystory.cfm?story_id=9752625

August
Hackers steal info on users of federal job site
By Brittany R. Ballenstedt
Hackers have stolen the names and contact
information of about 146,000 job seekers on the USAJOBS Web site, the Office of
Personnel Management revealed Wednesday.
http://www.govexec.com/story_page.cfm?articleid=37888&dcn=e_gvet

DHS upgrades databases
By Wilson P. Dizard III
The Homeland Security Department has unveiled
several important upgrades to databases that collectively contain tens of
millions of personal immigration and travel records.
http://www.gcn.com/print/26_22/44925-1.html?topic=homeland-security

Beijing police launch virtual Web patrol
By Staff Reporter
BEIJING - Police in China's capital said
Tuesday they will start patrolling the Web using animated beat officers that pop
up on a user's browser and walk, bike or drive across the screen warning them to
stay away from illegal Internet content.
http://www.msnbc.msn.com/id/20477258/

Merkel's China Visit Marred by Hacking Allegations
By Staff Reporter
German Chancellor Angela Merkel's visit to
China has been overshadowed by a report in SPIEGEL claiming that the Chinese
government has been hacking into computers in Merkel's chancellery and three
other Berlin ministries.
http://www.spiegel.de/international/world/0,1518,502169,00.html

Homeland Security to broaden sharing of visitor data
By Chris Strohm
The Homeland Security Department on Wednesday
announced broad changes for using a database that collects and stores
information on foreign travelers to the United States. In one of the biggest
changes, the department plans to regularly share information with U.S.
intelligence agencies, department officials said in an interview Thursday. "This
is a first step to make it clear that we do have the authority to conduct this
type of sharing and to make the public know that we do plan to do so in the
future," one official said on condition of anonymity.
http://www.govexec.com/story_page.cfm?articleid=37843&dcn=e_gvet

Death penalty proposed for cyber terrorism
By Staff Writer
ISLAMABAD: The Electronic Crimes Bill 2007 has
already been approved in principle by the federal cabinet and will be enacted
soon through an act or an ordinance.
http://www.thenews.com.pk/daily_detail.asp?id=69539

Exposing on-line Jihadists
By Judi McLeod
When it comes to capitalizing on the Worldwide
Internet, Al Qaida has shot up to the top of the list in the savvy category.
Jihadists working the Internet are prolific, so much so that they could easily
borrow a line in popular use during the Cold War: “They’re everywhere!”
http://www.canadafreepress.com/2007/cover081007.htm

DHS cuts time it will save passenger data
By Alice Lipowicz
In response to more than 600 public comments,
the Homeland Security Department has shortened the amount of time it will retain
data and made other changes to its Automated Targeting System (ATS).
http://www.fcw.com/article103446-08-07-07-Web

Border Computers Vulnerable to Attack
By Spencer S. Hsu
|