What's New in Security News (July 2010)
Chinese army to target cyber war threat
By Tania Branigan
The People's Liberation Army has unveiled its first
department dedicated to tackling cyber war threats and protecting information
security, Chinese media reported today.
http://www.guardian.co.uk/world/2010/jul/22/chinese-army-cyber-war-department

U.S. Plans Cyber Shield for Utilities, Companies
By Siobhan Gorman
The federal government is launching an expansive program
dubbed "Perfect Citizen" to detect cyber assaults on private companies and
government agencies running such critical infrastructure as the electricity grid
and nuclear-power plants, according to people familiar with the program.
http://online.wsj.com/article/SB10001424052748704545004575352983850463108.html

War in the fifth domain
By Staff Reporter
Are the mouse and keyboard the new weapons of conflict?
http://www.economist.com/node/16478792?story_id=16478792&fsrc=rss

June 2010
FTC Says Scammers Stole Millions, Using Virtual Companies
By Robert Mcmillan
The U.S. Federal Trade Commission has disrupted a
long-running online scam that allowed offshore fraudsters to steal millions of
dollars from U.S. consumers -- often by taking just pennies at a time.
http://news.yahoo.com/s/pcworld/20100628/tc_pcworld/ftcsaysscammersstolemillionsusingvirtualcompanies

May 2010
US appoints first cyber warfare general
By Peter Beaumont
The US military has appointed its first senior general to
direct cyber warfare – despite fears that the move marks another stage in the
militarisation of cyberspace.
http://www.guardian.co.uk/world/2010/may/23/us-appoints-cyber-warfare-general

DOD struggles to define cyber war
By William Jackson
As the Defense Department puts its new Cyber Command in
place to defend the military information infrastructure, it also is wrestling
with the nontechnical issues of defining cyber war and establishing a doctrine
for cyber warfare, a top Pentagon cyber policy adviser said Wednesday.
http://gcn.com/articles/2010/05/12/miller-on-cyberwar-051210.aspx

CIA Boosting Cyber War Capabilities
By Kevin Coleman
For some time now the CIA has been making investments in
technology focused on defensive systems to prevent cyber threats, as well as
offensive capabilities to launch cyber attacks and collect cyber intelligence.
This is one of the CIA’s top three priorities within their current strategic
plan looking out five years.
http://defensetech.org/2010/05/20/cia-boosting-cyber-war-capabilities/

April 2010
PocketCop for BlackBerry and The Baltimore Police Department
By Ewan
PocketCop, as you might expect, is a mobile policing system
based on the BlackBerry platform. PocketCop is provided by InterAct. The system
essentially puts all policing information at the fingertips of officers on the
beat.
http://www.mobileindustryreview.com/2010/04/pocketcop-for-blackberry-and-the-baltimore-police-department.html

Google cyberattack hit password system: report
By Staff Reporter
A December cyberattack on Google Inc computers hit the
company's password system that millions of people worldwide use to access almost
all of the company's Web services, The New York Times said, citing a person with
direct knowledge of the investigation.
http://www.reuters.com/article/idUSTRE63J0BO20100420

March 2010
Infographic of the Day: The Spam Industry
By Cliff Kuang
We all know that spam is huge, but this infographic by New
Scientist offers a much closer look. Long story short: Preventing spam seems
almost impossible, because the spammers are so nimble. They're also getting
smarter.
http://www.fastcompany.com/1595958/infographic-of-the-day-the-spam-industry

Hacker Disables More Than 100 Cars Remotely
By Kevin Poulsen
More than 100 drivers in Austin, Texas found their cars
disabled or the horns honking out of control, after an intruder ran amok in a
web-based vehicle-immobilization system normally used to get the attention of
consumers delinquent in their auto payments.
http://www.wired.com/threatlevel/2010/03/hacker-bricks-cars/

FDIC: Hackers Took More Than $120M in Three Months
By Robert McMillan
Ongoing computer scams targeting small businesses cost U.S.
companies US$25 million in the third quarter of 2009, according to the U.S.
Federal Deposit Insurance Corporation.
http://news.yahoo.com/s/pcworld/20100308/tc_pcworld/fdichackerstookmorethan120minthreemonths

February 2010
Stopping Stealthy Downloads
By Brian Krebs
Researchers at SRI International and Georgia Tech are
preparing to release a free tool to stop "drive-by" downloads: Internet attacks
in which the mere act of visiting a Web site results in the surreptitious
installation of malicious software. The new tool, called BLADE (Block All
Drive-By Download Exploits), stops downloads that are initiated without the
user's consent.
http://www.technologyreview.com/computing/24632/?a=f

School district: Spy Webcams activated 42 times
By Chris Matyszczyk
When one hears the word "spy," one normally thinks of
places like Moscow, London, and Washington rather than Rosemont, Pa. However,
the controversy swirling around Rosemont's Harriton High School and the Lower
Merion School District increasingly makes for bizarre reading. And even more
bizarre thinking.
http://news.cnet.com/8301-17852_3-10457126-71.html

Shell hit by massive data breach
By John Oates
Shell has been hit by a massive data breach – the contact
database for 176,000 staff and contractors at the firm has been copied and
forwarded to lobbyists and activists opposed to the company.
http://royaldutchshellplc.com/2010/02/15/shell-hit-by-massive-data-breach/

Social Engineering Scammers Offer Live Support
By Thomas Claburn
Just like legitimate software companies, cyber scammers are
experimenting with online services supported by human intelligence.
http://www.informationweek.com/

Hackers Steal Millions in Carbon Credits
By Kim Zetter
Credit card numbers are so passe. Today’s hackers know the
real powerhouse data to steal is emission certificates. That’s exactly what
hackers went after last week when they obtained unauthorized access to online
accounts where companies maintain their carbon credits, according to the German
newspaper Der Spiegel.
http://www.wired.com/threatlevel/2010/02/hackers-steal-carbon-credits

In wake of hack, Google negotiating cooperation with the NSA
By John Timmer
In January, Google went public with news that some of its
systems had been hacked, along with those of a number of US-based companies. The
attacks had targeted both accounts maintained by political activists and
commercial code, and Google pointed the finger straight at China, vowing to
change its entire approach to business in that country. But a report now
suggests that the company is also looking to beef up its internal defenses to
prevent a repeat of the attacks.
http://arstechnica.com/security/news/2010/02/in-wake-of-hack-google-negotiating-cooperation-with-the-nsa.ars

January 2010
Network flaw causes scary Web error
By Jordan Robertson
A Georgia mother and her two daughters logged onto Facebook
from mobile phones last weekend and wound up in a startling place: strangers'
accounts with full access to troves of private information. The glitch - the
result of a routing problem at the family's wireless carrier, AT&T - revealed a
little known security flaw with far reaching implications for everyone on the
Internet, not just Facebook users.
http://www.miamiherald.com/business/technology/story/1433129.html

Chinese Cyber-Attack Said to Be Part of Vast Espionage Campaign
By Ariana Eunjung Cha and Ellen Nakashima
Computer attacks on Google that the search giant said
originated in China were part of a concerted political and corporate espionage
effort that exploited security flaws in e-mail attachments to sneak into the
networks of major financial, defense and technology companies and research
institutions in the United States, security experts said.
http://www.washingtonpost.com/wp-dyn/content/article/2010/01/13/AR2010011300359.html

NZ and US sign anti-terrorism science and technology pact
By NBR Staff
New Zealand and the US have signed a science and technology
research co-operation agreement to help protect both countries against acts of
terrorism and other threats to domestic and external security.
http://www.nbr.co.nz/article/nz-and-us-sign-anti-terrorism-science-and-technology-pact-117061

December 2009
Insurgents Hack U.S. Drones
By Siobhan Gorman, Yochi J. Dreazen and August Cole
Militants in Iraq have used $26 off-the-shelf software to
intercept live video feeds from U.S. Predator drones, potentially providing them
with information they need to evade or monitor U.S. military operations.
http://online.wsj.com/article/SB126102247889095011.html

Cyberattacks against critical U.S. networks rising at a faster rate
By Jill R. Aitoro
The number of cybersecurity attacks against computer
networks that operate the nation's critical infrastructure such as
transportation systems and water treatment and power plants, has increased
dramatically, mostly because these industries rely on legacy technologies that
don't protect systems from sophisticated attacks.
http://www.nextgov.com/nextgov/ng_20091208_4177.php?oref=rss?zone=NGtoday

Massive TSA Security Breach As Agency Gives Away Its Secrets
By Brian Ross and Matt Hosford
In a massive security breach, the Transportation Security
Administration (TSA) inadvertently posted online its airport screening
procedures manual, including some of the most closely guarded secrets regarding
special rules for diplomats and CIA and law enforcement officers.
http://abcnews.go.com/Blotter/massive-tsa-security-breach-agency-secrets/story?id=9280503

Ten Most Damaging Data Breaches of 2009
By Laton McCartney
Every week for the past four years the San Diego-based
Privacy Rights Clearing House (PRCH), an organization dedicated to empowering
consumers and protecting privacy, has been chronicling data breaches on a weekly
basis.
http://information-security-resources.com/2009/12/04/ten-most-damaging-data-breaches-of-2009/

DHS completes draft of plan on how to respond to a national cyberattack
By Jill R. Aitoro
The Homeland Security Department, working with other
federal agencies, has completed a draft of how governments and businesses should
respond to a widespread cyberattack, establishing their roles and
responsibilities.
http://www.nextgov.com/nextgov/ng_20091203_2020.php

November 2009
U.S. Cybersecurity Can Halt 80% of Attacks at Best
By Kenneth Corbin
Senior government officials overseeing the nation's cyber
defenses told a Senate panel this morning that agencies are doing more to
coordinate their far-ranging efforts, but that even in the best-case scenario,
the hackers are often one step ahead.
http://www.internetnews.com/security/article.php/3848861/US+Cybersecurity+Can+Halt+80+of+Attacks+at+Best.htm

Climate Emails Stoke Debate
By Keith Johnson
The scientific community is buzzing over thousands of
emails and documents -- posted on the Internet last week after being hacked from
a prominent climate-change research center -- that some say raise ethical
questions about a group of scientists who contend humans are responsible for
global warming.
http://online.wsj.com/article/SB125883405294859215.html?mod=googlenews_wsj

The Cyberwar Plan
By Shane Harris
In May 2007, President Bush authorized the National
Security Agency, based at Fort Meade, Md., to launch a sophisticated attack on
an enemy thousands of miles away without firing a bullet or dropping a bomb.
http://www.nationaljournal.com/njmagazine/cs_20091114_3145.php

October 2009
NSA to build $1.5B cybersecurity center near Salt Lake City
By Jaikumar Vijayan
The National Security Agency (NSA) is setting up a new $1.5
billion cybersecurity data center at the Utah National Guard's Camp Williams
near Salt Lake City. At 1 million square feet, the center will form the hub of
the highly-classified Comprehensive National Cybersecurity Initiative (CNCI)
launched during the Bush Administration.
http://www.computerworld.com/s/article/9139915/NSA_to_build_1.5B_cybersecurity_center_near_Salt_Lake_City

September 2009
NY Times Warns of Rogue Antivirus on Web Site
By Robert McMillan
The newspaper warned readers Sunday that so-called rogue
antivirus sellers had been spotted on its Web site, NYTimes.com. Their products,
often promoted by Eastern European criminal organizations, are either
ineffective or actually end up infecting the computers of people who purchase
them.
http://www.csoonline.com/article/501981/NY_Times_Warns_of_Rogue_Antivirus_on_Web_Site

FBI building system that blows away fingerprinting
By Ellen Messmer
The Federal Bureau of Investigation is expanding beyond its
traditional fingerprint-focused collection practices to develop a new biometrics
system that will include DNA records, 3-D facial imaging, palm prints and voice
scans, blended to create what's known as "multi-modal biometrics."
http://www.networkworld.com/

The Information DHS Stores on International Travelers
By Matthew Harwood
Do you frequently travel internationally? If so, you may be
surprised to discover what information the Department of Homeland Security (DHS)
collects and stores when you travel abroad.
http://securitymanagement.com/news/information-dhs-stores-international-travelers-006185

How Team of Geeks Cracked Spy Trade
By Siobhan Gorman
From a Silicon Valley office strewn with bean-bag chairs, a
group of twenty-something software engineers is building an unlikely following
of terrorist hunters at U.S. spy agencies.
http://online.wsj.com/article/SB125200842406984303.html

FCC forms cyber security group
By Aharon Etengoff
A slew of recent hacking attacks has prompted the Federal
Communications Commission (FCC) to form a cyber security working group. The
group is expected to assess the FCC's current cyber security expertise, identify
vulnerabilities and submit recommendations to address any deficiencies.
http://www.tgdaily.com/content/view/43908/108/

August 2009
Computer Hacker Gonzalez to Admit Guilt, Forfeit $1.65 Million
By Patricia Hurtado and Linda Sandler
Albert Gonzalez, the computer hacker charged with stealing
130 million credit and debit card numbers, will plead guilty to previous
data-theft charges in New York and Massachusetts and forfeit assets, U.S.
prosecutors said.
http://www.bloomberg.com/apps/news?pid=20601087&sid=aEUeqdHRHd5M

Air National Guard breaks ground, Construction to start on home for Network
Warfare Squadron
By Angie Basiouny
The Delaware Air National Guard broke ground Thursday on a
$3.2 million building that will house the 166th Network Warfare Squadron, a unit
dedicated to the security of the vast digital information systems that keep
everything in America running -- from traffic lights to satellites.
http://www.delawareonline.com/article/20090828/NEWS02/908280334

Social Networks Leak Personal Information
By Thomas Claburn
Online social networking sites leak personal information, a
new study has found, raising the possibility that users of such sites can be
tracked everywhere they go online.
http://www.informationweek.com/

July 2009
Chinese Spying Claimed in Purchases of NSA Crypto Gear
By Kevin Poulsen
A Chinese national was indicted this week for conspiring to
violate U.S. export law, following a nearly three-year investigation into his
alleged efforts to acquire sensitive military and NSA-encryption gear from eBay
and other internet sources.
http://www.wired.com/threatlevel/2009/07/export/

Troubles Plague Cyberspy Defense
By Siobhan Gorman
The flagship system designed to protect the U.S.
government's computer networks from cyberspies is being stymied by technical
limitations and privacy concerns, according to current and former
national-security officials.
http://online.wsj.com/article/SB124657680388089139.html

South Korea hit by cyber attack
By Staff Reporter
The cyber attack has disrupted government and banking
websites. South Korean officials are investigating an apparent cyber attack that
has paralysed the websites of major government agencies, banks and internet
service providers.
http://english.aljazeera.net/news/asia-pacific/2009/07/2009784212730781.html

Report: Social Security numbers can be predicted
By Elinor Mills
It is possible to use publicly available data on state and
date of birth to predict someone's Social Security number, particularly if they
were born after 1988 and in smaller states, according to an article published
Monday in The Proceedings of the National Academy of Sciences.
http://news.cnet.com/8301-1009_3-10280614-83.html

Troubles Plague Cyberspy Defense
By Siobhan Gorman
The flagship system designed to protect the U.S.
government's computer networks from cyberspies is being stymied by technical
limitations and privacy concerns, according to current and former
national-security officials.
http://online.wsj.com/article/SB124657680388089139.html#mod%3Drss_US_News

June 2009
U.S. and Russia Differ on a Treaty for Cyberspace
By John Markoff and Andrew E. Kramer
The United States and Russia are locked in a fundamental
dispute over how to counter the growing threat of cyberwar attacks that could
wreak havoc on computer systems and the Internet.
http://www.nytimes.com/2009/06/28/world/28cyber.html?_r=4

US accidentally posts list of nuclear sites
By Eileen Sullivan and H. Josef Hebert
The government accidentally posted on the Internet a list
of government and civilian nuclear facilities and their activities in the United
States, but US officials said yesterday the posting included no information that
compromised national security.
http://www.boston.com/

DHS to create online dialogue for security review
By John S. Monroe
The Homeland Security Department plans to create an online
dialogue with security and policy experts nationwide to help officials prepare
its first Quadrennial Homeland Security Review.
http://fcw.com/articles/2009/06/02/homeland-security-national-dialogue.aspx

May 2009
Anti-U.S. Hackers Infiltrate Army Servers
By Paul McDougall
A known computer hacking clan with anti-American leanings
has successfully broken into at least two sensitive Web servers maintained by
the U.S. Army, InformationWeek has learned exclusively.
http://www.informationweek.com

Information-sharing platform hacked
By Ben Bain
The Homeland Security Department’s platform for sharing
sensitive but unclassified data with state and local authorities was hacked
recently, a DHS official has confirmed
http://fcw.com/Articles/2009/05/13/Web-DHS-HSIN-intrusion-hack.aspx

Glossy Internet Magazine Targets Americans for Jihad Training
By Eric Shawn
The cover of "Jihad Recollections," a magazine about Al
Qaeda that impels Americans to join in jihad. It's been likened to Al Qaeda's
"Vanity Fair," a new English-language Internet magazine called "Jihad
Recollections" that focuses on the terrorist group, its founder, Usama Bin
Laden, and how to commit jihad. It also predicts the demise of the United
States.
http://www.foxnews.com/story/0,2933,518611,00.html

IG: Air traffic control system vulnerable to cyberattack
By Kathleen Hickey
The Federal Aviation Administration’s air traffic control
system is vulnerable to cyberattacks via Web applications that support the
system, according to a new report released by the Transportation Department’s
Office of Inspector General (OIG).
http://gcn.com/articles/2009/05/06/air-traffic-control-vulnerabilities.aspx

April 2009
Controversial Einstein systems to inspect U.S. government's Internet traffic
By Carolyn Duffy Marsan
The largest U.S. carriers -- including AT&T, Qwest and
Sprint -- are deploying special-purpose, intrusion-detection systems dubbed
Einstein boxes in their networks as part of an 18-month-old effort to tighten
security on federal networks.
http://www.networkworld.com/

Documents: FBI Spyware Has Been Snaring Extortionists, Hackers for Years
By Kevin Poulsen
A sophisticated FBI-produced spyware program has played a
crucial behind-the-scenes role in federal investigations into extortion plots,
terrorist threats and hacker attacks in cases stretching back at least seven
years, newly declassified documents show.
http://www.wired.com/threatlevel/2009/04/fbi-spyware-pro/

New Military Command Planned to Improve U.S. Cybersecurity
By Siobhan Gorman and Yochi Dreazen
The Obama administration plans to create a new military
command to coordinate the defense of Pentagon computer networks and improve U.S.
offensive capabilities in cyberwarfare, according to current and former
officials familiar with the plans.
http://online.wsj.com/article/SB124035738674441033.html

Britain in the dock over secret tracking of internet accounts
By Alexi Mostrous & David Charter
Fears that Britain is slipping into a surveillance society
have been heightened by Brussels initiating legal action after declaring that UK
laws guaranteeing data protection were “structurally flawed” and well below the
European standard.
http://technology.timesonline.co.uk/tol/news/tech_and_web/article6097384.ece

Report: Cyberspace remains a dangerous frontier
By William Jackson
Rise in botnet activity in 2008 reverses gains made from
aggressive law enforcement in 2007. The number of compromised computers actively
being used in botnets to launch attacks on any given day last year was about
75,000, according to a new report on Internet threats from security firm
Symantec Corp.
http://gcn.com/articles/2009/04/14/internet-threat-report.aspx

Report: Cyberwarriors probing US electrical grid
By Joel Hruska
Security officials from both past and current US
administrations have owned up to the detection of foreign intrusions into our
electrical and water infrastructures, but insist there's been no evidence that
an attack has been attempted. The size of the risk such intrusions pose,
however, is under debate.
http://arstechnica.com

March 2009
Terrorism Recruiting Manual Worries Authorities
By Dina Temple-Raston
For months now, counterterrorism officials have seen signs
that al-Qaida has been looking for new and innovative ways to recruit
terrorists, including a new manual that has surfaced on the Internet.
http://www.npr.org/templates/story/story.php?storyId=102193723&ft=1&f=1004

NORAD move raises security concerns
By Michael de Yoanna
NORAD, the high-tech facility responsible for monitoring
the skies over North America, faces continuing security problems at its new
location inside an office building on an air base here.
http://www.washingtontimes.com/news/2009/mar/27/norad-move-raises-concerns/

China accused over global computer spy ring
By Dan Glaister
An enormous electronic espionage programme run from servers
in China has been used to spy on computers in more than 100 countries, according
to two reports published at the weekend.
http://www.guardian.co.uk/world/2009/mar/30/china-dalai-lama-spying-computers

NSA joining social network for intelligence analysts
By David Wood
The super-secret National Security Agency, traditionally
reluctant to share its code-breaking secrets, is joining a new, highly
classified social network that links its analysts for the first time with
thousands of colleagues at other U.S. intelligence agencies.
http://www.baltimoresun.com/technology/bal-te.md.spybook04mar04,0,2709017.story

Cybersecurity Chief Resigns
By Siobhan Gorman
The government's coordinator for cybersecurity programs has
quit, criticizing what he described as the National Security Agency's grip on
cybersecurity. Rod Beckstrom, a former Silicon Valley entrepreneur, said in his
resignation letter that the NSA's central role in cybersecurity is "a bad
strategy" because it is important to have a civilian agency taking a key role in
the issue. The NSA is part of the Department of Defense.
http://online.wsj.com/article/SB123638468860758145.html

February 2009
FAA breach heightens cybersecurity concerns
By Mary Mosquera
The Federal Aviation Administration was doing such a good
job at protecting data in its computer systems that the Office of Management and
Budget chose it in January to be one of four agencies to guide other federal
agencies in their cybersecurity efforts. Just a month later, FAA officials had
to admit that hackers breached one of the agency’s servers, stealing 48 files.
Two of the files contained information on 45,000 current and former FAA
employees, including sensitive information that could potentially make them
vulnerable to identity theft.
http://fcw.com/articles/2009/02/23/faa-data-breach.aspx?s=fcwdaily_230209

US feds pull travel site offline after hacker break-in
By Dan Goodin
A travel reservations website used by US government
agencies remains offline more than a week after it was infected with malware
that tried to install malicious code on the PCs of those who visited the site.
http://www.theregister.co.uk/2009/02/19/govtrip_remains_down/

DOE seeks new approach to cybersecurity
By William Jackson
Reactive approaches to information security have not kept
pace with the rapidly evolving information technology environment, and a panel
of experts examining the state of security at the Energy Department has
recommended a fundamentally different approach.
http://gcn.com/articles/2009/02/12/doe-cyber-security-report.aspx?s=gcndaily_170209

Los Alamos National Lab missing 67 computers
By Jaikumar Vijayan
New Mexico-based Los Alamos National Laboratory (LANL), the
nation's leading nuclear weapons lab, once again finds itself the focus of
concerns about potentially serious cybersecurity lapses.
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9127862

Mexico to fingerprint phone users in crime fight
By Tomas Sarmiento and Cynthia Osterman
Mexico will start a national register of mobile phone users
that will include fingerprinting all customers in an effort to catch criminals
who use the devices to extort money and negotiate kidnapping ransoms.
http://uk.reuters.com/article/latestCrisis/idUKN09529514

Not Everyone Is Cheering as Wi-Fi Takes to the Air
By Micheline Maynard
For all the annoyance of being crammed into an aluminum
tube at 35,000 feet with a bunch of strangers, air travel has offered one
benefit: the ability to tell bosses and colleagues, “I’ll be on a flight, so you
won’t be able to reach me.”
http://www.nytimes.com/2009/02/07/business/07plane.html?_r=2

Electronics Firm Faces FTC Lawsuit Following Multiple Hacks
By Tim Wilson
Warning to security professionals: If you don't do your job
right, then it might not only be a firing offense -- it might be a federal
offense.
http://www.darkreading.com/

January 2009
New York Police Fight With U.S. on Surveillance
By David Johnston and William K. Rashbaum
An effort by the New York Police Department to get broader
latitude to eavesdrop on terrorism suspects has run into sharp resistance from
the Justice Department in a bitter struggle that has left the police
commissioner and the attorney general accusing each other of putting the public
at risk.
http://www.nytimes.com/2008/11/20/washington/20terror.html

UK identities sold for £80 online
By Dominic Casciani
Internet fraudsters sell complete financial identities for
just £80, according to an online safety group. The details packaged and sold
online include names, addresses, passport numbers and confidential financial
data such as credit card numbers.
http://news.bbc.co.uk/2/hi/uk_news/7732569.stm

China's hackers stealing US defence secrets, says congressional panel
By Owen Bowcott
China is stealing sensitive information from American
computer networks and stepping up its online espionage, according to a US
congressional panel.
http://www.guardian.co.uk/world/2008/nov/20/america-china-hacking-security-obama

Worm Infects Millions of Computers Worldwide
By John Markoff
A new digital plague has hit the Internet, infecting
millions of personal and business computers in what seems to be the first step
of a multistage attack. The world’s leading computer security experts do not yet
know who programmed the infection, or what the next stage will be.
http://www.nytimes.com/2009/01/23/technology/internet/23worm.html

Systems for critical industries wide open to cyberattacks
By Jill R. Aitoro
The networks used to manage the industries that the nation
relies on, such as energy, transportation and chemicals, are vulnerable to
cyberattacks, according to a survey of executives that operate critical
infrastructure.
http://www.nextgov.com/nextgov/ng_20081111_2143.php?zone=itsecurity

MI5: Internet phone services a risk to national security
By
Leo King
Internet telephone services pose a serious threat to
Britain's security, the head of MI5 said. The danger with online calls, said spy
chief Jonathan Evans, was that they do not result in telephone bills, which are
key evidence documents in prosecutions. This meant it would be much easier for
terrorists to make the calls and eventually escape prosecution if they are tried
for criminal offenses.
http://www.computerworld.com/

Cyber attacks ranked 3rd danger behind nuclear war
By Staff Reporter
Cyber attacks pose the greatest threat to the United States
after nuclear war and weapons of mass destruction - and they are increasingly
hard to prevent, FBI experts say.
http://www.thearynews.com/english/newsdetail.asp?nid=19868

Cops look to jam cell phones if terror strikes
By Staff Reporter
The NYPD is examining ways to shut down cell phone calls in
and around future hostage-taking scenarios without also shutting down the
communications devices of the police trying to rescue them, Commissioner Raymond
Kelly said at a congressional hearing yesterday.
http://www.newsday.com/

December 2008
Researchers Hack Internet Security Infrastructure, International Team Discovers
Way to Mimic Digital Identity
By Brian Krebs
An international team of computer security researchers
demonstrated today a key weakness in the Internet infrastructure that could let
hackers launch virtually undetectable attacks aimed at intercepting secured
online communications when consumers visit bank and e-commerce Web sites.
http://www.washingtonpost.com/wp-dyn/content/story/2008/12/30/ST2008123001136.html

Justice IG finds IT security vulnerabilities
By
Ben Bain
Despite getting high marks for its compliance with computer
security legislation, the Justice Department had major systemic information
technology vulnerabilities and did not fully implement policies and procedures
meant to increase IT security, according to an audit by the department’s
inspector general.
http://www.fcw.com/online/news/154700-1.html?type=pf

Hacking US is Big Business in Russia
By Staff Reporter
MOSCOW -- Not long ago, the simple, anonymous thrill of
exposing chinks in American software was enough of a payoff for a Russian
hacker. Today it's cash. And almost all the targets are in the United States and
Europe, where Russia's notorious hackers pilfer online bank accounts, swipe
social security numbers, steal credit card data and peek at e-mail log-ins and
passwords as part of what some estimate to be a $100 billion-a-year global
cyber-crime business.
http://www.military.com/news/article/hacking-us-is-big-business-in-russia.html

SF engineer to stand trial in hijacked network
By
Steven Musil
A network administrator will stand trial for allegedly
hijacking the network he designed and maintained for the city of San Francisco.
http://news.cnet.com/8301-1009_3-10129313-83.html?tag=mncol;title

U.S. Is Losing Global Cyberwar, Commission Says
By Keith Epstein
The U.S. faces a cybersecurity threat of such magnitude
that the next President should move quickly to create a Center for Cybersecurity
Operations and appoint a special White House advisor to oversee it. Those are
among the recommendations in a 44-page report by the U.S. Commission on
Cybersecurity, a version of which will be made public today. The bipartisan
panel includes executives, high-ranking military officers and intelligence
officials, leading specialists in computer security, and two members of
Congress.
http://www.businessweek.com/bwdaily/dnflash/content/dec2008/db2008127_817606.htm

November 2008
China's hackers stealing US defence secrets, says congressional panel
By
Owen Bowcott
China is stealing sensitive information from American
computer networks and stepping up its online espionage, according to a US
congressional panel.
http://www.guardian.co.uk/world/2008/nov/20/america-china-hacking-security-obama

Study: Critical infrastructure often under cyberattack
By
Robert McMillan
Computer systems that run the world's critical
infrastructure are not as secure as they should be, according to a new survey.
http://www.computerworld.com/

NSA's smart phone could become government issue
By
Bob Brewin
A new mobile phone specifically designed for the National
Security Agency looks like any other commercial smart phone, with a decent-size
screen for Web browsing and a full keyboard for data entry.
http://www.nextgov.com/nextgov/ng_20081107_9172.php

State Department, VA disclose two new data breaches
By
Jaikumar Vijayan
Two federal agencies that have already drawn attention this
year for data security breaches are back in the spotlight again -- for the same
reason. One of them is the U.S. Department of State, which last week disclosed
that it had notified close to 400 individuals that the data they had submitted
with their passport applications had been stolen in a database intrusion. And
last Saturday, the U.S. Department of Veteran's Affairs (VA) said that one of
its medical centers in Oregon had accidentally posted personal data on about
1,600 patients on its public Web site.
http://www.computerworld.com/

Cyber-terrorism will be punishable by death
By Tahir Niaz
President Asif Ali Zardari promulgated the Prevention of
Electronic Crimes Ordinance on Thursday, making cyber-terrorism punishable with
death or imprisonment for life.
http://www.dailytimes.com.pk/

October 2008
New law brings 911 services into Internet Age
By
William Jackson
FCC issues rules implementing 911 requirements for wireless
VOIP. The Federal Communications Commission issued regulations this week for
voice-over-IP service providers to offer Enhanced 911 emergency call services to
all customers. The rules were required under the New and Emerging Technologies
911 Improvement Act of 2008, which was signed into law in July.
http://www.gcn.com/cgi-bin/udt/im.display.printable?client.id=gcn_daily&story.id=47432

Spy Fears: Twitter Terrorists, Cell Phone Jihadists
By
Noah Shachtman
Could Twitter become terrorists' newest killer app? A draft
Army intelligence report, making its way through spy circles, thinks the
miniature messaging software could be used as an effective tool for coordinating
militant attacks.
http://blog.wired.com/defense/2008/10/terrorist-cell.html

U.S. spent $4 billion more on spying in fiscal '08 than '07
By David Wood
The U.S. spent $4 billion more on spying in the fiscal year
ending Sept. 30 than during the previous year, the director of national
intelligence said yesterday.
http://www.baltimoresun.com/news/nation/bal-te.spy29oct29,0,1077309.story

DOD: Controlled but unclassified data is leaking
By Alice Lipowicz
Controlled but unclassified Defense Department information
is leaking to the public from thousands of Web sites sponsored by DOD, according
to a recent memo by DOD Chief Information Officer John Grimes.
http://www.fcw.com/online/news/154195-1.html

Al-Qaeda Web Forums Abruptly Taken Offline
By
Ellen Knickmeyer
Four of the five main online forums that al-Qaeda's media
wing uses to distribute statements by Osama bin Laden and other extremists have
been disabled since mid-September, monitors of the Web sites say.
http://www.washingtonpost.com/

Keyboard sniffers to steal data
By Staff Reporter
The attacks were shown to work at a distance of 20 metres.
Computer criminals could soon be eavesdropping on what you type by analysing the
electromagnetic signals produced by every key press. By analysing the signals
produced by keystrokes, Swiss researchers have reproduced what a target typed.
http://news.bbc.co.uk/2/hi/technology/7681534.stm

Supreme Court takes on 'aggravated' identity theft
By
Bill Mears
The Supreme Court agreed Monday to examine whether
prosecutors can aggressively prosecute illegal immigrants for identity theft if
they didn't know the documents they were given belonged to someone else.
http://www.cnn.com/2008/CRIME/10/20/scotus.immigrants.idtheft/

MoD breach: Data goes missing from "secure location"
By Tom Espiner
IT contractor EDS has lost a hard drive containing Ministry
of Defence data. According to press reports, the drive contained sensitive
information on approximately 100,000 armed-forces personnel, plus 600,000
potential recruits.
http://www.silicon.com/publicsector/0,3800010403,39301020,00.htm

Panel Says Data Mining for Terrorists is an Exercise in Futility
By
Jaikumar Vijayan
The kind of pattern-seeking data mining and behavioral
surveillance technologies that are being used by several federal agencies to
identify potential terrorists are far too unreliable to be of any real value,
according to a report issued by the National Research Council.
http://www.csoonline.com/

NIST publishes security guidance for wireless links, industrial controls
By
William Jackson
The National Institute of Standards and Technology has
released three information security documents in its 800 series of special
publications; two final guidelines on information security assessment and
Bluetooth security, and a draft of guidelines for security industrial control
systems.
http://www.gcn.com/online/vol1_no1/47273-1.html

Employees, not hackers, cause most corporate data loss
By
Joel Hruska
Earlier this summer, we covered a report suggesting that
the majority of corporate data loss comes from risky employee actions and
systemic failures at the corporate level when it comes to implementing
comprehensive IT security policies. Now, a new study from Compuware reports new
information that supports Trend Micro's conclusions from back in July. The
unsung heroes in the IT department, it turns out, may be doing a better job
stopping outside hackers than they get credit for.
http://arstechnica.com/

Encountering Al Qaeda On The Web
By Dani Reshef
The cyberspace was a main tool for the Global Jihad in
indoctrination, communication, guidance, propaganda and recruiting of young
Muslims to the cause of Jihad. Footage of successful terror attacks all over the
world, hostages begging for their life, beheading of infidels, distributing of
alleged atrocities committed by infidels are posted on regular basis on the web.
http://www.rightsidenews.com/

September 2008
YouTube bans terrorism training videos
By
Staff Reporter
Terrorist training videos will be banned from appearing on
YouTube, under revised new guidelines being implemented by the popular
video-sharing site. The Google-owned portal will ban footage that advertises
terrorism or extremist causes and supporters of the change hope it will blunt
al-Qaeda's strong media online campaign.
http://news.theage.com.au/

Hackers block Qaeda’s 9/11 terror on tape
By Pramit Pal Chaudhuri
Hackers prevented Al Qaeda from releasing a videotape to
mark the seventh anniversary of 9/11. Al Qaeda has traditionally issued a video
or audiotape by either Osama bin Laden or Ayman al Zawahiri, the terror
network’s two leaders, to mark their massive terrorist attack on the US.
http://www.hindustantimes.com/

Exclusive: Widespread cell phone location snooping by NSA?
By
Chris Soghoian
If you thought that the National Security Agency's
warrantless wiretapping was limited to AT&T, Verizon and Sprint, think again.
http://news.cnet.com

IRS finds unauthorized Web servers connected to its networks
By Jill Aitoro
The Internal Revenue Service found more than 1,000
unauthorized Web servers connected to its networks, leaving the agency's systems
open to hackers, according to a report released on Thursday by the IRS inspector
general.
http://www.nextgov.com/nextgov/ng_20080904_3324.php

Tracking the Terrorists Online
By
Yassin Musharbash
For years, al-Qaida and other terror groups have set up
shop in the Internet. Those who track them have covertly followed. The companies
SITE and IntelCenter have penetrated even deeper into the terror Web than most
intelligence agencies.
http://www.spiegel.de/international/world/0,1518,575276,00.html

Internet Traffic Begins to Bypass the U.S.
By John Markoff
The era of the American Internet is ending. Invented by
American computer scientists during the 1970s, the Internet has been embraced
around the globe. During the network’s first three decades, most Internet
traffic flowed through the United States. In many cases, data sent between two
locations within a given country also passed through the United States.
http://www.nytimes.com/2008/08/30/business/30pipes.html?_r=1&th&emc=th&oref=slogin

August 2008
Gov't Warns Against Chinese Cyber-Spys
By John Markoff
U.S. intelligence officials issued a strong warning
Thursday that Americans traveling overseas, particularly visitors to the
Olympics in China, face a serious risk of having sensitive information stolen,
reports CBS News correspondent Bob Orr. The travel alert is blunt: "All
information you send electronically - by fax machine, personal digital assistant
(PDA), computer or telephone - can be intercepted."
http://cbs2chicago.com/national/china.olympics.pda.2.790453.html

Caucasus foes fight cyber war
By
Neil Arun
Armed with computers, unseen ranks of hackers are fanning
conflict in the Caucasus. Internet users in Russia and Georgia have attacked
vital websites in each other's countries, in a virtual echo of battles being
fought on the ground by troops and tanks.
http://news.bbc.co.uk/1/hi/world/europe/7559850.stm

Cyberspace Barrage Preceded Russian Invasion of Georgia
By John Markoff
Weeks before physical bombs started falling on Georgia, a
security researcher in suburban Massachusetts was watching an attack against the
country in cyberspace.
http://www.nytimes.com/2008/08/13/technology/13cyber.html?em

11 charged in theft of 41 million card numbers
By Brad Stone
Federal prosecutors have charged 11 people with stealing more than 41 million
credit and debit card numbers, cracking what officials said on Tuesday appeared
to be the largest hacking and identity theft ring ever exposed.
http://www.iht.com/articles/2008/08/06/business/06theft.php

July 2008
Bush Administration Announces Restructuring of Intelligence Agencies
By
Joby Warrick
The Bush administration today announced a restructuring of the nation's
intelligence-gathering apparatus, approving new guidelines that bolster the
authority of the Office of the Director of National Intelligence (DNI) as the
leader of the nation's 16 spy agencies.
http://www.washingtonpost.com/wp-dyn/content/article/2008/07/31/AR2008073101655.html

Secret Defense Data Lost on UK Government USBs
By
James Rogers
The U.K.’s Ministry of Defence (MoD) has admitted that 121 USB sticks, including
five containing secret information, have been lost or stolen since 2004, in the
British government’s latest embarrassing data breach .
http://www.darkreading.com/document.asp?doc_id=159479&WT.svl=news1_5

IG: DHS has problems with top secret data
By
Alice Lipowicz
The Homeland Security Department still has problems handling classified top
secret intelligence information, according to a new report from the department’s
Office of the Inspector General.
http://www.fcw.com/online/news/153292-1.html

Terrorism and the Internet
By Aaron Sudholt
As the Internet continues to dominate the world over, the nation's military is
considering how to better handle threats posed by attacks through it.
http://stclairjournal.stltoday.com/articles/2008/07/26/news/sj2tn20080726-0730fhj-technet.ii1.txt

Beijing's red spider's web
By
Dan Verton
The fall of the Soviet Union and the end of the Cold War had a profound impact
not only on how security and intelligence professionals viewed the world of
espionage but also on the motivations of the players and the targets of their
espionage activities.
http://www.atimes.com/atimes/China/JG22Ad01.html

Firms Tackle Security Flaw In Web Addressing System
By Christopher Rhoads
A computer researcher revealed a fundamental flaw in the Internet's addressing
system, necessitating a massive Internet security upgrade primarily for
businesses and service providers, according to a division of the Department of
Homeland Security.
http://online.wsj.com/article/SB121557348238938533.html?mod=googlenews_wsj

Cyberspace becoming a legal battleground
By
Adrian McCoy
It could only happen in cyberspace. Someone commits a crime and posts the
evidence online for the world to see.
http://www.post-gazette.com/pg/08187/894946-96.stm

The Citizen Watchdogs of Web 2.0
By
Jeremy Caplan
Buzz From John Edwards' haircut to Hillary Clinton's tear, Web videos have
played a well-publicized role in generating buzz about this year's presidential
candidates. As influential as those viral clips may be, though, a broader role
is arising for so-called voter-generated content. Civic-minded techies are
increasingly bringing Web 2.0 to political activism, developing new watchdog
tools that open up congressional machinery for ordinary citizens to scrutinize
and critique.
http://www.time.com/time/business/article/0,8599,1819187,00.html?xid=rss-topstories

Judge Orders Google to Turn Over YouTube Records
By Miguel Helft
A federal judge in New York has ordered Google to turn over to Viacom a database
linking users of YouTube, the Web’s largest video site by far, with every clip
they have watched there.
http://www.nytimes.com/2008/07/04/technology/04youtube.html?hp

Public institutions' Web sites target of cyber-attacks
By
The Yomiuri Shimbun
Since March, many Web sites of public institutions such as municipal governments
have been altered by cyber-attacks using the method called SQL injection, it has
been learned. The attacks are conducted ingeniously by hacking into the server
that manages the Web site and setting up a program that infects the site with
computer viruses.
http://www.yomiuri.co.jp/dy/national/20080702TDY03305.htm

June 2008
Hackers Hijack Sites of Internet Organizations
By
Stefanie Hoffman
Turkish hackers broke into two of the most established international Websites
that oversee and regulate the Internet in order to reroute visitors to a rogue
domain, the New York Times reported Friday.
http://www.crn.com/security/208801497

Cyber-terrorism legislation approved by State Senate
By Eric Gross
Legislation sponsored by State Senator Vincent Leibell that cracks down on
computer transgression by creating the new crimes of cyber-terrorism, computer
intrusion and the use of a minor in the commission of a computer offense has
been approved in the New York State Senate.
http://www.zwire.com

Lloyd's faces up to threat of e-crime
By Neon Kelly
The growing trend of organised gangs turning to e-crime has been confirmed by
Lloyd’s of London, whose networks have been bombarded by structured and
competent attacks.
http://www.whatpc.co.uk/computing/analysis/2219887/lloyd-faces-threat-crime

Congress Reaches Deal on Wiretapping Bill
By
Eric Lichtblau
After months of wrangling, Democratic and Republican leaders reached a deal
Thursday that would re-write the rules for the government’s wiretapping powers,
and would provide what amounts to limited immunity to the telephone companies
that took part in President Bush’s warrantless eavesdropping program after the
Sept. 11 attacks.
http://www.nytimes.com/2008/06/20/washington/20fisacnd.html?hp

Groups ask court to reverse ruling, limit laptop searches at border
By Gautham Nagesh
Two advocacy groups are pressing a federal appeals court to rule that government
officials at U.S. borders are not allowed to search, download or seize
information on travelers’ laptop computers without reasonable suspicion.
http://www.nextgov.com/nextgov/ng_20080613_2643.php?zone=itsecurity

Data breaches usually come from company soft spots, study finds
By
Joseph Menn
Most thefts of sensitive information from corporations occur when the victimized
companies don't know what data they have, where they have it or who has access
to it, according to a study released Wednesday by Verizon Communications Inc.
http://www.latimes.com/la-fi-breaches11-2008jun11,0,6127882.story

Cyber criminals overseas steal U.S. electronic health records
By Bob Brewin
In 2004, when Bush administration officials unveiled a project to provide every
American with an electronic health record by 2014, they pledged to put privacy
and security first. But the discovery in April of stolen health records
containing sensitive medical information about U.S. patients on a computer
server in Malaysia controlled by cyber criminals indicates such records so far
do not pass the privacy and security test.
http://www.nextgov.com/nextgov/ng_20080613_6536.php?zone=ngtoday

Security hole in software exposes world's utilities to Net attacks
By
Jordan Robertson
Attackers could gain control of water treatment plants, natural gas pipelines
and other critical utilities because of a vulnerability in the software that
runs some of those facilities, security researchers reported Wednesday.
http://www.usatoday.com

NJ congressman's computer hacked from China
By
Robert Cohen
A New Jersey congressman says he is one of at least three lawmakers whose
computers have been hacked from China, apparently in search of information about
political dissidents and human rights legislation.
http://www.nj.com/news/index.ssf/2008/06/nj_congressmans_computer_hacke.html

N.Y. attorney general forces ISPs to curb Usenet access
By Declan McCullagh
New York Attorney General Andrew Cuomo announced on Tuesday that Verizon
Communications, Time Warner Cable, and Sprint would "shut down major sources of
online child pornography."
http://news.cnet.com/8301-13578_3-9964895-38.html

The evolution of national security
By Andrew B. Einhorn
Last week, the White House issued a new directive providing instructions for
standardizing the methods employed by federal agencies to collect, maintain and
share biometric data such as fingerprints and other physiological or behavioral
characteristics of suspected terrorists.
http://ohmygov.com/blogs/general_news/archive/2008/06/10/white-house-issues-order-to-share-terrorist-biometric-data.aspx

Taking a byte into crime
By
Editorial Staff
From the beginning, we opposed creation of a KBI -- a Kentucky Bureau of
Investigation. We thought that, in the hands of the wrong attorney general, it
could become a political dark arts squad, assigned to partisan mischief. The
good news is that Kentucky's new attorney general, Jack Conway, has renamed the
thing and given it needed focus. It's now his Department of Criminal
Investigations, in which he has created a Cybercrimes Division to pursue
wrongdoers on the Internet, taking responsibility for evidence that is found in
computer and cell phone memory and helping parents protect youngsters from
Internet predators.
http://www.courier-journal.com/apps/pbcs.dll/article?AID=/20080610/OPINION01/806100348

NY Bank ‘loses’ 4.5M unencrypted customer records
By
Michael Krigsman
In yet another unbelievable story of data irresponsibility, the Bank of New York
(BNY) Mellon lost two sets of unencrypted backup tapes containing private data
belonging to 4.5 million individuals. Third-party vendors misplaced the tapes
during transport to off-site locations. According to the bank, the tapes
“included shareowner and plan participant account information, such as name,
mailing address, Social Security number, and transaction activity.”
http://blogs.zdnet.com/projectfailures/?p=603&tag=nl.e550

May 2008
Comcast.net site is hacked briefly
By Associated Press Staff
Hackers took over Comcast Corp.'s Web portal
for several hours overnight, denying 14.1 million subscribers access to the
cable company's site for e-mail, news and technical support.
http://www.chicagotribune.com/business/technology/sns-ap-tec-comcast-web-hack,0,3610680.story

Chinese hackers pose serious danger to U.S. computer networks
By Shane Harris
Computer hackers in China, including those
working on behalf of the Chinese government and military, have penetrated deeply
into the information systems of U.S. companies and government agencies, stolen
proprietary information from American executives in advance of their business
meetings in China, and, in a few cases, gained access to electric power plants
in the United States, possibly triggering two recent and widespread blackouts in
Florida and the Northeast, according to U.S. government officials and
computer-security experts.
http://www.govexec.com/story_page.cfm?articleid=40112&dcn=e_gvet

Cyber Terrorism Threat Growing, EU Agency Says
By Jennifer LeClaire
The threat of cyber terrorism is growing, the
European Network and Information Security Agency has warned. ENISA urged more
European Union investments in security to avoid a "digital 9/11." Andrea Pirotti,
executive director of ENISA, urged the EU to require reporting on security
breaches and more cooperation among member states.
http://www.newsfactor.com/news/EU-Warned-of-Growing-Cyber-Threat/story.xhtml?story_id=1230048OPVML

Hackers make way for criminals in cyberspace
By Huw Jones
Attacking the European Union's Internet
backbone is now the preserve of organised crime, not young hackers out to prove
a point, the head of the bloc's Web security body said on Tuesday. Andrea
Pirotti, executive director of the European Network and Information Security
Agency (ENISA), said public authorities have been able to hold their own in the
contest -- so far.
http://www.guardian.co.uk/business/feedarticle/7542606

FBI releases details of expansive data-sharing program
By Andrew Noyes
The FBI released details this week about a
little-known information-sharing initiative known as N-DEx, or the Law
Enforcement National Data Exchange, which lets agents search and analyze crime
data on a secure Web site to help connect the dots between people, places and
events.
http://www.govexec.com/story_page.cfm?articleid=39839&sid=60

Homeland Security, FBI must reveal whether detained travelers are on watch list,
court order says
By Antonio Olivo
After years of being detained and interrogated
for hours by federal agents each time he returned from a trip abroad, Chicago
entrepreneur Akif Rahman could finally know whether his name is on a government
watch list for suspected terrorists, his attorneys said Wednesday.
http://www.chicagotribune.com/news/local/chi-watchlist-24-apr24,0,7847146.story

Home Office plans to create 'Big brother' database for phones calls, emails and
web use
By Andy Bloxham
The Home Office will create a database to
store the details of every phone call made, every email sent and every web page
visited by British citizens in the previous year under plans currently under
discussion, it has emerged. The Government wants to create the system to fight
terrorism and crime. The police and security services believe it will make it
easier to access important data as communications become more complex.
http://www.telegraph.co.uk

Analysis: Feds bust Romanian cyber-ring
By Shaun Waterman
U.S. indictments unsealed this week charge 38
people with being part of a multinational cybercrime ring that fooled thousands
of Americans into giving up credit card and bank information through spam "phishing"
e-mails and used it to steal millions of dollars.
http://www.upi.com

ID-protection ads come back to bite pitchman
By Associated Press Staff
Todd Davis has dared criminals for two years
to try stealing his identity: Ads for his fraud-prevention company, LifeLock,
even offer his Social Security number next to his smiling mug. Now, Lifelock
customers in Maryland, New Jersey and West Virginia are suing Davis, claiming
his service didn't work as promised and he knew it wouldn't, because the service
had failed even him.
http://www.mercurynews.com/ci_9343471?source=rss

US Air Force Prepares for Cyber Warfare
By Will Spencer
The Air Force has begun intensive research and
development to create cyber warfare tools. An announcement was placed in the
government website soliciting ideas for business opportunities. The solicitation
notice was released as the Dominant Cyber Offensive Engagement and Supporting
Technology effort by the Air Force Research Library.
http://www.americanchronicle.com/articles/62296

Routine conduct at risk with MySpace suicide case
By Anick Jesdanun
Think twice before you sign up for an online
service using a fake name or e-mail address. You could be committing a federal
crime. Federal prosecutors turned to a novel interpretation of computer hacking
law to indict a Missouri mother on charges connected to the suicide of a
13-year-old MySpace user. Prosecutors alleged that by helping create a MySpace
account in the name of someone who didn't exist, Lori Drew, 49, violated the
News Corp.-owned site's terms of service and thus illegally accessed protected
computers.
http://www.physorg.com/news130180938.html

Woman indicted in fatal cyber-bully case
By Dan Whitcomb
A Missouri woman who prosecutors say used a
fake MySpace persona to "torment, harass, humiliate and embarrass" a 13-year-old
girl who committed suicide was indicted on Thursday on federal charges.
http://www.reuters.com/article/domesticNews/idUSN1531758020080515

Internet fuels emergence of violent Islamist groups in the United States
By Katherine McIntire Peters
The violent Islamist terrorist threat has
evolved and expanded since al Qaeda planned the Sept. 11, 2001, terrorist
attacks, and radicalization of disaffected Muslims and recent converts to Islam
is increasingly occurring here in the United States. Yet the federal government
has "no cohesive and comprehensive outreach and communications strategy in place
to confront this thread." Those are among the findings of a new report by the
staff of the Senate Homeland Security and Governmental Affairs Committee.
http://www.govexec.com/story_page.cfm?articleid=39998&dcn=e_gvet

Criminals try to 'copyright' malware
By Jordan Robertson
Even criminal hackers want to protect their
intellectual property, and they've come up with a method akin to copyrighting —
with an appropriate dash of Internet thuggery thrown in. Professional virus
writers are now selling a suite of software on the Internet with an unusual
attachment: a detailed licensing agreement that promises penalties for
redistributing the malicious code without permission.
http://www.usatoday.com/tech/news/computersecurity/2008-04-30-criminals-malware_N.htm

April 2008
The Art of Cyber Warfare, Part 1: The Digital Battlefield
By Jack M. Germain
Computer network attacks are often perpetrated
by gangs of criminal hackers attempting to break into a system for financial
gain. However, cyber attacks for political purposes could just as easily be --
and sometimes are -- perpetrated. A country's national security could be
severely threatened should a team of hackers successfully crack certain computer
systems.
http://www.technewsworld.com/story/The-Art-of-Cyber-Warfare-Part-1-The-Digital-Battlefield-62779.html#

German intel agency blasted for cyber espionage
By Robert Lemos
Eight months after the nation's chancellor
accused China of information attacks, Germany now faces criticism over its
intelligence agency's use of software designed to spy on other countries'
officials.
http://www.securityfocus.com/brief/730

Agencies getting serious about virtual worlds
By Anne Laurent
The National Defense University is building a
600-seat auditorium above an island in a virtual world. Ten days ago, the Air
Force put out a call to gauge companies’ interest in prototyping a virtual base.
The Transportation Department has constructed a synthetic world with IBM. Last
year, the State Department held an eight-hour jazz fest for 300 avatars and
chatted in Second Life with 20 others from Canada and Poland about student
visas.
http://www.nextgov.com/nextgov/ng_20080428_3630.php?zone=ngtoday

Radio Free Europe says it’s under cyber attack
By Associated Press
Several Web sites of the U.S.-funded Radio
Free Europe/Radio Liberty have been attacked, the broadcaster said today,
suggesting the Belarus government could be responsible. In the form of a
denial-of-service attack that floods servers with fake traffic so legitimate
visitors cannot get through, the assault began Saturday and continues, the
network said in a statement.
http://www.bostonherald.com/news/international/europe/view.bg?articleid=1090260&srvc=rss

FBI releases details of expansive data-sharing program
By Andrew Noyes
The FBI released details this week about a
little-known information-sharing initiative known as N-DEx, or the Law
Enforcement National Data Exchange, which lets agents search and analyze crime
data on a secure Web site to help connect the dots between people, places and
events.
http://www.govexec.com/story_page.cfm?articleid=39839&dcn=e_gvet

Malicious microprocessor opens new doors for attack
By Robert McMillan
Researchers have found a difficult but viable
method for hacking a PC's microprocessor -- an attack that would be devastating
and virtually undetectable. For years, hackers have focused on finding bugs in
computer software that give them unauthorized access to computer systems, but
now there's another way to break in: Hack the microprocessor.
http://www.infoworld.com/article/08/04/15/Malicious-microprocessor-opens-new-doors-for-attack_1.html

Europe facing radicalization over the Web
By Olivier Guitta
Bernard Squarcini the head of the DST
(Direction de la Surveillance du Territoire), the French equivalent of the FBI,
told the French daily Libération regarding Islamic radicalization: "An
ideological transformation can be done in three months on the Web. An individual
can at night auto-radicalize himself via the Web and get in touch with leaders
of terrorist organizations." This assessment shows how dire the situation is in
Europe when it comes to al-Qaida's use of the Web.
http://www.metimes.com/International/2008/04/20/europe_facing_radicalization_over_the_web/5616/

Unwittingly hosting terror
By Brian Grow, Keith Epstein and Chi-Chu
Tschang
For more than a year, a Burlington-based
Internet company hosted a website that taught its members how to outfit a
suicide bomber, aired Al Qaeda propaganda videos, and offered an "exclusive"
Taliban video showing the beheadings of three "spies," according to computer
records.
http://www.boston.com/news/nation/articles/2008/03/27/unwittingly_hosting_terror/

The New E-spionage Threat
By Brian Grow, Keith Epstein and Chi-Chu
Tschang
A BusinessWeek probe of rising attacks on
America's most sensitive computer networks uncovers startling security gaps.
The e-mail message addressed to a Booz Allen Hamilton executive was mundane—a
shopping list sent over by the Pentagon of weaponry India wanted to buy. But the
missive turned out to be a brilliant fake. Lurking beneath the description of
aircraft, engines, and radar equipment was an insidious piece of computer code
known as "Poison Ivy" designed to suck sensitive data out of the $4 billion
consulting firm's computer network.
http://www.businessweek.com/print/magazine/content/08_16/b4080032218430.htm

FBI Data Transfers Via Telecoms Questioned
By Ellen Nakashima
When FBI investigators probing New York
prostitution rings, Boston organized crime or potential terrorist plots anywhere
want access to a suspect's telephone contacts, technicians at a
telecommunications carrier served with a government order can, with the click of
a mouse, instantly transfer key data along a computer circuit to an FBI
technology office in Quantico.
http://www.washingtonpost.com/wp-dyn/content/article/2008/04/07/AR2008040702364.html?hpid=moreheadlines

Army urged to develop process to wage war in cyberspace
By Greg Grant
With wars increasingly fought among the
people, information is now an element of combat power as important as lethal
action in determining a conflict's eventual outcome, said an Army officer who
heads the services computer warfare efforts.
http://www.govexec.com/story_page.cfm?articleid=39733&dcn=e_gvet

Commercial Espionage: Travelers Beware
By Scott Louis Weber
We are addicted to information and cannot go
long without being "connected." Indeed, while you are reading this article you
will likely check your e-mail or instant message a friend or colleague.
Traveling with technology is commonplace. Whether we are on the move for
business or pleasure, technology allows us to remain in communication with our
personal and business lives, 24/7, without any travel interruptions. But look
out. All this can be just fodder for spies.
http://www.forbes.com/opinions/2008/04/08/viator-corporate-espionage-oped-cx_slw_0408viator.html

Nato creates cyber-defence command
By Nick Heath
Nato is creating a cyber-defence command to
protect its allies against crippling online attacks on national infrastructures.
The Cyber Defence Management Authority (CDMA) will co-ordinate cyber-defence
among Nato allies after its formation was backed by members at a Nato summit in
Bucharest last week.
http://news.zdnet.co.uk/security/0,1000000189,39382597,00.htm

Zombie Computers Decried As Imminent National Threat
By Ryan Singel
Across the world, thousands of home computers
have been conscripted into zombie computer gangs that cyber criminals use to
spam, attack and defraud others on the net, causing considerable consternation
to law enforcement and security professionals alike, who count the so-called
botnets as the most vexing net threat today.
http://blog.wired.com/27bstroke6/2008/04/zombie-computer.html

Congress to industry: 'We need your help'
By William Jackson
Making national cybersecurity policy is an
always difficult and often thankless task, the director of a House subcommittee
told an audience Wednesday at the RSA Security conference. “One of the things
that make cybersecurity difficult is that there are a lot of mixed messages out
there,” said Jacob Olcott of the House Homeland Security Subcommittee on
Emerging Threats, Cyber Security, and Science and Technology. Some see the
threat of cyberterrorism as a reality, and others think dire pronouncements are
overblown. “There is a lot of disagreement about what, exactly, we’re dealing
with.”
http://www.gcn.com/online/vol1_no1/46086-1.html

US Cyberwarfare Prep Includes Offense
By Anick Jesdanun
U.S. military officials seeking to boost the
nation's cyberwarfare capabilities are looking beyond defending the Internet:
They are developing ways to launch virtual attacks on enemies. But first the
military will have to figure out the proper boundaries.
http://www.wtopnews.com/?nid=108&sid=1381656

March 2008
EU Debates Cybercrime Law Enforcement
By Jan Sliva
Two groups working separately to boost
Europe's defenses against online crime will present proposals this week, almost
a year after most of the nation of Estonia's links to the Internet were
disrupted for days or weeks.
http://www.physorg.com/news126199429.html

Mukasey: piracy funding terror
By Jordon Robertson
Attorney General Michael Mukasey warned Friday
that the huge profits generated from piracy and counterfeiting are increasingly
flowing into the coffers of terrorist groups.
http://www.thestate.com/technology-wire/story/359147.html

Cyberterrorism, hacktivism: Trying to find hope
By Scott Stewart
Watching the behavior of countries like China
and the United States underscores one of the most important insights you can
have into geopolitics: Essentially, the world community is in anarchy. The world
stage is in a Hobbesian state of nature; there are no rules for those with
enough strength or influence to avoid them.
http://media.www.unogateway.com

Hannaford breach raises new fears
By Clarke Canfield and Brian Bergstein
At first, it sounded like another in a long
line of credit card breaches: Up to 4.2 million account numbers were stolen by
thieves who cracked computers at Hannaford Bros. Co., an Eastern supermarket
chain. But the specifics of the crime, revealed this week, included some
troubling twists that might expose big holes in the payment industry's security
standards.
http://www.denverpost.com/nationworld/ci_8640617

Military to Boost Cyber-Protections
By Lolita Baldor
The military is beefing up efforts to gather
intelligence, fend off cyber-attacks and improve relations with other nations as
part of a strategy for keeping the U.S. safe while fighting two wars, according
to a Pentagon document.
http://www.gopusa.com/news/2008/march/0319_military_cyber1.shtml

Some Viruses Come Pre-Installed
By Jordan Robertson
From iPods to navigation systems, some of
today's hottest gadgets are landing on store shelves with some unwanted extras
from the factory - pre-installed viruses that steal passwords, open doors for
hackers and make computers spew spam.
http://www.physorg.com/news124646014.html

Online Terrorism is Global Concern
By Mandy Clark
While people work hard on their computers - so
too do the Internet viruses or malicious software known as malware. Cyber
experts say hundreds of thousands of them bombard personal computers every day.
Far from being a mere nuisance, these bugs threaten modern life.
http://www.voanews.com/english/2008-03-13-voa17.cfm

NSA's Domestic Spying Grows As Agency Sweeps Up Data
By Siobhan Gorman
Five years ago, Congress killed an
experimental Pentagon antiterrorism program meant to vacuum up electronic data
about people in the U.S. to search for suspicious patterns. Opponents called it
too broad an intrusion on Americans' privacy, even after the Sept. 11 terrorist
attacks.
http://online.wsj.com/public/article/SB120511973377523845.html?mod=blog

U.S. unprepared for ongoing cyberwar, say top military and intelligence
officials
By Bob Brewin
The United States is in the midst of a
cyberwar and is not prepared to deal with it, top Defense Department and
intelligence officials acknowledged this week.
http://www.govexec.com/story_page.cfm?articleid=39466&dcn=todaysnews

Windows Hacked in Seconds Via Firewire
By Matthew Broersma
A New Zealand security researcher has
published a software tool allowing attackers to quickly gain access to Windows
systems via a Firewire port.
http://computerworld.co.nz/news.nsf/scrt/939892823D52DE75CC25740300048AD0

OMB reports 60 percent increase in information security incidents
By Jill R. Aitoro
The number of information security incidents
reported by federal agencies jumped from 5,146 in fiscal 2006 to 12,986 last
year, with a 70 percent increase in unauthorized access to federal networks
alone, according to a report from the Office of Management released Saturday.
http://www.govexec.com/story_page.cfm?articleid=39425&dcn=e_nextgov

February 2008
Why no united front on cyber crime? Divided we fall…
By Simon Moores
The internet is certainly not safe. The
statistics may show the risk of crime is decreasing in some areas because of new
technical measures and policies. But elsewhere, under the extreme pressures of
criminal interests, new leaks are appearing in the collective firewall. They may
become a flood if not tackled quickly. That growing influence of serious and
organised crime in cyberspace is the focus of representatives from business,
finance, government and law enforcement agencies at next week's sixth
international e-Crime Congress in London.
http://management.silicon.com/government/0,39024677,39170197,00.htm

German court limits cyber spying
By Staff Reporter
Germany's highest court has restricted the
right of the security services to spy on the computers of suspected criminals
and terrorists.
http://news.bbc.co.uk/1/hi/world/europe/7266543.stm

Report: Agencies lack identity theft protections even after lapses
By Frederic J. Frommer
Nearly two years after an embarrassing flap in
which veterans' personal information was put at risk of identity theft, federal
agencies are still not doing all they can to prevent further lapses,
investigators have found.
http://www.govexec.com/story_page.cfm?articleid=39347&sid=1

Government still suffers from information insecurity
By Jill R. Aitoro
Federal agencies continue to struggle with
information security, according to a new report from the Government
Accountability Office. Weak access controls, network device configuration, and
management procedures leave systems vulnerable to malicious attacks and data at
risk of exposure.
http://www.govexec.com/story_page.cfm?articleid=39314&dcn=e_gvet

Cyberterrorism, Inc
By Peter Buxbaum
A new report says that 2008 will see an
expansion of economic espionage in which nation-states and companies will use
cybertheft of data to gain economic advantage in multinational deals.
http://www.speroforum.com/site/article.asp?id=14354&tag=

Combating Enemies Online
By James Jay Carafano and Richard Weitz
Even before the terrorist attacks of September
11, 2001, security experts were becoming increasingly concerned about the
vulnerability of U.S. computer systems and associated infrastructure. The 9/11
attacks amplified these concerns.
http://frontpagemagazine.com/Articles/Read.aspx?GUID=4FC31039-5A9C-4ADC-97EB-583829145052

Microsoft Helps Nab $900M Piracy Ring
By Jessica Mintz
Near-perfect knockoffs of 21 different
Microsoft programs began surfacing around the world just over a decade ago.
Soon, PCs in more than a dozen countries were running illegal copies of Windows
and Office, turning unwitting consumers into criminals and, Microsoft says,
exposing them to increased risk of malicious viruses and spyware.
http://www.examiner.com/a-1208462~Microsoft_Helps_Nab__900M_Piracy_Ring.html?cid=sec-promo

Bush administration proposes $7.3 billion for IT security
By Jill R. Aitoro
President Bush's proposed budget for fiscal
2009 includes $7.3 billion for cybersecurity efforts -- a 9.8 percent increase
from last year and a 73 percent increase from fiscal 2004.
http://www.govexec.com/story_page.cfm?articleid=39252&dcn=e_nextgov

U.S. Intelligence Uncovers ‘Russian Threat’
By Dmitry Sidorov
U.S. Congress held annual hearings on security
issues, based on the report by National Intelligence Director Michael McConnell.
Along with al-Qaeda, Iraq, and Iran, U.S. intelligence officials listed Russia
and China among the outer threats. Moscow and Beijing are charged with using
their growing economic influence in the world for advancing their own political
goals, and with cyber-terrorism.
http://www.kommersant.com/p850125/r_527/U.S._spy_chiefs_list_Russia_among_threats/

January 2008
Swedish Bank Stops Digital Theft
By Staff Reporter
A gang of Swedish criminals was seconds away
from completing a digital bank heist when an alert employee literally pulled the
plug on their brazen scam, investigators said Wednesday. The would be bank
robbers had placed "advanced technical equipment" under the employee's desk that
allowed them to take control of his computer remotely, prosecutor Thomas Balter
Nordenman said in a statement.
http://www.newsvine.com/_news/2008/01/30/1265825-swedish-bank-stops-digital-theft

Bush To Request $6 Billion to Combat Cyber-Terrorism
By Tim Stevens
Just last week it was revealed that the group
that perpetrated the cyber-attacks on Estonian networks, escalating the already
high tension between that nation and its neighbor Russia, wasn't really a group
at all. It was a 20-year-old hacker from within Estonia itself. That revelation
was a bit of a wake-up call for the global community -- that a strong-minded
individual could create an international incident without much trouble.
President Bush seems to have been paying attention and is reportedly ready to
propose a $6 billion project to create some sort of National Security Agency for
American networks.
http://www.switched.com/2008/01/29/bush-wants-6-billion-for-cyberterrorism-protection/

Half Million Computers Infected by Bots Every Day
By Staff Reporter
Every day, some half a million computers are
infected by bots, according to data compiled by PandaLabs in its annual report
on malware activity in 2007. Bots are programs that operate as agents for a user
or another program to simulate human activity, and malicious bots can take
complete control of the infected system. Once they have control over several
hundred computers, cyber-criminals can connect them to create botnets.
http://www.govtech.com/gt/252775?topic=117671

Bush Order Expands Network Monitoring
By Ellen Nakashima
President Bush signed a directive this month
that expands the intelligence community's role in monitoring Internet traffic to
protect against a rising number of attacks on federal agencies' computer
systems.
http://www.washingtonpost.com/wp-dyn/content/article/2008/01/25/AR2008012503261.html?hpid=moreheadlines

Free Encryption Tool for Al Qaeda Supporters Gets an Upgrade
By Kelly Jackson Higgins
A Website frequented by al Qaeda supporters
has released an upgrade to an encryption software tool for Islamic militants to
communicate more privately and securely over the Internet -- with a stronger
form of encryption, according to a Reuters report.
http://www.darkreading.com/document.asp?doc_id=143780

CIA Says Hackers Have Cut Power Grid
By Robert McMillan
Criminals have been able to hack into computer
systems via the Internet and cut power to several cities, a U.S. Central
Intelligence Agency analyst said this week.
http://www.pcworld.com/article/id,141564-c,hackers/article.html

Hack Attack Hits 10,000 Web Sites
By Gregg Keizer
A large-scale hack of legitimate Web sites to
infect visitors' PCs is much more massive than first thought, researchers said
Friday. At least 10,000 sites have been compromised, and have hijacked unpatched
systems that steered to their URLs.
http://www.pcworld.com/article/id,141544-page,1/article.html

Al Qaeda Claims Its Space On The Web
By Staff Reporter
The internet has long been an al Qaeda
stronghold - a center for raising money and spreading propaganda. A record 97
messages were posted in 2007. But now, the cyber world has also largely replaced
conventional training camps and has become the primary location where Islamic
radicals are recruited, trained and sent on their way to carry out attacks.
http://www.cbsnews.com/stories/2008/01/17/eveningnews/main3725693.shtml

FBI wants instant access to British identity data
By Owen Bowcott
Senior British police officials are talking to
the FBI about an international database to hunt for major criminals and
terrorists. The US-initiated programme, "Server in the Sky", would take
cooperation between the police forces way beyond the current faxing of
fingerprints across the Atlantic. Allies in the "war against terror" - the US,
UK, Australia, Canada and New Zealand - have formed a working group, the
International Information Consortium, to plan their strategy.
http://www.guardian.co.uk/humanrights/story/0,,2241005,00.html

US drafting plan to allow government access to any email or Web search
By Staff Reporter
National Intelligence Director Mike McConnell
is drawing up plans for cyberspace spying that would make the current debate on
warrantless wiretaps look like a "walk in the park," according to an interview
published in the New Yorker's print edition today.
http://rawstory.com//printstory.php?story=8868

Al-Qaeda’s 007
By Gordon Corera
The extraordinary story of the solitary
computer geek in a Shepherds Bush bedsit who became the world’s most wanted
cyber-jihadist.
http://women.timesonline.co.uk/tol/life_and_style/women/the_way_we_live/article3191517.ece

One Way to Stop Exposing SSNs
By Allan Holmes
A Wisconsin government agency, like some
companies, federal agencies and other organizations, has decided that the way to
avoid accidentally exposing Social Security Numbers is to, well, not use them at
all to identify citizens. The state's Department of Health and Family Services,
which administers the state's Medicaid program, said this week that it would
randomly generate ID numbers for the state's 800,000 Medicaid recipients instead
of using their Social Security Number. The announcement immediately follows an
incident in which EDS, which holds the contract to process the state's Medicaid
claims, accidentally printed and mailed the Social Security Numbers of Wisconsin
Medicaid recipients on newsletters. Another Wisconsin agency made a similar
mistake last year.
http://blogs.govexec.com/techinsider/archives/2008/01/one_way_to_stop_exposing_ssns.php

Calif. Expands Privacy Protections; U.S. Sits By
By Allan Holmes
California has led the nation in passing laws
to protect private data, and it continues to hold true to the role. This past
Tuesday, a California law went into effect expanding the state's groundbreaking
security breach notification law, the nation's first law requiring companies to
notify customers if a cyberattack exposes personal financial information.
http://blogs.govexec.com/techinsider/archives/2008/01/calif_expands_privacy_protecti.php

Nato secrets USB stick lost in Swedish library
By Jan Libbenga
The discovery of a USB memory stick containing
classified NATO information in a library in Stockholm has prompted a meeting
between the Swedish Military Intelligence and Security Service and foreign
defence officials.
http://www.theregister.co.uk/2008/01/04/another_stick_with_military_secrets_found/

Missing computer has info on 10,500 airmen
By Erik Holmes
A laptop computer with personal information of
10,501 active-duty and retired airmen is missing from Bolling Air Force Base in
Washington, an Air Force official confirmed Wednesday.
http://www.airforcetimes.com/news/2008/01/airforce_missing_computer_080102/

Hackers From China Force Pa. To Shut Down State Web Site
By Staff Reporter
HARRISBURG, Pa. -- Pennsylvania's state
government Web site was almost completely shut down Friday after it was
infiltrated by hackers from China, but officials said they found no evidence of
damage. Four departments had security problems with their Web pages, leading to
a decision to take nearly all of the state's Internet site down on Friday
morning. Office of Administration spokeswoman Mia DeVane said there was no
reason to think anyone's personal data had been compromised or that any damage
occurred when a hacker "got into what we would say is a back door."
http://www.nbc10.com/technology/14982217/detail.html?rss=phi&psp=news

If Your Hard Drive Could Testify ...
By Adam Liptak
A couple of years ago, Michael T. Arnold
landed at the Los Angeles International Airport after a 20-hour flight from the
Philippines. He had his laptop with him, and a customs officer took a look at
what was on his hard drive. Clicking on folders called “Kodak pictures” and
“Kodak memories,” the officer found child pornography.
http://www.nytimes.com

IRS incorrectly claimed security issues had been corrected
By Jill R. Aitoro
In addition to addressing less than 30 percent
of the information security weaknesses highlighted in a 2007 Government
Accountability Office report, the Internal Revenue Service provided false claims
about its progress, according to a Government Accountability Office auditor.
http://www.govexec.com/story_page.cfm?articleid=38990&dcn=e_gvet

FAA warns of Boeing 787 hacker vulnerability
By Paul Miller
Boeing's still in the final stages of
production on its 787 Dreamliner mid-sized jet, but the FAA has already spotted
what looks to be a serious security vulnerability in the plane's IT
infrastructure. Apparently the computers that provide the 787's passenger area
with in-flight internet access and other amenities are physically networked with
the main plane computers, including control, navigation and communication
systems, which could theoretically provide a path for a hacker to screw with the
plane, and even go as far as take full control of the 787.
http://www.engadget.com/2008/01/06/faa-warns-of-boeing-787-hacker-vulnerability/

December 2007
Groups: Record data breaches in 2007
By Mark Jewell
The loss or theft of personal data such as
credit card and Social Security numbers soared to unprecedented levels in 2007,
and the trend isn't expected to turn around anytime soon as hackers stay a step
ahead of security and laptops disappear with sensitive information.
http://www.businessweek.com/ap/financialnews/D8TRVTIO0.htm

Satellite-Surveillance Plan Aims to Mollify Critics
By Siobhan Gorman
After delaying a domestic
satellite-surveillance program for more than two months, Homeland Security
Secretary Michael Chertoff expects to finalize a new charter for it this week, a
move that attempts to quell civil-liberties concerns and get the program back on
track.
http://online.wsj.com/article/SB119812248622741723.html?mod=hps_us_whats_news

Hackers Use Stealthy, New Prg Banking Trojan to Attack Commercial Banking
Clients in Four Countries - Hackers Break Into Accounts without
Username/Passwords
By Don Jackson
SecureWorks has discovered a stealthy, new Prg
Banking Trojan. This new variant is the malware behind Zbot, a new botnet
designed specifically to do banking fraud. The hackers using this new malware
are specifically targeting banking clients that have commercial accounts. The
banking variant has been designed and is being used by the Russian UpLevel
hacking group and some German affiliates. The UpLevel hackers are staging their
latest attacks using data centers in Moscow, Russia, and Mumbai, India.
http://www.secureworks.com/research/threats/bankingprg/?threat=bankingprg

Israel used cyberwar against Syria
By Staff Reporter
The Israeli military used cyberwar techniques
to help blind Syrian air defenses prior to its strike on an alleged nuclear
facility at Dayr az-Zawr.
http://www.upi.com

NASA will check backgrounds despite criticism
By Aliya Sternstein
NASA is going forward with what some are
calling "invasive" background checks at all but one of its field centers despite
ongoing litigation to end the process at that facility, NASA officials said
Thursday.
http://www.govexec.com/story_page.cfm?articleid=38776&dcn=e_gvet

Hackers Launch Major Attack on US Military Labs
By John E. Dunn
Hackers have succeeded in breaking into the
computer systems of two of the U.S.' most important science labs, the Oak Ridge
National Laboratory (ORNL) in Tennessee and Los Alamos National Laboratory in
New Mexico.
http://www.pcworld.com/article/id,140390-c,hackers/article.html

Air Force moving ahead with Cyber Command
By Gautham Nagesh
The Air Force is moving ahead on establishing
its new Cyber Command, searching for permanent facilities and planning meetings
to establish rules by which it will operate, according to Air Force officials.
http://www.govexec.com/dailyfed/1207/120707n1.htm

Despite controversy, DHS continues use of data mining
By Alice Lipowicz
Although the Homeland Security Department
terminated a controversial visual analytics data mining program this summer, it
continues to engage in visual analytics research in a separate program, a
spokeswoman confirmed. The ongoing visual analytics research at the Science and
Technology Directorate is being publicized as a means of eventually identifying
terrorists through potential use of data collected from video surveillance
footage, cell phone calls, photos, bank records, chat rooms and e-mails. But no
real-world, operational data is actually being used in the research, said DHS
spokeswoman Amy Kudwa.
http://www.gcn.com/online/vol1_no1/45491-1.html?topic=homeland-security

Passport applicant finds massive privacy breach
By Kenyon Wallace
A security flaw in Passport Canada's website
has allowed easy access to the personal information - including social insurance
numbers, dates of birth and driver's licence numbers - of people applying for
new passports.
http://www.theglobeandmail.com

DHS launches pilot to integrate fingerprint databases with FBI
By Jill R. Aitoro
The Homeland Security Department began this
week testing a fingerprint scanning application in certain airports so it can
tap into an FBI database to identify more accurately whether visiting foreigners
may be criminals, illegal immigrants or terrorists.
http://www.govexec.com/story_page.cfm?articleid=38755&dcn=e_gvet

Chinese Hackers Accused of Attacking Shell, Rolls Royce
By Jeremy Kirk
Britain's domestic intelligence agency is
warning that cybercrime perpetrated by China is on the rise following hacking
attacks against Rolls-Royce and Royal Dutch Shell.
http://www.pcworld.com/article/id,140221-c,hackers/article.html

Government 'failing on e-crime'
By Rory Cellan-Jones
Responsibility for investigating e-crime is
split between agencies. IT chiefs at some of the UK's biggest companies have
accused the government of failing to take e-crime seriously.
http://news.bbc.co.uk/2/hi/technology/7128491.stm

Al Qaeda-linked Web sites number 5,600: researcher
By Ibtihal Hassan
RIYADH (Reuters) - There are now about 5,600
Web sites spreading al Qaeda's ideology worldwide, and 900 more are appearing
each year, a Saudi researcher told a national security conference on Tuesday.
Saudi Arabia, the world's biggest oil exporter, has identified the Internet as a
key battlefield with militants who launched a campaign to topple the U.S.-allied
ruling royal family in 2003.
http://www.reuters.com/article/topNews/idUSL0488465620071204?feedType=RSS&feedName=topNews&sp=true

The Trojans are inside the computer gates
By Michael Evans
The golden rule in the counter-espionage
business is that when your “enemies” get more sophisticated you have to keep one
step ahead of them, particularly when the threat is an electronic one. The
Chinese and Russians have now become so adept at hacking into computer systems
that MI5 has had to issue a general warning to all government departments and
defence companies to take extra precautions to protect their most sensitive
information.
http://www.timesonline.co.uk/tol/news/politics/article2980544.ece

November
Hacker threat to U.S. rising
By Dave Montgomery
While U.S. forces in Iraq and Afghanistan
engage the enemy with guns, tanks, airplanes and missiles, the American military
is quietly fighting a much different kind of war on a new front – cyberspace.
http://www.sacbee.com/111/story/520067.html

U.K. rocked by loss of 25m records
By Joab Jackson
U.S. agency officials stung by data loss can
take some solace in the fact that the United States isn’t the only country
struggling with data security issues. A U.K. finance head admitted last week
that Her Majesty's Revenue and Customs department (HMRC) lost 25 million records
with personal information.
http://www.gcn.com/online/vol1_no1/45464-1.html

Cyber wars and the West
By Staff Reporter
In the spring of 2005, Mirsad Bektasevic and
Cesur Abdulkadir shared a small apartment in Sarajevo. They watched with dismay
as Western television networks gave their take on the wars in Iraq and
Afghanistan. They grew enraged. And they vowed to strike back.
http://www.cbc.ca/news/viewpoint/vp_gillespie/2007/11/cyber_wars_and_the_west_1.html

Militants refine web tactics
By Staff Reporter
Islamist militants are becoming more skilled
at tailoring their message to specific audiences, including women and children,
and Western societies are struggling to find a response. That was the message
from a meeting hosted by the Organisation for Security and Cooperation in Europe
(OSCE) this week, attended by leading experts on Islamist radicalisation.
http://www.stuff.co.nz/stuff/4280823a28.html

States clammed up after 9/11
By John Gramlich
The 2001 terrorist attacks led every state but
South Dakota to restrict access to information deemed critical to homeland
security — from architectural blueprints to emergency evacuation routes,
according to a comprehensive, state-by-state study of post-9/11 changes to
open-government laws.
http://www.stateline.org/live/details/story?contentId=258013

Bureau warns on tainted discs
By Yang Kuo-wen, Lin Ching-chuan and Rich
Chang
Portable hard discs sold locally and produced
by US disk-drive manufacturer Seagate Technology have been found to carry Trojan
horse viruses that automatically upload to Beijing Web sites anything the
computer user saves on the hard disc, the Investigation Bureau said. Around
1,800 of the portable Maxtor hard discs, produced in Thailand, carried two
Trojan horse viruses: autorun.inf and ghost.pif, the bureau under the Ministry
of Justice said.
http://www.taipeitimes.com/News/taiwan/archives/2007/11/11/2003387202

EU justice ministers agree limited data protection rules (Roundup)
By Staff Reporter
Brussels - European Union justice ministers
Friday agreed on a minimum set of rules protecting the cross-border exchange of
personal data by law-enforcement agencies in the 27 member states.
http://news.monstersandcritics.com/

Alicia Keys' MySpace Page Sings with Malicious Code
By Steven Schwankert
When a visitor views the page, an exploit
first attempts to install malware on the visitor's computer if it is not
properly patched. Thompson said he was not sure yet which flaw the malware was
looking to exploit. If that is not successful, the user is then asked to install
a fake codec to view a video.
http://www.pcworld.com/article/id,139472-c,hackers/article.html

Intelligence community developing virtual world analysis tools
By Mark Mazzetti
The Intelligence Advanced Research Projects
Activity project is directed by Jeffery Morrison, who runs the Analyst Space for
Exploitation (A-SpaceX) program. Morrison says his project is designed to
harness technologies to help the 15 agencies that report to the Office of the
Director of National Intelligence to change from a "need to know" culture to a
"need to share" culture.
http://www.govexec.com/story_page.cfm?articleid=38498&dcn=todaysnews

October
$43.5 Billion Spying Budget for Year, Not Including Military
By Mark Mazzetti
Congress authorized spending of $43.5 billion
over the past year to operate spy satellites, remote surveillance stations and
C.I.A. outposts overseas, according to a budget figure released Tuesday by Mike
McConnell, director of national intelligence.
http://www.nytimes.com/2007/10/31/washington/31intel.html?_r=1&oref=slogin

Austria plans to start conducting secret online searches in 2008
By Staff Reporter
It is planned that the police will use online
searches in Austria from autumn 2008 onwards. According to a report of the radio
station Ö1, the Minister of Justice, Maria Berger (SPÖ) [Social Democratic Party
of Austria] and her colleague, the Minister for Internal Affairs, Günther
Platter (ÖVP) [Austrian People's Party] have agreed to this. In the station's
morning news show called "Morgenjournal" Platter maintained that online searches
would only be used in the case of serious crime or suspicion of supporting a
terrorist organisation. The law drafted by Platter and Berger is to be discussed
today in a cabinet meeting. After that a group of experts will settle the legal
and technical details arising from the use of a Trojan program.
http://www.heise.de/english/newsticker/news/97595

Reports of federal security breaches double in four months
By Jill R. Aitoro
Federal agencies report an average of 30
incidents a day in which Americans' personally identifiable information is
exposed, double the number of incidents reported early this summer, according to
the top information technology executive in the Bush administration.
http://www.govexec.com/story_page.cfm?articleid=38348&dcn=e_hsw

IG: DHS has yet to properly secure networks
By Jill R. Aitoro
The Homeland Security Department, chastised by
Congress and security experts for having some of the worst information security
practices in government, has improved its security plan and policies but now
must begin deploying its plan, according to a report recently released by the
department's inspector general.
http://www.govexec.com/story_page.cfm?articleid=38312&dcn=e_tcmg

Tighter security over power plant computer systems urged
By Jill R. Aitoro
Current regulations to protect the control
systems that support power plants nationwide fall short of federal
recommendations, posing a serious threat to the electric infrastructure and
national security, witnesses testified at a hearing Wednesday. One lawmaker
threatened legislation if standards don't improve.
http://www.govexec.com/story_page.cfm?articleid=38319&dcn=e_tcmg

Verizon Says It Turned Over Data Without Court Orders
By Ellen Nakashima
Verizon Communications, the nation's
second-largest telecom company, told congressional investigators that it has
provided customers' telephone records to federal authorities in emergency cases
without court orders hundreds of times since 2005.
http://www.washingtonpost.com/wp-dyn/content/article/2007/10/15/AR2007101501857.html?hpid=topnews

Critical Infrastructure Protection: Multiple Efforts to Secure Control Systems
Are Under Way, but Challenges Remain
By GAO
Control systems--computer-based systems that
monitor and control sensitive processes and physical functions--perform vital
functions in many of our nation's critical infrastructures, including electric
power, oil and gas, water treatment, and chemical production. The disruption of
control systems could have a significant impact on public health and safety,
which makes securing them a national priority. GAO was asked to (1) determine
cyber threats, vulnerabilities, and the potential impact of attacks on critical
infrastructure control systems; (2) determine the challenges to securing these
systems; (3) identify private sector initiatives to strengthen the cybersecurity
of control systems; and (4) assess the adequacy of public sector initiatives to
strengthen the cybersecurity of control systems. To address these objectives, we
met with federal and private sector officials to identify risks, initiatives,
and challenges. We also compared agency plans to best practices for securing
critical infrastructures.
http://www.gao.gov/docsearch/abstract.php?rptno=GAO-07-1036

An Internet Jihad Aims at U.S. Viewers
By Michael Moss
When Osama bin Laden issued his videotaped
message to the American people last month, a young jihad enthusiast went online
to help spread the word.
http://www.nytimes.com/2007/10/15/us/15net.html?_r=2&oref=slogin&oref=slogin

19 year old to be arraigned for breaching US 911 emergency call system
By Staff Reporter
Washington State resident Randall Ellis, 19,
will be arraigned on 22nd October for abusing the 911 emergency call system. It
appears that he has a method for spoofing the origin of a 911 call, and is
believed to have used this to make over 200 hoax emergency calls throughout the
US over a period of a couple of years. However, as reported by the Orange County
Register, his latest exploit came near to ending in tragedy on the night of 29th
March this year. He reported a bogus drug-related shooting at an apparently
randomly selected private address in Lake Forest, Orange County, California,
eliciting a full armed response from the authorities.
http://www.heise-security.co.uk/news/97549

Researchers Take 'Internet Census'. Computer Security, Infrastructure Issues Top
List of Reasons for Study
By Ashley Phillips
For the first time, researchers have conducted
an Internet census by mapping the Web's nearly 3 billion assigned IP addresses,
an effort that could provide important clues to how to fight computer viruses,
according to the University of Southern California Information Sciences
Institute.
http://abcnews.go.com/Technology/TenWays/story?id=3713460&page=1

Qaeda Goes Dark After a U.S. Slip, Enemy Vanishes From Its Web Sites
By Eli Lake
Al Qaeda's Internet communications system has
suddenly gone dark to American intelligence after the leak of Osama bin Laden's
September 11 speech inadvertently disclosed the fact that we had penetrated the
enemy's system.
http://www.nysun.com/article/64163

August VA systems outage crippled western hospitals, clinics
By Bob Brewin
A day-long system outage at a new Veterans
Affairs Department data processing center in northern California on Aug. 31
crippled critical information systems used to manage patient care at VA
hospitals and clinics scattered across more than a third of the world, according
to details from an internal VA after-action report.
http://www.govexec.com/story_page.cfm?articleid=38235&sid=1

September
"Cyber Jihadist" Trial Opens New Front in Anti-Terror Fight
By Sonia Phalnikar
Defining what constitutes terrorism on the
Internet poses new challenges for governments. In a landmark case, a court in
Germany will decide whether posting terrorist propaganda and calls to violence
on the Internet is tantamount to supporting terrorism as it tries a man for
conducting a "virtual jihad."
http://www.dw-world.de/dw/article/0,2144,2800263,00.html

Estonia urges UN Member States to cooperate against cyber crimes
By UN Staff
The international community should step up its
efforts to defeat cyber crime, starting by acceding to an international
convention on the issue and eventually building to the development of a globally
negotiated and comprehensive law of cyberspace, Estonia’s President Toomas
Hendrik Ilves told the General Assembly tonight.
http://www.un.org/apps/news/story.asp?NewsID=23977&Cr=general&Cr1=debate

Contractor Blamed in DHS Data Breaches
By Ellen Nakashima and Brian Krebs
The FBI is investigating a major information
technology firm with a $1.7 billion Department of Homeland Security contract
after it allegedly failed to detect cyber break-ins traced to a Chinese-language
Web site and then tried to cover up its deficiencies, according to congressional
investigators.
http://www.washingtonpost.com/wp-dyn/content/article/2007/09/23/AR2007092301471.html

Mouse click could plunge city into darkness, experts say Story Highlights
By Jeanne Meserve
Researchers who launched an experimental cyber
attack caused a generator to self-destruct, alarming the government and
electrical industry about what might happen if such an attack were carried out
on a larger scale, CNN has learned.
http://www.cnn.com/2007/US/09/27/power.at.risk/index.html

GIMF Develops Defensive and Offensive Software for Jihadi Operations
By Abdul Hameed Bakier
In July 2007, jihadi forums announced the
creation of a new computer program called the Secrets of the Mujahideen, version
1.0. The objective of the program—which was published and distributed by the
Global Islamic Media Front (GIMF) through many jihadi websites—is to replace the
old and unreliable PGP corporation encryption tools that jihadis had used in the
past. Since the release of the program, jihadi websites, especially the GIMF,
are instructing their subscribers to communicate using the program's encryption
keys (http://ebnseren.modawanati.com, March 22). Furthermore, al-Qaeda
operatives are using Secrets of the Mujahideen in an attempt to avoid U.S.
eavesdropping operations against them (http://el-bilad.com, July 6).
http://www.jamestown.org/terrorism/news/article.php?articleid=2373681

Terrorism and Internet Use
By Brent MacLean
The great and many wondrous virtues of the
Internet—its ease of access, lack of regulation, the potential audiences it
caters to, and its fast flow of information, among others have been turned to
the advantage of groups committed to terrorizing societies to achieve their
selective goals. Today, most active terrorist groups have established their
presence in some way or another on the Internet. Terrorism on the Internet is an
extremely dynamic phenomenon: websites suddenly emerge, frequently modify their
formats, and then swiftly disappear—or, in many cases, seem to disappear by
changing their online address but retaining much the same content.
http://www.canadafreepress.com/2007/internet-security092107.htm

Swedish hacker slams US agencies, thanks Indians for support
By Abhishek Behl
In an exclusive telephonic interview, a
Swedish hacker slammed the US government in believing the dictum ‘security in
obscurity’. He appreciated the support of Indians in exposing the security
loopholes.
http://www.merinews.com/catFull.jsp?articleID=126448

Bin Laden, Brought to You by . . .
By Joby Warrick
Early yesterday morning, a South Carolina Web
designer who works at home managed to scoop al-Qaeda by publicly unveiling its
new video, a feat she has accomplished numerous times since 2002. Within hours,
cable news stations were broadcasting images of Osama bin Laden commemorating
the Sept. 11, 2001, terrorist attacks, and crediting the 50-year-old woman, who
uses the pseudonym Laura Mansfield.
http://www.washingtonpost.com/wp-dyn/content/article/2007/09/11/AR2007091102465.html

Pa. Welfare Department Computers Stolen
By Staff Writer
HARRISBURG, Pa. — Burglars stole two computers
containing records on people who receive medical assistance benefits for mental
health and substance abuse treatment, state officials said Tuesday.
http://www.chron.com/disp/story.mpl/ap/fn/5125978.html

Cyber attacks: a new weapon in the state arsenal
By Staff Writer
Cyber-attacks against government networks in
recent months illustrate how states like China are discovering the power of a
new weapon that is less expensive and more discreet than battalions of tanks or
spies.
http://afp.google.com/article/ALeqM5izkiUz-8u1rsvfDH29rJEsd17clw

TSP to halt use of Social Security numbers as account IDs
By Brittany R. Ballenstedt
In an effort to enhance security, the 3.8
million participants in the federal Thrift Savings Plan will no longer be
identified by their Social Security numbers, officials for the retirement
savings program announced Friday.
http://www.govexec.com/story_page.cfm?articleid=37972&dcn=e_gvet

Homeland Security drops data-mining program
By Michael J. Sniffen
The Homeland Security Department has given up
on one of its broadest anti-terrorism data-mining tools after investigators
found it was tested with information about real people without the required
privacy safeguards.
http://www.govexec.com/story_page.cfm?articleid=37936&dcn=todaysnews

Alleged Chinese hacker attack stirs fears of digital cold war
By Tom A. Peter
Since news broke this week that Chinese
hackers, allegedly part of China's People's Liberation Army (PLA), had hacked
into US, British, and German government computers to access defense and
foreign-policy-related information, analysts have begun to speculate that the
West may be moving into something of a new age cold war stand-off with China.
http://www.csmonitor.com/2007/0906/p99s01-duts.html

Cyberwarfare: The mouse that roared
By Economist.com
A decade or so ago, thinkers and pundits were
fond of discussing the emerging threat of cyber attacks as a matter of
international affairs. The growing reliance of advanced economies on the
internet, and the increasing use of the internet by governments and armies,
seemed to offer vulnerability along with riches and convenience. The scare of
the “Y2K bug” seemed to highlight the danger, at least until it became obvious
that the bug was of no threat to anyone.
http://www.economist.com/displaystory.cfm?story_id=9752625

August
Hackers steal info on users of federal job site
By Brittany R. Ballenstedt
Hackers have stolen the names and contact
information of about 146,000 job seekers on the USAJOBS Web site, the Office of
Personnel Management revealed Wednesday.
http://www.govexec.com/story_page.cfm?articleid=37888&dcn=e_gvet

DHS upgrades databases
By Wilson P. Dizard III
The Homeland Security Department has unveiled
several important upgrades to databases that collectively contain tens of
millions of personal immigration and travel records.
http://www.gcn.com/print/26_22/44925-1.html?topic=homeland-security

Beijing police launch virtual Web patrol
By Staff Reporter
BEIJING - Police in China's capital said
Tuesday they will start patrolling the Web using animated beat officers that pop
up on a user's browser and walk, bike or drive across the screen warning them to
stay away from illegal Internet content.
http://www.msnbc.msn.com/id/20477258/

Merkel's China Visit Marred by Hacking Allegations
By Staff Reporter
German Chancellor Angela Merkel's visit to
China has been overshadowed by a report in SPIEGEL claiming that the Chinese
government has been hacking into computers in Merkel's chancellery and three
other Berlin ministries.
http://www.spiegel.de/international/world/0,1518,502169,00.html

Homeland Security to broaden sharing of visitor data
By Chris Strohm
The Homeland Security Department on Wednesday
announced broad changes for using a database that collects and stores
information on foreign travelers to the United States. In one of the biggest
changes, the department plans to regularly share information with U.S.
intelligence agencies, department officials said in an interview Thursday. "This
is a first step to make it clear that we do have the authority to conduct this
type of sharing and to make the public know that we do plan to do so in the
future," one official said on condition of anonymity.
http://www.govexec.com/story_page.cfm?articleid=37843&dcn=e_gvet

Death penalty proposed for cyber terrorism
By Staff Writer
ISLAMABAD: The Electronic Crimes Bill 2007 has
already been approved in principle by the federal cabinet and will be enacted
soon through an act or an ordinance.
http://www.thenews.com.pk/daily_detail.asp?id=69539

Exposing on-line Jihadists
By Judi McLeod
When it comes to capitalizing on the Worldwide
Internet, Al Qaida has shot up to the top of the list in the savvy category.
Jihadists working the Internet are prolific, so much so that they could easily
borrow a line in popular use during the Cold War: “They’re everywhere!”
http://www.canadafreepress.com/2007/cover081007.htm

DHS cuts time it will save passenger data
By Alice Lipowicz
In response to more than 600 public comments,
the Homeland Security Department has shortened the amount of time it will retain
data and made other changes to its Automated Targeting System (ATS).
http://www.fcw.com/article103446-08-07-07-Web

Border Computers Vulnerable to Attack
By Spencer S. Hsu
The U.S. government's main border control
system is plagued by computer security weaknesses, increasing the risk of
computer attacks, data thefts, and manipulation of millions of identity records
including passport, visa and Social Security numbers and the world's largest
fingerprint database, officials said.
http://www.washingtonpost.com/wp-dyn/content/article/2007/08/02/AR2007080202260.html?hpid=sec-nation

Computer Security Problems Found at IRS
By Jim Abrams
IRS employees ignored security rules and
turned over sensitive computer information to a caller posing as a technical
support person, according to a government study.
http://www.time.com/time/business/article/0,8599,1649553,00.html

NSA Spying Part of Broader Effort
By Dan Eggen
The Bush administration's chief intelligence
official said yesterday that President Bush authorized a series of secret
surveillance activities under a single executive order in late 2001. The
disclosure makes clear that a controversial National Security Agency program was
part of a much broader operation than the president previously described.
http://www.washingtonpost.com/wp-dyn/content/article/2007/07/31/AR2007073102137.html?hpid=topnews

July
FBI Seeks To Pay Telecoms For Data
By Ellen Nakashima
The FBI wants to pay the major
telecommunications companies to retain their customers' Internet and phone call
information for at least two years for the agency's use in counterterrorism
investigations and is asking Congress for $5 million a year to defray the cost,
according to FBI officials and budget documents.
http://www.washingtonpost.com/wp-dyn/content/article/2007/07/24/AR2007072402479.html

Internet Imams: Inside the Cyber-Jihad
By Christopher Dickey
Muslims in America have long resisted the
calls to violence preached in other parts of the world. But Al Qaeda and its
spinoffs are working hard to change that, and one of their most important tools
is the Internet. In a briefing for reporters last week, Edward Gistaro, the
national intelligence officer for transnational threats, noted that many
jihadist sites are now published in English as well as Arabic, and are "calling
for attacks against the United States." The concern is that loners and small
groups acting on their own will be inspired to kill, if not for Islam, then for
what former federal prosecutor Mary Jo White aptly describes as "the terrorists'
own self-created religion" based on rage against the West.
http://www.msnbc.msn.com/id/19886672/site/newsweek/

Point, click, terror?
By Zinia Sen
Social networking services can be used for
everything from publicizing a garage band to finding dates to connecting
supporters of democracy - and even terrorism!
http://timesofindia.indiatimes.com/Cities/City_Supplements/Calcutta_Times/Point_click_terror_/articleshow/2223383.cms

Hackers Steal U.S. Government, Corporate Data from PCs
By Jim Finkle
Hackers stole information from the U.S.
Department of Transportation and several U.S. companies by seducing employees
with fake job-listings on advertisements and e-mail, a computer security firm
said.
http://www.eweek.com/article2/0,1895,2159835,00.asp?kc=EWKNLGOV071807STR1

Homeland Security, E.U. reach agreement on passenger data sharing
By Brian Krebs
The global jihad landed in Linda Spence's
e-mail inbox during the summer of 2003, in the form of a message urging her to
verify her eBay account information. The 35-year-old New Jersey resident clicked
on the link included in the message, which took her to a counterfeit eBay site
where she entered personal financial information.
http://www.govexec.com/story_page.cfm?articleid=37398&dcn=e_hsw

Data on Americans Mined for Terror Risk
By Lara Jakes Jordan
The FBI is gathering and sorting information
about Americans to help search for potential terrorists, insurance cheats and
crooked pharmacists, according to a government report obtained Tuesday.
http://www.examiner.com/a-822338~Data_on_Americans_Mined_for_Terror_Risk.html

Three Worked the Web to Help Terrorists
By Elizabeth Newell
A new agreement between the Homeland Security
Department and the European Union, expected to be finalized in the coming weeks,
will clarify the manner in which DHS can use personal information about
international travelers collected from airline reservation systems.
http://www.washingtonpost.com/wp-dyn/content/article/2007/07/05/AR2007070501945_pf.html

High-tech border network could fall prey to cyberattacks
By Bob Brewin
The Homeland Security Department's planned
wireless network of high-tech towers to watch for illegal immigrants crossing
the border from Mexico into the United States is vulnerable to cyberattacks that
could shut the system down, according to security experts.
http://www.govexec.com/story_page.cfm?articleid=37393&dcn=e_gvet

June
Forum Users Improve Electronic Jihad Technology
By Abdul Hameed Bakier
The members of http://al-jinan.org have
targeted websites critical of Islam and Islamic rituals. They have labeled
themselves electronic jihadis and believe that they are engaging in an online
form of the jihad. The website distributes a program called Electronic Jihad
that assists in overwhelming the servers of certain websites, thereby taking the
websites offline, at least temporarily.
http://jamestown.org/terrorism/news/article.php?articleid=2373496

BP: Cyber terrorism threat is growing
By Fiona Raisbeck
A cyber terrorism attack on the UK
infrastructure will happen in the next five years, according to the Digital
Security Services Manager at BP. The British energy giant will develop
technology to protect the organisation and the national infrastructure against a
cyber terrorism attack over the next few years, said Rob Martin at the opening
of Symantec’s Security Operations Centre (SOC) yesterday.
http://scmagazine.com/uk/news/article/666240/bp-cyber-terrorism-threat-growing/

Cyber Attack Hits Pentagon
By AP Staff
The Defense Department took as many as 1,500
computers off line because of a cyber attack, Pentagon officials said Thursday.
Few details were released about the attack, which happened Wednesday, but
Defense Secretary Robert Gates said the computer systems would be working again
soon.
http://www.sfgate.com/cgi-bin/article.cgi?f=/n/a/2007/06/21/financial/f134611D07.DTL

Swiss Internet Terror Trial Opens
By Gabriella Broggi
BELLINZONA, Switzerland (AP) -- A North
African man and his wife went on trial Wednesday on charges they ran Web sites
that supported al-Qaida-linked groups with videos of people killed by terrorists
and information on how to make bombs.
http://www.kstp.com/article/stories/S119071.shtml?cat=6

France Warns Officials on BlackBerry Use
By John Leicester
PARIS - BlackBerry handhelds have been called
addictive, invasive, wonderful _ and now, a threat to French state secrets.
That, at least, is the fear of French government defense experts, who have
advised against their use by officials in France's corridors of power,
reportedly to avoid snooping by U.S. intelligence agencies.
http://www.casperstartribune.net/articles/2007/06/21/ap/hitech/d8psueeo1.txt

DHS acknowledges own computer break-ins
By Ted Bridis
WASHINGTON -- The Homeland Security
Department, the lead U.S. agency for fighting cyber threats, suffered more than
800 hacker break-ins, virus outbreaks and other computer security problems over
two years, senior officials acknowledged to Congress.
http://seattlepi.nwsource.com/national/1152AP_DHS_Computer_Security.html

Hackers Blamed For Data Breach That Compromised 300,000
By Sharon Gaudin
The FBI's investigation into a data breach that compromised sensitive
information on 300,000 people in Illinois is pointing to an outside hacker.
http://www.informationweek.com/story/showArticle.jhtml?articleID=199901334

FBI: Over one million computers working for botnets
By Jeremy Reimer
The US Department of Justice and the FBI have
released a statement that they have identified over one million computers who
have become part of a "botnet"—taken over by malicious software for the purpose
of sending out spam and attacking other computers. The FBI has been working with
industry partners such as Microsoft and the Computer Emergency Response Team
Coordination Center at Carnegie Mellon University.
http://arstechnica.com/news.ars/post/20070614-fbi-over-one-million-computers-working-for-botnets.html

The Internet: Midwife of Global Radicalism?
By Caryle Murphy
In a dimly lit, ninth-floor room of an office
building in northern Virginia, Ned Moran and his staff practice their craft of
cyber-surveillance. Seated at stylish chrome desks, uncluttered but for white
Mac iBooks, they finger tap their way into the most public arena visited by al-Qaida
and other extremist Islamist groups: the Internet.
http://www.science-spirit.org/newdirections.php?article_id=705

Army, Air Force seek to go on offensive in cyber war
By Bob Brewin
In an unusual act of candor, both the Army and
Air Force in the past two months have issued solicitations asking the computer
industry to provide technologies the services can use to wage offensive
cyberattacks against enemy computer systems.
http://www.govexec.com/story_page.cfm?articleid=37185&dcn=e_gvet

EU Approves Visa Data System
By AP Staff
The European Union on Tuesday approved a
European visa data system which will store biometric information like
fingerprints and photos on 70 million visa-holders who pass through the EU's
borderless travel zone each year.
http://www.physorg.com/news100866989.html

FAA Computer Glitch Causes Flight Delays
By Alan Zibel
WASHINGTON -- A cascading computer failure in
the nation's air-traffic control system caused severe flight delays and some
cancellations Friday along the East Coast. A computer system in Atlanta that
processes pilots' flights plans and sends them to air-traffic controllers failed
early Friday, Federal Aviation Administration spokeswoman Diane Spitaliere said.
In response, the agency rerouted the system's functions to another computer in
Salt Lake City, which overloaded because of the increased volume of data,
magnifying the problem.
http://www.chicagotribune.com/travel/sns-ap-flight-delays,1,288718.story?track=rss

Cyberwinter? Here's What It Means To Commercial IT
By Patricia Keefe
The recent distributed denial-of-service blitz
that has paralyzed parts of Estonia's government and commercial Web sites over
the past month has spawned a lot of talk of "cyberwinters" and "cyberterrorism."
While what happened to Estonia is unusual in its scope and focus, and is
possibly the first publicized attack on a country's cyberinfrastructure, it's
not necessarily a bellwether of trends to come.
http://www.informationweek.com/blog/main/archives/2007/06/cyber_winter_he.html

The NYT, the Voice of the KGB
By JüriUustalu
How the New York Times Traded Journalistic
Integrity for Vodka and Caviar.
Those of us who read the New York Times regularly have been shocked by what can
be at best described as pro Kremlin reporting or at worst, a case of outright
journalistic fraud.
http://www.epl.ee/sartikkel/1077

Terrorism, cyber and transnational crime top Aseanapol's priorities
By S Ramesh
SINGAPORE: International cooperation within
the police community gets a boost with ASEAN's police chiefs signing a
declaration of cooperation with Interpol on Wednesday.
http://www.channelnewsasia.com/stories/singaporelocalnews/view/280572/1/.html

Cyber-crime protection pushes new precedents for privacy
By John Blau
Law enforcement officials in Germany and
Austria are now among the first to have electronic access to each other's
fingerprint databases, the German Federal Ministry of the Interior said
yesterday. The two countries have shared their DNA databases since last year as
one of several measures agreed by some European Union nations under the Treaty
of Prum in 2005.
http://www.intergovworld.com/article/f8265ea10a01040800daab16f34211a8/pg1.htm

Singapore flags ASEAN data link with Interpol
By AFP
SINGAPORE: ASEAN will link up its common
database of criminal information with Interpol as the region steps up efforts to
combat crime and terrorism, a Singapore minister said on Monday.
http://www.dnaindia.com/report.asp?NewsID=1101084

May
Terrorism Targets On Wall Street
By Doug McIntyre
On Sept. 10, 2001, the Dow Jones industrial
average closed at 9,605.51. In the aftermath of the Sept. 11 terrorist attacks,
the market reopened on Sept. 17, 2001, and hit an intraday low of 8,755.46. The
market could not recover for a month.
http://www.forbes.com

Agencies told to limit use of Social Security numbers
By Michael J. Sniffen
Plagued by regular breaches in the security of
personal data, federal agencies were ordered Tuesday to eliminate the
unnecessary collection and use of Social Security numbers by early 2009.
http://www.govexec.com/story_page.cfm?articleid=37002&sid=1

Nations seek protection from growing threat of cyber warfare
By The Economist - Staff Writer
Imagine that agents of a hostile power,
working in conjunction with organized crime, could cause traffic jams in your
country's biggest cities that are big enough to paralyze business, media,
government and public services, and to cut you off from the world.
http://www.hamiltonspectator.com

GAO: FBI Network Wide Open to Hacking
By Allan Holmes
The FBI's effort to upgrade its computer
systems -- a program that has had numerous missteps and failures over the years
-- is again under fire. This time the Government Accountability Office concludes
in a report released this week that the FBI's new network has major security
lapses that leave the system open to hackers both inside the agency and out.
http://blogs.govexec.com/techinsider/archives/2007/05/gao_fbi_network_wide_open_to_h.html

Brussels to wage war on cyber crime
By Renata Goldirova
STRASBOURG – The European Commission has
tabled a proposal suggesting how to win the war against high-tech crimes such as
online fraud, child pornography and hacking - just days after institutional
websites in EU state Estonia were crippled by a series of cyber attacks.
http://euobserver.com/9/24107

Alcatel-Lucent trying to find lost disk
By Staff Writer
TRENTON, N.J. (AP) - Alcatel-Lucent (Nachrichten/Aktienkurs)
said Friday it is reviewing security procedures and has halted use of couriers
for sending personnel information after a computer disk with financial and other
data on employees and retirees went missing.
http://www.finanznachrichten.de/nachrichten-2007-05/artikel-8270943.asp

Estonia Urges E.U. And Nato For Strategy To Counter Cyber Terror
By Susheela Hegde
Tallinn, Estonia (AHN) - A distraught Estonia
urged Nato and the European Union to work out a strategy against cyber offenses
after being hit by the third wave of cyber attacks in three weeks on Thursday.
http://www.allheadlinenews.com/articles/7007386317

NSA seeks to open classified network to allies
By Bob Brewin
NSA and Defense plan to open a classified
network known as the Secret Internet Protocol Router Network (SIPRNet), to a
small pool of trusted allies, including Australia, Canada, the United Kingdom
and New Zealand, according to PowerPoint briefing slides dated April 27, 2007,
and prepared by NSA's Office of Assured Information Sharing Technologies and
Products.
http://www.govexec.com/story_page.cfm?articleid=36953&dcn=todaysnews

Estonia accuses Russia of ' waging cyber war'
By Tony Halpin
Estonia is accusing Russia of waging cyber war
against it by launching massive attacks on computer systems in the Baltic
republic. In an interview with The Times, Urmas Paet, the Estonian Foreign
Minister, accused the Kremlin of direct involvement in attempts to paralyse
Estonian government websites and telephone networks as part of a campaign of
unofficial sanctions.
http://www.timesonline.co.uk/tol/news/world/europe/article1802959.ece

Bush orders agencies to develop emergency operations plans
By Daniel Pulliam
President Bush signed a directive Wednesday
outlining a strategy for preparing the federal government to continue running
during a national emergency such as a terrorist attack or a natural disaster.
http://www.govexec.com/story_page.cfm?articleid=36884&dcn=e_gvet

FBI reaches out to clamp down on economic espionage
By Tom Breen
America has no friends when it comes to the
research that gives its companies, universities and government a competitive
edge. Countries all over the world - including friends and allies - would like
to have that research, and they would love to get it for free. To combat that,
the FBI is approaching universities and businesses to offer guidance and advice
on how to better recognize security breaches and to take steps to keep them from
happening.
http://www.zwire.com/site/news.cfm?newsid=18315135&BRD=2212&PAG=461&dept_id=465812&rfi=6

Homeland Security data-sharing systems criticized
By Winter Casey
The U.S. homeland security information-sharing
structure was criticized Thursday by witnesses at a House subcommittee hearing
-- with the failure to integrate existing communications systems being singled
out as a major culprit.
http://www.govexec.com/story_page.cfm?articleid=36888&dcn=e_tcmg

Report says Internet a key tool for extremists
By Mimi Hall
WASHINGTON — Government and community leaders
aren't doing enough to counter multimedia-savvy terrorists from using flashy
websites, provocative video games, hip-hop music and gruesome images of bloodied
Muslim children to recruit young people online, according to a new report that
says the Internet may be extremists' most powerful frontier.
http://www.usatoday.com/news/washington/2007-05-02-internet-extremists-report_N.htm

Lloyd's Report Warns of Threats from 'Political Violence'
By Staff Writer
A new report from Lloyd's and the Economist
Intelligence Unit (EIU) has found that global businesses are becoming
increasingly concerned about risks from political violence. However, too little
has been done to analyze those risks and to "really understand" their impact.
http://www.insurancejournal.com/news/international/2007/05/10/79591.htm

Air Force chief: 'Killing another nation's satellite is an act of war'
By Staff Writer
China’s anti-satellite weapon test earlier
this year was a “strategically dislocating event,” said Air Force Chief of Staff
Gen. Michael Moseley last week, who warned that any such attack on U.S.
satellites would be an act of war.
http://www.worldtribune.com/worldtribune/07/front2454224.913888889.html?tr=y&auid=2656481

TSA Loses Hard Drive With Personal Info
By Matt Apuzzo
WASHINGTON — The Transportation Security
Administration has lost a computer hard drive containing Social Security
numbers, bank data and payroll information for about 100,000 employees.
http://www.spokesmanreview.com/ap/story.asp?AP_ID=D8OTTA9O0

USDA officials apologize for exposing Social Security numbers
By Michael Posner
Top Agriculture Department officials conceded
Wednesday they discovered 38,700 Social Security numbers of farmers were
publicly available on the Internet only after a sleepless farm woman found hers
there one night.
http://www.govexec.com/story_page.cfm?articleid=36794&dcn=e_gvet

April
Cyber terror threat is growing, says Reid
By George Jones
Terrorists could attempt to cause economic
chaos or plane crashes in an electronic attack on the UK's computer networks
John Reid, the Home Secretary, said yesterday. Cyber terrorism could target air
traffic control systems.
http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2007/04/26/nterr26.xml

Joining forces against the digital enemy
By Tom Young
Security experts have been saying for some
time that cyber attacks against critical elements of the national infrastructure
are one of the biggest dangers we face today. And a growing number of
governments are starting to listen.
http://www.computing.co.uk/computing/analysis/2188580/joining-forces-against-digital

Fed breach leaks Social Security numbers
By Michael J. Sniffen
WASHINGTON -- The Social Security numbers of
63,000 people who received Agriculture Department grants have been posted on a
government Web site since 1996, but they were taken down last week. Free credit
monitoring is being offered to those affected.
http://seattlepi.nwsource.com/national/1152AP_Government_Data_Breach.html

New hacker techniques threaten agencies
By Aliya Sternstein
With hackers constantly concocting new types
of malicious software, government agencies are struggling to stay abreast of the
latest threats, according to testimony released Thursday by federal auditors.
http://www.govexec.com/story_page.cfm?articleid=36690&dcn=e_gvet

Government to test Internet routing in space
By Winter Casey
The U.S. government is moving forward with a
project to test Internet routing in space. Companies will work on a Defense
Department plan to determine the feasibility of conducting military
communications through an Internet router located there.
http://www.govexec.com/story_page.cfm?articleid=36689&dcn=e_gvet

Uncle Sam Gets a C-Minus for Information Security
By Brian Prince
A House committee gave
the federal government a grade of C-minus for 2006 as part of the committee's
annual assessment of how well information is protected on government computers.
http://www.eweek.com/article2/0,1895,2113592,00.asp?kc=EWGOVEMNL04180707EOAD

Wireless security puts IRS data at risk
By The Associated Press
Internal Revenue Service offices across the
nation that use wireless technology are still vulnerable to hackers, according
to the latest assessment of the agency's security policies released Tuesday.
http://www.businessweek.com/ap/financialnews/D8OIKNJG0.htm

Intelligence chief announces 100-day reform plan
By Daniel Pulliam
The new director of national intelligence on
Wednesday announced a 100-day initiative to improve "integration and
collaboration" among the federal government's 16 intelligence agencies.
http://www.govexec.com/story_page.cfm?articleid=36584&dcn=e_gvet

Another Social Security Breach at UC Leads to Further Call for Legislation
By Frank D. Russo
Assembly member Dave Jones Jones is the author
of legislation that would require all colleges and universities in California to
remove Social Security numbers from their Internet-accessible files unless their
inclusion is absolutely necessary.
http://www.californiaprogressreport.com/2007/04/another_social.html

March
Audit finds few problems with IRS outsourcing program
By Jenny Mandel
The Internal Revenue Service has done an
effective job in setting up a program for private sector companies to collect
federal tax debts, according to a recent audit, but some members of Congress and
an employee union are hoping to end the program before its planned expansion
later this year.
http://www.govexec.com/story_page.cfm?articleid=36491&dcn=e_gvet

Terror Database Has Quadrupled In Four Years
By Karen DeYoung
Each day, thousands of pieces of intelligence
information from around the world -- field reports, captured documents, news
from foreign allies and sometimes idle gossip -- arrive in a computer-filled
office in McLean, where analysts feed them into the nation's central list of
terrorists and terrorism suspects.
http://www.washingtonpost.com/wp-dyn/content/article/2007/03/24/AR2007032400944.html

TJX: At Least 45.7M Card Numbers Stolen
By AP staff
BOSTON Mar 29, 2007 (AP)— More than
two months after first disclosing that hackers accessed customers' financial
data from its computers, discount retailer TJX Cos. has revealed that
information from at least 45.7 million credit and debit cards was stolen over an
18-month period.
http://abcnews.go.com/Business/wireStory?id=2990845&Business=true

Experts Call for More Security in Sharing Airline Passenger Data
By DW staff
Data Protection experts in the EU and the US
are pushing for more security in the controversial gathering of key passenger
data by US authorities from European airlines as part of measures to fight
terrorism.
http://www.dw-world.de/dw/article/0%2C2144%2C2419460%2C00.html?tr=y&auid=2505957

Al-Qaeda terrorists among 10,000 who conned UK out of passports
By Gerri Peev
TWO convicted terrorists, including a key al-Qaeda
member, were among at least 10,000 applicants who fraudulently obtained
passports from the Home Office in the last year, ministers said.One of the men -
Dhiren Barot - was the al-Qaeda figure who planned radioactive "dirty" bombs in
London. He was convicted in December after admitting conspiracy to murder and
jailed for 40 years. He managed to obtain nine British passports, seven of them
in his name.
http://thescotsman.scotsman.com/index.cfm?id=435932007&tr=y&auid=2486243

Auditors urge DHS to assess privacy risks in data-mining program
By Chris Strohm
The Homeland Security Department has not built
adequate privacy protections into a data-mining program under development,
increasing the risk that innocent people could be tagged as terrorists or
criminals, government auditors concluded in a report Wednesday.
http://www.govexec.com/story_page.cfm?articleid=36416&dcn=e_gvet

Al-Qaeda plot to bring down UK internet
By David Leppard
SCOTLAND YARD has uncovered evidence that Al-Qaeda
has been plotting to bring down the internet in Britain, causing chaos to
business and the London Stock Exchange. In a series of raids, detectives have
recovered computer files revealing that terrorist suspects had targeted a
high-security internet “hub” in London.
http://www.timesonline.co.uk/tol/news/uk/crime/article1496831.ece

Census Bureau exposes personal data on public Web site
By Daniel Pulliam
The Census Bureau this week announced that it
accidentally posted personal information concerning 302 American households on a
Web site where it was publicly accessible intermittently for about five months.
http://www.govexec.com/story_page.cfm?articleid=36323&dcn=e_gvet

Feds test new data mining program
By John Yaukey
WASHINGTON —Lawmakers and privacy advocates
are concerned that a powerful new data searching tool being tested by the
Department of Homeland Security could pose a threat to Americans' privacy as it
sifts through mountains of information for patterns that might reveal
terrorists. Called ADVISE — for Analysis, Dissemination, Visualization, Insight
and Semantic Enhancement — the program is capable of linking and cross-matching
material from websites and blogs to government records and personal data.
http://www.usatoday.com/news/washington/2007-03-07-datatools_N.htm

CRS: Terrorists find fertile environment in
cyberspace
By Patience Wait
Finding proof that
terrorists plan to launch cyberattacks against the United States is difficult,
but the accessibility and vulnerability of the Internet to attack makes it a
growing threat. “The time may be approaching when a cyberattack may offer
advantages that cause terrorists to act, even if the probability of success or
level of effectiveness is unknown,” according to the Congressional Research
Service.
http://www.gcn.com/online/vol1_no1/43263-1.html?topic=homeland-security

February
How Modern Terrorism Uses the Internet
By Gabriel Weimann
The great virtues of the Internet—ease of
access, lack of regulation, vast potential audiences, and fast flow of
information, among others—have been turned to the advantage of groups committed
to terrorizing societies to achieve their goals. Today, all active terrorist
groups have established their presence on the Internet. Our scan of the Internet
in 2003–4 revealed hundreds of websites serving terrorists and their supporters.
http://www.asiantribune.com/index.php?q=node/4627&tr=y&auid=2389671

Study on privacy protections finds citizens distrust security agencies
By Andrew Noyes
The CIA, Homeland Security Department and
National Security Agency are the least trusted federal agencies when it comes to
protecting Americans' privacy, according to a new study by the Ponemon
Institute.
http://www.govexec.com/story_page.cfm?articleid=36167&dcn=e_gvet

Satellite wars are coming next
By Deborah Housen-Couriel
China's successful test of
a ballistic anti-satellite missile last month by blowing up one of its own
weather satellites without prior warning, and Iran's recent announcement that it
has developed a similar long-range ballistic missile, are two strong indications
that the time has come for decision-makers in the West to sit up and pay
attention to a new dimension of global strategic concern.
http://www.jpost.com/servlet/Satellite?cid=1170359860633&pagename=JPost/JPArticle/ShowFull&tr=y&auid=2375646

By Frederick W.
Stakelbeck Jr.
The internet
has become an important part of Chinese culture, with the country’s increasingly
diverse population embracing the technology’s many powerful features. According
to the state-controlled think tank China Internet Network Information Centre (CINIC),
the country had 137 million internet users as of December 2006, up 26 million
users, or 23.4 percent, from 2005.
http://frontpagemagazine.com/Articles/ReadArticle.asp?ID=26723

VA loses sensitive information on 1.3 million doctors
By Daniel Pulliam
The hard drive that went missing from a
Birmingham, Ala., Veterans Affairs Department facility last month contained
highly sensitive information on nearly all U.S. physicians and medical data for
about 535,000 VA patients, agency officials announced over the weekend.
http://www.govexec.com/story_page.cfm?articleid=36113&dcn=e_gvet

New IT spending aimed partly at cybersecurity
By Aliya Sternstein
The president's proposal to increase funding
for federal information technology programs by almost 3 percent over last year's
budget request is aimed partly at fortifying cybersecurity, White House Office
of Management and Budget officials said Wednesday.
http://www.govexec.com/story_page.cfm?articleid=36081&dcn=e_tcmg

Hackers overwhelm key Web computers
By Ted Bridis
WASHINGTON - Hackers
briefly overwhelmed at least three of the 13 computers that help manage global
computer traffic Tuesday in one of the most significant attacks against the
Internet since 2002.
http://www.msnbc.msn.com/id/17011675/

Does data mining even work?
By William Jackson
The specter of agencies trawling databases of
personal information in search of clues to terrorist activity raises difficult
questions about balancing privacy with security, but witnesses at a recent
Senate Judiciary Committee hearing helpfully cut through a lot of the fog to
simplify this issue.
http://www.gcn.com/print/26_03/43074-1.html?topic=techreport

Google blots out Iraq basis on Internet
By Thomas Harding
British military bases in Iraq have been
"blotted" out from Google Earth maps at the request of the Government to hinder
terrorist attacks, it can be revealed.
http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2007/01/20/wgoogle20.xml

GAO's new high-risk list looks much like the old one
By Florence Olsen
The Government
Accountability Office has added three federal program areas to its high-risk
series report. Released today, the report highlights the need to protect
technologies critical to national security, improve food safety and pay for
transportation improvements. GAO’s auditors emphasized in their high-risk series
report that critical technologies continue to be the targets of theft,
espionage, reverse engineering and illegal export.
http://www.fcw.com/article97524-01-31-07-Web

January
Navy developing massive information network
By Daniel Pulliam
Navy Department officials are in the early
stages of developing a massive information network that will encompass all
existing department networks including the much maligned Navy-Marine Corps
Intranet.
http://www.govexec.com/story_page.cfm?articleid=35978&dcn=e_gvet

Thrift Savings Plan hacker attack prompts extra precautions
By Karen Rutzick
Hackers breached the accounts of some Thrift
Savings Plan participants in late December, stealing $35,000 and prompting
officials to encourage extra safeguards.
http://www.govexec.com/story_page.cfm?articleid=35873&dcn=e_gvet

December 2006
Physical details of all residents to be held on ID database
By
Hamish Macdonell
EVERYBODY living in the United Kingdom,
including foreigners, will be required to have their biometric details recorded
under the government's identity card scheme, it emerged yesterday. John Reid,
the Home Secretary, announced that all UK residents, whether or not they were
British citizens, would be forced to have their irises scanned and their
fingerprints taken for the national database.
http://news.scotsman.com/uk.cfm?id=1887262006

U.S. Warns of Threat to Satellites
By Barry Schweid
WASHINGTON -- The Bush administration warned
Wednesday against threats by terrorist groups and other nations against U.S.
commercial and military satellites, and discounted the need for a treaty aimed
at preventing an arms race in space.
http://www.latimes.com/news/nationworld/politics/wire/sns-ap-us-space,1,6056241.story?coll=sns-ap-politics-headlines&ctrack=1&cset=true

U.S.-Canada
Trusted Traveler Program Upgraded, Expanded
By CBP
Headquarters, Office of Public Affairs
Washington, D.C. – U.S. Customs and Border
Protection announced today that three NEXUS trusted traveler programs have been
integrated into a single program. This integration means that there will be one
application form and fee to participate in all modes of the NEXUS program - air,
land and marine. In addition, NEXUS will provide processing locations at
additional airports in Canada throughout 2007.
http://www.customs.treas.gov/xp/cgov/newsroom/news_releases/12142006.xml

DHS, industry use LOGIIC to combat cyberthreats
By Kerri Hostetler
The Homeland Security
Department has teamed with 13 organizations on a 12-month project to secure the
process control systems of the nation’s oil and gas industries against
cybersecurity threats. A cyberattack on the control and data systems of electric
power plants, or oil and gas refineries and pipelines—two of 17 pieces of the
nation’s critical infrastructure—could potentially bring the country to a halt.
The problem is compounded because private companies control 85 percent to 90
percent of the country’s critical infrastructure—leaving the government few
avenues to ensure that IT systems are secure.
http://www.gcn.com/print/25_34/42765-1.html?topic=homeland-security

Internet criminals to step up "cyberwar" in 2007
By Peter Griffiths
LONDON (Reuters) - Computer hackers will open
a new front in the multi-billion pound "cyberwar" in 2007, targeting mobile
phones, instant messaging and community Web sites such as MySpace, security
experts predict. As people grow wise to email scams, criminal gangs will find
new ways to commit online fraud, sell fake goods or steal corporate secrets.
http://today.reuters.com/news/articlenews.aspx?type=internetNews&storyid=2006-12-11T171049Z_01_L1038087_RTRUKOC_0_US-BRITAIN-CYBERCRIME.xml&src=rss&rpc=22

DHS floats proposal for 'Global Envelope' of
terrorist info sharing
By Wilson P. Dizard III
A senior Homeland Security
Department official today sketched the outline of an ambitious plan for
internationally sharing biometric identification information about individuals
who pose terrorist threats. Robert Mocny, acting director of the U.S. Visitor
and Immigrant Status Indicator Technology program, outlined a proposal under
which the United States would begin exchanging information about terrorists
first with closely allied governments in Britain, Europe and Japan ,and then
progressively extend the program to other countries as a means of foiling
terrorist attacks.
http://www.gcn.com/online/vol1_no1/42677-1.html?topic=homeland-security

Traveler screening to continue despite public outcry
By Chris Strohm
The Homeland Security Department plans to
continue using a controversial program to screen all travelers to and from the
United States, despite mounting calls that the program be suspended until
Congress and the public have more time to investigate it.
http://www.govexec.com/story_page.cfm?articleid=35601&dcn=e_gvet

FBI taps cell phone mic as eavesdropping tool
By Declan McCullagh
The FBI appears to have begun using a novel
form of electronic surveillance in criminal investigations: remotely activating
a mobile phone's microphone and using it to eavesdrop on nearby conversations.
http://articles.techrepublic.com.com/2100-1035_11-6140191.html?tag=nl.e019

November
Countries obligated to share data, U.S. official says
By Chris Strohm
A senior Homeland Security official said
Wednesday that countries have an obligation to share information with each other
on potentially dangerous travelers. He estimated that a global identity
management system could be operational by the end of the decade.
http://www.govexec.com/story_page.cfm?articleid=35574&dcn=e_gvet

Immigration services bureau loses thousands of records
By Daniel Pulliam
The U.S. Citizenship and Immigration Services
agency may have processed as many as 30,000 citizenship applications in 2005
without reviewing critical background files, thousands of which have been lost,
according to a new report from the Government Accountability Office.
http://www.govexec.com/story_page.cfm?articleid=35568&dcn=e_gvet

Security agency to eliminate millions in retention allowances
By Jonathan Marino
The Homeland Security Department's Federal
Protective Service recently announced that it plans to end a retention allowance
program that benefits hundreds of police and investigators, as it continues to
fight a funding shortfall.
http://www.govexec.com/story_page.cfm?articleid=35569&dcn=e_gvet

Saving the Data
By Chris
Preimesberger
U.S. businesses are going to have to change
the way they handle electronically stored information when new federal rules go
into effect Dec. 1. The new regulations, adopted by the U.S. Supreme Court in
April, say businesses must be able to quickly find such data when required by
the federal court.
http://www.eweek.com/article2/0,1895,2064416,00.asp?kc=EWGOVEMNL112906EOAD

Air Force to create Cyber Command
By Josh Rogin
The Air Force
announced plans this month to create a Cyber Command to bring full-scale
military operations to cyberspace, although no one knows if the tactics and
policies that the Defense Department uses to wage war will be effective on the
cyber battlefield.
http://www.fcw.com/article96791-11-13-06-Print

Policing terror
By John Moore
Thinking of local
police as first responders recognizes only one of the important contributions
they can make to homeland security. A recent Rand report suggests that local law
enforcement is the critical line of defense for thwarting homegrown terrorist
activity.
http://www.fcw.com/article96760-11-13-06-Print

Officials eye 50-percent mark on cyber compliance
By Heather Greenfield
HERNDON, Va. -- A survey of information
technology officials found that most expect to be 50 percent compliant with
federal cyber-security guidelines within the next year.
http://www.govexec.com/story_page.cfm?articleid=35482&dcn=e_tcmg

Homeland Security eyes data fusion in states, localities
By Chris Strohm
The Homeland Security Department hopes to
improve information sharing with state and local government fusion centers by
giving those centers intelligence officers and an advanced communications
network for classified information, a senior official said Friday.
http://www.govexec.com/story_page.cfm?articleid=35412&dcn=e_hsw

October
Hackers Disrupt Online Brokers
By Jonathan
Keehner and Kevin Drawbaugh
NEW YORK (Reuters)—High-tech crooks using
spyware are costing U.S. discount brokerages millions of dollars to repay
clients who have been victimized by fraud, the brokerages said in recent days.
http://www.eweek.com/article2/0,1895,2037003,00.asp?kc=EWGOVEMNL102506EOAD

Agency explores new tool to connect intelligence dots
By Shane Harris
The government's top intelligence agency is
building a computerized system to search very large stores of information for
patterns of activity that look like terrorist planning.
http://www.govexec.com/story_page.cfm?articleid=35310&dcn=e_hsw

Business data breaches found to be more costly than thought
By Heather Greenfield
A new study reports that data breaches may
cost companies even more than previously thought. The Ponemon Institute released
its annual study on the cost of data breaches and found that they cost companies
on average $182 per compromised record.
http://www.govexec.com/story_page.cfm?articleid=35328&dcn=e_gvet

Congress gives DHS six months to revise terrorist watch lists
By Chris Strohm
With frustration levels apparently reaching an
all-time high, lawmakers have given the Homeland Security Department a hard
deadline to revamp its process for clearing individuals who have been wrongly
put on terrorist watch lists.
http://www.govexec.com/story_page.cfm?articleid=35246&dcn=e_gvet

Privacy groups rap DHS plan to limit access to clearance information
By Jonathan Marino
Privacy advocates have voiced strong
opposition to the Homeland Security Department's proposal to scale back the
amount of information that security clearance applicants can access about
government investigations of their background.
http://www.govexec.com/story_page.cfm?articleid=35214&dcn=e_gvet

Chinese crackers attack US.gov
By John Leyden
Chinese hackers have launched a sustained
attack against the web systems of the US Department of Commerce. Security
experts reckon attacks originating from computer crackers largely located in
China's Guangdong province are aimed at extracting sensitive information from
targets such as the Commerce Department's technology export office.
http://www.theregister.co.uk/2006/10/09/chinese_crackers_attack_us/

September
Report points to flaws in Energy agency's IT security
By Daniel Pulliam
The information security program at the Energy
Department division governing the natural gas industry, oil pipelines and
hydroelectric projects fails to meet federal requirements, leaving the agency at
risk to cyberattacks, auditors concluded in a recent report.
http://www.govexec.com/story_page.cfm?articleid=35155&dcn=e_gvet

VA installs encryption software on thousands of laptops
By Daniel Pulliam
The Veterans Affairs Department installed
encryption software on nearly 15,000 laptop computers during the past two weeks
in an attempt to better protect sensitive information against misuse, officials
told lawmakers Tuesday.
http://www.govexec.com/story_page.cfm?articleid=35117&dcn=e_gvet

Googling for ATM Master Passwords
By Ryan
Naraine
Using clues obtained from a YouTube video and
a simple four-word Google search engine query, a criminal can find step-by-step
instructions for how to hack into and take control of thousands of ATMs
scattered around the United States.
http://www.eweek.com/article2/0,1895,2018674,00.asp?kc=EWFINEMNL092506EOAD

Commerce reports loss of more than 1,100 laptops over 5 years
By Daniel Pulliam
An agency-wide review at the Commerce
Department turned up more than a thousand missing or stolen laptops over the
last five years, with hundreds containing the personal information of American
citizens.
http://www.govexec.com/story_page.cfm?articleid=35081&dcn=e_gvet

DHS names cybersecurity czar
By Daniel Pulliam
The Homeland Security Department announced the
appointment of a cybersecurity chief Monday, more than 14 months after the
position was created.
http://www.govexec.com/story_page.cfm?articleid=35050&dcn=e_gvet

Federal privacy law faces review from data advisers
By Andrew Noyes
Experts from two federal advisory committees
are embarking on a review of critical privacy and policy issues, with a
particular focus on implications of the decades-old Privacy Act and other
legislation.
http://www.govexec.com/story_page.cfm?articleid=35046&dcn=e_gvet

U.S. seeks improvements to sharing of security info
By Winter Casey
Since attacks in the United States five years
ago Monday focused world attention on terrorism, the European Union has taken
strides to help fight terrorism. However, the United States is currently in
discussions with Europe on two information-sharing agreements.
http://www.govexec.com/story_page.cfm?articleid=34991&dcn=e_gvet

August
A Tool We Need to Stop the Next Airliner Plot
By Michael Chertoff
Imagine that our troops in Afghanistan raided
an al-Qaeda safe house and captured a computer containing the cellphone numbers
of operatives in Europe. Wouldn't it be important to know whether one of those
cellphone numbers was used to book a transatlantic flight? Unfortunately, today
our ability to make that connection remains limited: Information that terrorists
readily share with travel agents cannot easily be shared throughout the United
States government. That needs to change.
http://www.washingtonpost.com/wp-dyn/content/article/2006/08/28/AR2006082800849.html

Technology trap / Is our national obsession with
technology causing us to misdirect our terrorism-fighting efforts?
By John Moore
Technology has become
so intertwined with homeland security it would be difficult to name a security
program in which technology isn’t the main driver or an important underpinning.
http://www.fcw.com/article95769-08-28-06-Print

Bush names VA chief information officer
By Daniel Pulliam
Acting Veterans Affairs Department chief
information officer Robert Howard will be nominated to fill the agency's top
technology position on a permanent basis, the White House announced Tuesday.
http://www.govexec.com/story_page.cfm?articleid=34912&dcn=e_tcmg

Laptops with sensitive data stolen from Education contractor
By Daniel Pulliam
Two laptop computers believed to contain
unencrypted personal information about 43 grant reviewers were stolen from an
Education Department contractor in Washington, D.C., earlier this month.
http://www.govexec.com/story_page.cfm?articleid=34906&dcn=e_tcmg

IRS readies to start private debt collection next week
By Jenny Mandel
The Internal Revenue Service last week
published guidance on an initiative to turn some tax debt collection over to
private contractors, paving the way for three companies to begin receiving
taxpayer data next week. But the initiative is facing stiff opposition.
http://www.govexec.com/story_page.cfm?articleid=34918&dcn=e_gvet

Indonesia accuses two of cyber terrorism
By Associated Press
JAKARTA — Police in
Indonesia announced the arrests Wednesday of two men accused of using computer
technology to aid terrorists in the world's most populous Muslim country.
Click Here for a Link That's Way Too Big

Education data breach puts 21,000 student loan borrowers at risk
By Daniel Pulliam
Student loan holders logging on to an
Education Department Web site between Sunday night and Tuesday morning exposed
their personal identities to others as a result of a glitch in a contractor's
efforts to service the site.
http://www.govexec.com/story_page.cfm?articleid=34872&dcn=e_gvet

AT&T Sues Data Brokers for Stolen Customer Records
By Reuters
NEW YORK (Reuters)—AT&T Inc. on Wednesday sued
25 unnamed data brokers, accusing them of fraudulently gaining access to about
2,500 customers' calling records.
http://www.eweek.com/article2/0,1895,2007535,00.asp?kc=EWGOVEMNL082306EOAD

High-Res Executions and Bloddy DVDst
By Susanne Koelbl
Terrorists are becoming increasingly adept at
producing high-quality videos. DVDs depicting bloody beheadings are now
available at markets in Pakistan and Afghanistan. They're also on the Web.
http://service.spiegel.de/cache/international/spiegel/0,1518,432122,00.html

Encryption taken off Transportation IG laptop shortly before theft
By Daniel Pulliam
The Transportation Department inspector
general's office removed the encryption on a laptop containing the personal
information of 133,000 Florida residents about two weeks before it was stolen
late last month from a government-owned Chevrolet Blazer parked outside a Miami
area cafeteria.
http://www.govexec.com/story_page.cfm?articleid=34763&dcn=e_gvet

DHS to field additional data mining tools in wake of
bomb plot
By Wilson P. Dizard III
The Homeland Security
Department will deploy additional computerized methods of pinpointing threats in
airports in response to the newly uncovered plot to blow up aircraft flying from
London to the United States, department's secretary Michael Chertoff, said
today.
http://www.gcn.com/online/vol1_no1/41607-1.html

How Hizballah Hijacks the Internet
By Hilary Hylton
What do a small south Texas cable company, a
suburban Virginia cable provider and Web-hosting servers in Delhi, Montreal,
Brooklyn and New Jersey have in common? Since fighting broke out in Lebanon,
they all have had their communications portals hijacked by Hizballah. Hackers
from the militant Lebanese group are trolling the Internet for vulnerable sites
to communicate with one another and to broadcast messages from Al-Manar
television, which is banned in the U.S. In the cyberterrorism trade it is known
as "whack-a-mole" — just like the old carnival game, Hizballah sites pop up, get
whacked down and then pop up again somewhere else on the World Wide Web.
http://www.time.com/time/world/article/0,8599,1224273,00.html

More sensitive information goes missing from VA
By Daniel Pulliam
A desktop computer possibly containing the
names, Social Security numbers and medical data of up to 38,000 people is
missing from the offices of a Veterans Affairs Department subcontractor.
http://www.govexec.com/story_page.cfm?articleid=34720&dcn=e_gvet

Cyber-Thieves Steal $700K Via ATM Hacking
By Chris
Preimesberger
Cyber-thieves who hacked into the ATM
information of at least 800 retail customers in California and Oregon have
stolen as much as $700,000 from personal accounts during the last two months,
according to police reports.
http://www.eweek.com/article2/0,1895,1999367,00.asp?kc=EWFINEMNL080706EOAD

July
The Man Who Put Al-Qaeda on the Web
By Barry Levine
Posting and
boasting his way to prominence, Irhabi007 started appearing on radical Islamist
bulletin boards and in chat rooms. For his user I.D., he melded "irhabi," which
means "terrorist" in Arabic, to the code number of the world's most famous,
albeit fictional, British secret agent.
http://www.newsfactor.com/story.xhtml?story_id=13200C4PE9Z0&page=1

Report: U.S. unprepared for major Web disruption
By Heather Greenfield
A Government Accountability Office report
released Friday warns that the United States is not prepared for a major
disruption to the Internet. The report found that existing legislation and
regulations "do not specifically address roles and responsibilities for Internet
recovery."
http://www.govexec.com/story_page.cfm?articleid=34657&dcn=e_gvet

Insurance Company Loses 540,000 N.Y. Employee
Records
By Matt
Hines
Government officials in New York are warning
540,000 injured state workers that an outside contractor has lost a computer
containing their personal data, including the employees' names, addresses and
social security numbers.
http://www.eweek.com/article2/0,1895,1994416,00.asp?kc=EWGOVEMNL072606EOAD

Oversight agencies squabble over list of high-risk IT projects
By Daniel Pulliam
The Office of Management and Budget and the
Government Accountability Office disagree over how OMB's list of high-risk
information technology projects is managed. The list, consisting of 226 IT
projects totaling about $6.4 billion, or 10 percent of the government's proposed
$64 billion IT budget for fiscal 2007, spans 24 agencies and tracks the
management and performance of the initiatives. In a new report (GAO-06-647), GAO
said the criteria for placing projects on the list are not applied consistently.
http://www.govexec.com/story_page.cfm?articleid=34602&dcn=e_gvet

Lawmakers write IRS in opposition to tax collections outsourcing plan
From
CongressDaily
A bipartisan group of 27 House members
Wednesday wrote Internal Revenue Service Commissioner Mark Everson lamenting the
agency's plan to contract out some tax collections to private firms.
http://www.govexec.com/story_page.cfm?articleid=34600&dcn=e_gvet

Failure of digital detection system allows millions in tax fraud
By David Perera
The Internal Revenue Service paid up to $300
million in bogus tax refunds this year because it failed to complete an update
of its digital tool for catching falsified tax returns.
http://www.govexec.com/story_page.cfm?articleid=34557&dcn=e_gvet

OMB steps up data security reporting requirements
By Daniel Pulliam
In an effort to improve the federal response
to data breaches putting personal information such as Social Security numbers at
risk, the Office of Management and Budget is eliminating the distinction between
suspected and confirmed breaches for reporting purposes.
http://www.govexec.com/story_page.cfm?articleid=34555&dcn=e_gvet

Democratic senators criticize administration's cybersecurity efforts
By Michael Martinez
Senate Democrats on Thursday assailed the Bush
administration over its failure to fill a Cabinet-level post it created last
July within the Homeland Security Department for a cyber security czar. In the
wake of several high-profile data breaches at government agencies this year,
Senate Judiciary Committee ranking Democrat Patrick Leahy of Vermont said the
administration has been reckless in its refusal to fill the position in a timely
manner. He said individuals whose personal information has been compromised have
paid the price for such mistakes.
http://www.govexec.com/story_page.cfm?articleid=34549&dcn=e_gvet

DHS revamps emergency alert system
By Jonathan Marino
The Homeland Security Department is
overhauling and expanding its emergency broadcast system, known as the Digital
Emergency Alert System, so warnings will reach more people faster and are
localized.
http://www.govexec.com/story_page.cfm?articleid=34534&dcn=e_gvet

Web chat rooms center of FBI probe into terrorist plot
By Winter Casey
On the first anniversary of the London
terrorist attacks, U.S. security agents announced Friday they had disrupted a
plot by terrorists to attack the New York transportation network. According to
the Associated Press, FBI agents were able to discover the scheme through
monitoring Internet chat rooms used by extremists.
http://www.govexec.com/story_page.cfm?articleid=34490&dcn=e_hsw

IRS headquarters to remain shut for months
By Amelia Gruber
The Internal Revenue Service announced Tuesday
that repairs to its Washington headquarters, damaged by flooding late last
month, may not be complete until January
http://www.govexec.com/story_page.cfm?articleid=34526&dcn=e_gvet

Top intelligence officer pushes businesses to act
By Chris Strohm
The government's top intelligence officer
called on the nation's business community Monday to build its capacity for
information sharing domestically and abroad and to report suspicious activity to
law enforcement agencies.
http://www.govexec.com/story_page.cfm?articleid=34516&dcn=e_gvet

Web chat rooms center of FBI probe into terrorist plot
By Winter Casey
On the first anniversary of the London
terrorist attacks, U.S. security agents announced Friday they had disrupted a
plot by terrorists to attack the New York transportation network. According to
the Associated Press, FBI agents were able to discover the scheme through
monitoring Internet chat rooms used by extremists.
http://www.govexec.com/story_page.cfm?articleid=34490&dcn=e_gvet

Consultant Breached FBI's Computers
By Eric
M. Weiss
A government consultant, using computer
programs easily found on the Internet, managed to crack the FBI's classified
computer system and gain the passwords of 38,000 employees, including that of
FBI Director Robert S. Mueller III.
http://www.washingtonpost.com/wp-dyn/content/article/2006/07/05/AR2006070501489.html

June
Data Brokers and Buyers Anger Congress
By Amanda
Beck
WASHINGTON (Reuters)—Almost every piece of
personal information that Americans try to keep secret—including bank account
statements, e-mail messages and telephone records—is semi-public and available
for sale.
http://www.eweek.com/article2/0,1895,1981909,00.asp

Major Israeli websites hacked
By
Gal Mor, Ehud Kinan
More than 750 Israeli
websites hacked in recent hours. Among them: Soldier’s Treasury Bank, Rambam
Hospital, and Globus Group ticket center. Hackers: You’re killing Palestinians,
we’re killing servers
Unprecedented number of
Israeli websites hacked: Hundreds of websites were damaged by hackers in recent
hours, following IDF activity in the Gaza Strip. The hackers are members of the
Moroccan “Team Evil” group, responsible for most of the website damage in Israel
in the past year. This is the largest, most concentrated attack on Israeli
websites in recent years
http://www.ynetnews.com/articles/0,7340,L-3268449,00.html

GAO, Navy add to growing list of federal data breaches
By Daniel Pulliam
The number of agencies announcing data
breaches is continuing to grow, with both the Navy and the Government
Accountability Office revealing Friday the inadvertent release of personal
information over the Internet. Personal information, including Social Security
numbers, birthdates and names of about 28,000 sailors and their family members,
turned up on a civilian Web site in spreadsheet files, the Navy announced. GAO
revealed that sensitive information on fewer than 1,000 government workers was
available in Internet-accessible archival records.
http://www.govexec.com/story_page.cfm?articleid=34421&dcn=e_gvet

TSP tries to remain vigilant in data security
By Karen Rutzick
In light of the well publicized Veterans
Affairs Department data breach last month, another federal agency with its hands
on a lot of personal information -- the Thrift Savings Plan -- is concentrating
on information security.
http://www.govexec.com/story_page.cfm?articleid=34364&dcn=e_gvet

VA spends more than $14 million handling data breach
By Daniel Pulliam
The Veterans Affairs Department is burning
through $200,000 a day to operate a call center for veterans and active-duty
service members seeking information on last month's data breach, officials from
the Veterans Benefits Administration told lawmakers Tuesday.
http://www.govexec.com/story_page.cfm?articleid=34363&dcn=e_gvet

House votes to block outsourcing of tax collections
By Jenny Mandel
The Internal Revenue Service would be blocked
from allocating funds to outsource collection of tax debts under a provision in
a spending bill passed by the House Wednesday.
http://www.govexec.com/story_page.cfm?articleid=34326&dcn=e_gvet

House committee OKs standards for security tools, training
By Juliana Gruenwald
The House Homeland Security Committee on
Wednesday approved legislation to require federal officials to develop voluntary
national standards for homeland security equipment and training.
http://www.govexec.com/story_page.cfm?articleid=34331&dcn=e_gvet

Auditors blame VA data breach on security flaws
By Daniel Pulliam
Long-standing weaknesses in the Veterans
Affairs Department's information security systems were responsible for a massive
data breach last month and its systems remain at risk, government auditors told
a congressional panel Wednesday.
http://www.govexec.com/story_page.cfm?articleid=34325&dcn=e_gvet

Privacy language urged for bill to digitize federal employee health records
By Danielle Belopotosky
Employee groups on Tuesday urged a House panel
to include in a health information technology bill language to protect the
privacy of federal employees who would be covered under the bill.
http://www.govexec.com/story_page.cfm?articleid=34319&dcn=e_gvet

Defense tech agency expands telework program
By Daniel Pulliam
The number of employees who qualify for the
Defense Information Systems Agency's telework program has increased by more than
1,000 since a policy change last December.
http://www.govexec.com/story_page.cfm?articleid=34314&dcn=e_gvet

DOE computers hacked; info on 1,500 taken
By H. Josef Hebert
WASHINGTON -- A hacker stole a file containing
the names and Social Security numbers of 1,500 people working for the Energy
Department's nuclear weapons agency. But in the incident last September,
somewhat similar to recent problems at the Veterans Affairs Department, senior
officials were informed only two days ago, officials told a congressional
hearing Friday. None of the victims was notified, they said.
http://seattlepi.nwsource.com/national/1153AP_DOE_File_Theft.html

Pentagon sets its sights on social networking sites
By Paul Marks
New Scientist has
discovered that Pentagon's National Security Agency, which specialises in
eavesdropping and code-breaking, is funding research into the mass harvesting of
the information that people post about themselves on social networks. And it
could harness advances in internet technology - specifically the forthcoming
"semantic web" championed by the web standards organisation W3C - to combine
data from social networking websites with details such as banking, retail and
property records, allowing the NSA to build extensive, all-embracing personal
profiles of individuals.
http://www.newscientist.com/article/mg19025556.200?DCMP=NLC-nletter&nsref=mg19025556.200

VA cuts telework, bans employee-owned computers
By Daniel Pulliam
The Veterans Affairs Department has suspended
use of employee-owned computers for official agency business and has limited
telework at one of three major divisions, in an effort to prevent security
breaches.
http://www.govexec.com/story_page.cfm?articleid=34291&dcn=e_tcmg

British computer whiz-kid exports terror via internet
By Daniel McGrory
AN INTERNET trail left by a British computer
expert has led investigators to an intricate terror network spreading from the
backstreets of Baghdad through cells of young militants living in European
capitals to Islamic extremists plotting car-bomb attacks in North America.
http://www.timesonline.co.uk/article/0,,2-2214663,00.html

Management structure contributed to VA data breach, observers say
By Daniel Pulliam
As the scope of the Veterans Affairs
Department's data breach continues to expand, former agency information
technology officials say the catastrophe possibly could have been avoided with a
better IT management structure.
http://www.govexec.com/story_page.cfm?articleid=34262&dcn=e_gvet

VA Reports Bigger Data Theft
By Wayne
Rash
Secretary of Veterans Affairs R. James
Nicholson has revealed that the
data stolen from an employee's home
in Maryland in May included personal information on over 1 million active duty,
reserve and National Guard personnel.
http://www.eweek.com/article2/0,1895,1973260,00.asp

Records on active-duty military included in stolen VA data
By Daniel Pulliam
The names, Social Security numbers and birth
dates of up to 50,000 active-duty military personnel were included in the data
stolen from a Veterans Affairs Department employee's home last month, the
department announced Saturday.
http://www.govexec.com/story_page.cfm?articleid=34240&dcn=e_gvet

Telework blamed in recent VA data loss
By Daniel Pulliam
Proponents of policies allowing federal
employees to work away from the office are fighting recent claims that
teleworking puts sensitive agency data at an unnecessary risk for theft or loss.
In an attempt to avert future security breaches and to assuage lawmakers'
concerns, Veterans Affairs officials have said they are reviewing the
department's guidelines on remote use and access to agency information,
following the theft of personal data on more than 26 million veterans from an
employee's home.
http://www.govexec.com/story_page.cfm?articleid=34207&dcn=e_gvet

May
Data on millions of vets stolen from VA employee's home
By David Perera
Personal information, including Social
Security numbers, of possibly every living U.S. veteran discharged since 1975
was stolen earlier this month from the home of a Veterans Affairs employee, the
department announced Monday.
http://www.govexec.com/story_page.cfm?articleid=34134&dcn=e_gvet

OMB official: Too soon to judge computer security law
By David Perera
The Federal Information Security Management
Act isn't old enough for its most effective provisions to prompt great
cybersecurity improvements, an Office of Management and Budget official said
Thursday.
http://www.govexec.com/story_page.cfm?articleid=34111&dcn=e_gvet

GAO: IRS procedural flaws leave taxpayer materials vulnerable
By Jenny Mandel
Taxpayer receipts and other sensitive
materials were left out in open areas where they were vulnerable to loss or
theft, and auditors found various problems with financial and security
procedures at Internal Revenue Service facilities during an annual review.
http://www.govexec.com/story_page.cfm?articleid=34101&dcn=e_gvet

British Computer Hacker Set for U.S. Extradition
By Kate
Holton, Reuters
LONDON (Reuters)—A British computer expert
accused by Washington of the world's "biggest military hack of all time" should
be extradited to the United States to stand trial, a court ruled on Wednesday.
Gary McKinnon, 40, was arrested last June following charges by U.S. prosecutors
that he illegally accessed 97 government computers—including Pentagon, U.S.
army, navy and NASA systems—causing $700,000 worth of damage.
http://www.eweek.com/article2/0,1895,1960109,00.asp

DHS to design interoperability standards for emergency communications equipment
From National Journal's Technology Daily
Homeland Security Secretary Michael Chertoff
on Monday said the department plans to assemble a task force focused on
performance standards for achieving emergency communications equipment that can
work across jurisdictions.
http://www.govexec.com/story_page.cfm?articleid=34049&dcn=e_gvet

Plans for digitizing immigration records called into question
By Daniel Pulliam
The U.S. Citizenship and Immigration Services
bureau's $190 million project to automate 55 million paper-based immigration
files has suffered from inadequate planning, according to a new report from the
Government Accountability Office.
http://www.govexec.com/story_page.cfm?articleid=34031&dcn=e_gvet

Hackers access personal information on TRICARE servers
By Daniel Pulliam
Hackers gained access to the Pentagon's health
insurance information systems, compromising the personal information of more
than 14,000 people, the Defense Department announced Friday.
http://www.govexec.com/story_page.cfm?articleid=33964&dcn=e_gvet

April
Chinese government enacts unprecedented ID tag program
By Chris Strohm
China is on its way to becoming one of the
largest markets for radio-frequency identification tags, propelled in part by
U.S. importers that want the technology to be used for tracking assets, market
analysts said.
http://www.govexec.com/story_page.cfm?articleid=33923&dcn=e_tcmg

Government-Funded Startup Blasts Rootkits
By Ryan
Naraine
A startup funded by the U.S. government's
Defense Advanced Research Projects Agency is ready to emerge from stealth mode
with hardware and software-based technologies to fight the rapid spread of
malicious rootkits.
http://www.eweek.com/article2/0,1895,1951941,00.asp

Council releases blueprint for federal cybersecurity research
By Daniel Pulliam
President Bush's science and technology
council has released a blueprint for coordinating federal interagency
cybersecurity research and development.
http://www.govexec.com/story_page.cfm?articleid=33927&dcn=e_gvet

Immigration enforcers want to mine databases
By Chris Strohm
The Homeland Security Department is seeking
authority from Congress to mine databases containing Social Security numbers in
order to identify illegal immigrants and the employers who knowingly hire them,
according to senior department officials.
http://www.govexec.com/story_page.cfm?articleid=33884&dcn=e_gvet

Internet devices threaten NSA's ability to gather intelligence legally
By Shane Harris
Among the threats facing the National Security
Agency are Al Qaeda, the Iraqi insurgency, and eBay. Yes, eBay, the online
auction house. Not because its members sell state secrets, but because of a
company that eBay purchased last year -- Skype.
http://www.govexec.com/story_page.cfm?articleid=33816&dcn=e_gvet

IRS Rule Changes Could Expose Your Tax Info
By Bary
Alyssa Johnson
The IRS has stirred controversy with a
proposal,
here in PDF form, to loosen rules regarding electronic disclosure of private
taxpayer information to outside parties. Current provisions in
tax code section 7216 set criminal penalties for tax preparers that make
unauthorized use or disclosure of tax return information. In hearings in
Washington this week, the IRS asked for public comment on whether to rewrite the
current tax law.
http://www.eweek.com/article2/0,1895,1947260,00.asp

Secret Service Sting Targets Web Con Artists
By Evan
Schuman
In sharing information about an undercover
federal investigation of Web frauds involving credit cards and stolen tax
refunds, the Secret Service demonstrated that it can adapt with the times. The
seven initial arrests stemming from what the Secret Service has dubbed
"Operation Rolling Stone" show that federal investigators have started to learn
how to crack through deceptive IP addresses and encrypted IM communications.
http://www.eweek.com/article2/0,1895,1946230,00.asp

Critics of IRS tax-return proposal urge changes
By Sarah Lai Stirland
One of the nation's largest purveyors of
tax-preparation software on Tuesday urged the Internal Revenue Service to enact
rules that would ban the sale or rental of tax-return information.
http://www.govexec.com/story_page.cfm?articleid=33758&dcn=e_gvet

March
DHS moves to deploy transportation ID cards
By Chris Strohm
Under mounting congressional pressure, the
Homeland Security Department has announced a timetable for issuing
tamper-resistant, biometric-based identification cards to millions of workers at
U.S. transportation facilities.
http://www.govexec.com/story_page.cfm?articleid=33736&dcn=e_gvet

Concerns about wireless tracking devices discussed
By Winter Casey
Despite new research pointing to security
vulnerabilities in wireless tracking technology known as radio-frequency
identification, government and business representatives remain confident in its
use.
http://www.govexec.com/story_page.cfm?articleid=33676&dcn=e_tcmg

Looser limits on tax preparers' sharing of data proposed
By Jenny Mandel
A December 2005 Internal Revenue Service
proposal to loosen restrictions on how tax preparers can use information from
tax returns is gaining attention and has recently attracted criticism from
consumer groups.
http://www.govexec.com/story_page.cfm?articleid=33671&dcn=e_gvet

Lawmakers urge government, industry to partner on emergency communications
By Michael Martinez
Two key lawmakers on Wednesday said government
agencies need to establish partnerships with the private sector in order ensure
that critical communications infrastructure is reliable and available during
emergency situations.
http://www.govexec.com/story_page.cfm?articleid=33615&dcn=e_gvet

FBI's 'Sentinel' Contract Falls Short on Oversight
By Caron Carlson
Even after being forced to scrap its $170
million case management initiative one year ago, and replacing it with the
proposed "Sentinel" system, the FBI has already fallen behind in crafting
required security and validation plans for the new system. Nonetheless, a
contract for Sentinel, estimated to cost between $400 million and $500 million,
is expected to be awarded within a month.
http://www.eweek.com/article2/0,1895,1937256,00.asp

Digging for hidden meanings: Data-mining techniques and their application in the
war on terrorism
By John Fedrick
As more and more U.S. military ISR systems
collect more and more data, intelligence analysts face two formidable
challenges. One is to dig out the information they suspect is buried in the
ever-growing databases. The other, more daunting task is to sift through the
reams of data to discover hidden patterns and relationships — information the
analysts don’t know they have until they see it. That’s where data mining comes
in.
http://isrjournal.com/story.php?F=1474857

Lawmaker seeks czar to oversee transition to next-generation Internet
By Daniel Pulliam
The U.S. government, the world's largest
purchaser of information technology products and services, needs a central
authority dedicated to administering agencies' transition to the next-generation
Internet, the chairman of the House Government Reform Committee said Tuesday.
http://www.govexec.com/story_page.cfm?articleid=33602&dcn=e_gvet

IRS announces first contracts for debt collection work
By Jenny Mandel
The Internal Revenue Service awarded three,
two-year contracts Thursday in the first phase of an effort to outsource some of
its debt collection work, and published a list of safeguards designed to prevent
unauthorized use of taxpayer data.
http://www.govexec.com/story_page.cfm?articleid=33573&dcn=e_gvet

Homeland Security chief proposes screening of customer data
By Sarah Lai Stirland
The secretary of the Homeland Security
Department on Tuesday proposed a screening system that would require companies
to retain information about their customers but only require them to surrender
information filtered by software.
http://www.govexec.com/story_page.cfm?articleid=33559&dcn=e_gvet

Survey: Agency programs to protect privacy inadequate
By Daniel Pulliam
Most government agencies have made little
progress in addressing privacy concerns, and the issue needs to be elevated,
according to a new survey of members of the federal information technology
community.
http://www.govexec.com/story_page.cfm?articleid=33555&dcn=e_gvet

OMB: Agency compliance with cybersecurity law improving
By Daniel Pulliam
Agencies improved slightly in fiscal 2005 at
meeting computer security standards, according to a report released Wednesday by
the Office of Management and Budget.
http://www.govexec.com/story_page.cfm?articleid=33498&dcn=e_tcmg

Agencies move toward routing calls over the Internet
By Daniel Pulliam
Government agencies are moving away from
traditional land-line-based telephone services to technology that routes calls
over the Internet, a panel of experts and a congressional staffer knowledgeable
on the issue said Wednesday.
http://www.govexec.com/story_page.cfm?articleid=33489&dcn=e_gvet

February
TIA Lives On
By Shane Harris
A controversial counter-terrorism program,
which lawmakers halted more than two years ago amid outcries from privacy
advocates, was stopped in name only and has quietly continued within the
intelligence agency now fending off charges that it has violated the privacy of
U.S. citizens.
http://nationaljournal.com/about/njweekly/stories/2006/0223nj1.htm

Homeland Security gets half of IT boost in Bush budget
By Daniel Pulliam
The modest information technology spending
increase in President Bush's fiscal 2007 budget request is driven by the
Homeland Security Department, according to a new report from a market research
firm.
http://www.govexec.com/story_page.cfm?articleid=33446&dcn=e_gvet

Focus on cybersecurity compliance called ineffective
By Daniel Pulliam
Adherence to congressionally mandated IT
security processes is a poor measure of the true state of cybersecurity across
the government, a former federal chief information security officer said
Wednesday.
http://www.govexec.com/story_page.cfm?articleid=33439&dcn=e_gvet

DHS runs drill to test readiness for online attack
By Danielle Belopotosky
The Homeland Security Department on Friday
concluded a weeklong exercise aimed at assessing public- and private-sector
responses to cyber attacks on the nation's critical infrastructure.
http://www.govexec.com/story_page.cfm?articleid=33380&dcn=e_gvet

Homeland Security agency to focus on information-sharing plans
By Heather Greenfield
The homeland security agency tasked with
protecting critical infrastructures sees 2006 as a year to improve
information-sharing among key sectors like electricity, water and information
technology.
http://www.govexec.com/story_page.cfm?articleid=33299&dcn=e_hsw

GAO: Defense lacks coordination needed for global information grid
From National Journal's Technology Daily
The Defense Department plans to spend about
$34 billion over five years to develop a global information grid, but the
department's decentralized management approach "is not optimized to enforce
investment decisions across the department," according to the Government
Accountability Office.
http://www.govexec.com/story_page.cfm?articleid=33285&dcn=e_gvet

January 2006
Defense tech agency boosts telework to prevent exodus
By Daniel Pulliam
The upcoming relocation of the Defense
Information Systems Agency's headquarters from Northern Virginia to a military
base south of Baltimore has prompted the organization to expand its telework
policies. The agency is permitting employees to work away from the office more
often in hopes of retaining its workforce.
http://www.govexec.com/story_page.cfm?articleid=33255&dcn=e_gvet

Cyber crime is growing more professional, officials say
By Randy Barrett
Leading industry and government officials
Tuesday agreed that cyber criminals are now more professional and primarily
focused on stealing money.
http://www.govexec.com/story_page.cfm?articleid=33230&dcn=e_gvet

DHS chief eyes ID cards with biometric data
By Michael
Martinez
Homeland Security Secretary Chertoff said
today he intends to spend money to develop technology that will allow
identification cards to serve several purposes, but stopped short of advocating
a national identification card.
http://www.govexec.com/story_page.cfm?articleid=33197&dcn=e_gvet

FCC Sets Airwaves Sale for Internet on Planes
By Jeremy
Pelofsky
WASHINGTON (Reuters)—U.S. regulators plan to
sell airwaves starting May 10 to provide communications services like high-speed
Internet to U.S. air travelers.
http://www.eweek.com/article2/0,1895,1910900,00.asp

DOD Eyes Network Revamp
By Paul F. Roberts
The U.S. Military's point man for global
network operations says that a total overhaul of the government's classified and
unclassified information networks may be necessary to ward off legions of
hackers and adequately protect the military from crippling attacks in future
conflicts.
http://www.eweek.com/article2/0,1895,1911008,00.asp

Gov't Cyber-sleuths Focusing on Linux, iPod, Xbox
By Paul F. Roberts
Cyber-security and computer experts from the
government and law enforcement are increasingly concerned with malicious code
that runs on Linux and Apple Computer Inc.'s Mac OS X operating systems and
threats posed by devices such as iPods and Xboxes.
http://www.eweek.com/article2/0,1895,1910371,00.asp?kc=ewnws011306dtx1k0000599

Click here to return to the top of page
|