What's New in Security News (February 2010)

Stopping Stealthy Downloads 

By Brian Krebs

Researchers at SRI International and Georgia Tech are preparing to release a free tool to stop "drive-by" downloads: Internet attacks in which the mere act of visiting a Web site results in the surreptitious installation of malicious software. The new tool, called BLADE (Block All Drive-By Download Exploits), stops downloads that are initiated without the user's consent.

http://www.technologyreview.com/computing/24632/?a=f

School district: Spy Webcams activated 42 times 

By Chris Matyszczyk

When one hears the word "spy," one normally thinks of places like Moscow, London, and Washington rather than Rosemont, Pa. However, the controversy swirling around Rosemont's Harriton High School and the Lower Merion School District increasingly makes for bizarre reading. And even more bizarre thinking.

http://news.cnet.com/8301-17852_3-10457126-71.html

Shell hit by massive data breach 

By John Oates

Shell has been hit by a massive data breach – the contact database for 176,000 staff and contractors at the firm has been copied and forwarded to lobbyists and activists opposed to the company.

http://royaldutchshellplc.com/2010/02/15/shell-hit-by-massive-data-breach/

Social Engineering Scammers Offer Live Support 

By Thomas Claburn

Just like legitimate software companies, cyber scammers are experimenting with online services supported by human intelligence.

http://www.informationweek.com/

Hackers Steal Millions in Carbon Credits 

By Kim Zetter

Credit card numbers are so passe. Today’s hackers know the real powerhouse data to steal is emission certificates. That’s exactly what hackers went after last week when they obtained unauthorized access to online accounts where companies maintain their carbon credits, according to the German newspaper Der Spiegel.

http://www.wired.com/threatlevel/2010/02/hackers-steal-carbon-credits

In wake of hack, Google negotiating cooperation with the NSA 

By John Timmer

In January, Google went public with news that some of its systems had been hacked, along with those of a number of US-based companies. The attacks had targeted both accounts maintained by political activists and commercial code, and Google pointed the finger straight at China, vowing to change its entire approach to business in that country. But a report now suggests that the company is also looking to beef up its internal defenses to prevent a repeat of the attacks.

http://arstechnica.com/security/news/2010/02/in-wake-of-hack-google-negotiating-cooperation-with-the-nsa.ars

January 2010

Network flaw causes scary Web error 

By Jordan Robertson

A Georgia mother and her two daughters logged onto Facebook from mobile phones last weekend and wound up in a startling place: strangers' accounts with full access to troves of private information. The glitch - the result of a routing problem at the family's wireless carrier, AT&T - revealed a little known security flaw with far reaching implications for everyone on the Internet, not just Facebook users.

http://www.miamiherald.com/business/technology/story/1433129.html

Chinese Cyber-Attack Said to Be Part of Vast Espionage Campaign 

By Ariana Eunjung Cha and Ellen Nakashima

Computer attacks on Google that the search giant said originated in China were part of a concerted political and corporate espionage effort that exploited security flaws in e-mail attachments to sneak into the networks of major financial, defense and technology companies and research institutions in the United States, security experts said.

http://www.washingtonpost.com/wp-dyn/content/article/2010/01/13/AR2010011300359.html

NZ and US sign anti-terrorism science and technology pact 

By NBR Staff

New Zealand and the US have signed a science and technology research co-operation agreement to help protect both countries against acts of terrorism and other threats to domestic and external security.

http://www.nbr.co.nz/article/nz-and-us-sign-anti-terrorism-science-and-technology-pact-117061

December 2009

Insurgents Hack U.S. Drones 

By Siobhan Gorman, Yochi J. Dreazen and August Cole

Militants in Iraq have used $26 off-the-shelf software to intercept live video feeds from U.S. Predator drones, potentially providing them with information they need to evade or monitor U.S. military operations.

http://online.wsj.com/article/SB126102247889095011.html

Cyberattacks against critical U.S. networks rising at a faster rate 

By Jill R. Aitoro

The number of cybersecurity attacks against computer networks that operate the nation's critical infrastructure such as transportation systems and water treatment and power plants, has increased dramatically, mostly because these industries rely on legacy technologies that don't protect systems from sophisticated attacks.

http://www.nextgov.com/nextgov/ng_20091208_4177.php?oref=rss?zone=NGtoday

Massive TSA Security Breach As Agency Gives Away Its Secrets 

By Brian Ross and Matt Hosford

In a massive security breach, the Transportation Security Administration (TSA) inadvertently posted online its airport screening procedures manual, including some of the most closely guarded secrets regarding special rules for diplomats and CIA and law enforcement officers.

http://abcnews.go.com/Blotter/massive-tsa-security-breach-agency-secrets/story?id=9280503

Ten Most Damaging Data Breaches of 2009 

By Laton McCartney

Every week for the past four years the San Diego-based Privacy Rights Clearing House (PRCH), an organization dedicated to empowering consumers and protecting privacy, has been chronicling data breaches on a weekly basis.

http://information-security-resources.com/2009/12/04/ten-most-damaging-data-breaches-of-2009/

DHS completes draft of plan on how to respond to a national cyberattack 

By Jill R. Aitoro

The Homeland Security Department, working with other federal agencies, has completed a draft of how governments and businesses should respond to a widespread cyberattack, establishing their roles and responsibilities.

http://www.nextgov.com/nextgov/ng_20091203_2020.php

November 2009

U.S. Cybersecurity Can Halt 80% of Attacks at Best  

By Kenneth Corbin

Senior government officials overseeing the nation's cyber defenses told a Senate panel this morning that agencies are doing more to coordinate their far-ranging efforts, but that even in the best-case scenario, the hackers are often one step ahead.

http://www.internetnews.com/security/article.php/3848861/US+Cybersecurity+Can+Halt+80+of+Attacks+at+Best.htm

Climate Emails Stoke Debate    

By Keith Johnson

The scientific community is buzzing over thousands of emails and documents -- posted on the Internet last week after being hacked from a prominent climate-change research center -- that some say raise ethical questions about a group of scientists who contend humans are responsible for global warming.

http://online.wsj.com/article/SB125883405294859215.html?mod=googlenews_wsj

The Cyberwar Plan  

By Shane Harris

In May 2007, President Bush authorized the National Security Agency, based at Fort Meade, Md., to launch a sophisticated attack on an enemy thousands of miles away without firing a bullet or dropping a bomb.

http://www.nationaljournal.com/njmagazine/cs_20091114_3145.php

October 2009

NSA to build $1.5B cybersecurity center near Salt Lake City   

By Jaikumar Vijayan

The National Security Agency (NSA) is setting up a new $1.5 billion cybersecurity data center at the Utah National Guard's Camp Williams near Salt Lake City. At 1 million square feet, the center will form the hub of the highly-classified Comprehensive National Cybersecurity Initiative (CNCI) launched during the Bush Administration.

http://www.computerworld.com/s/article/9139915/NSA_to_build_1.5B_cybersecurity_center_near_Salt_Lake_City

September 2009

NY Times Warns of Rogue Antivirus on Web Site   

By Robert McMillan

The newspaper warned readers Sunday that so-called rogue antivirus sellers had been spotted on its Web site, NYTimes.com. Their products, often promoted by Eastern European criminal organizations, are either ineffective or actually end up infecting the computers of people who purchase them.

http://www.csoonline.com/article/501981/NY_Times_Warns_of_Rogue_Antivirus_on_Web_Site

FBI building system that blows away fingerprinting   

By Ellen Messmer

The Federal Bureau of Investigation is expanding beyond its traditional fingerprint-focused collection practices to develop a new biometrics system that will include DNA records, 3-D facial imaging, palm prints and voice scans, blended to create what's known as "multi-modal biometrics."

http://www.networkworld.com/

The Information DHS Stores on International Travelers  

By Matthew Harwood

Do you frequently travel internationally? If so, you may be surprised to discover what information the Department of Homeland Security (DHS) collects and stores when you travel abroad.

http://securitymanagement.com/news/information-dhs-stores-international-travelers-006185  

How Team of Geeks Cracked Spy Trade  

By Siobhan Gorman

From a Silicon Valley office strewn with bean-bag chairs, a group of twenty-something software engineers is building an unlikely following of terrorist hunters at U.S. spy agencies.

http://online.wsj.com/article/SB125200842406984303.html    

FCC forms cyber security group  

By Aharon Etengoff

A slew of recent hacking attacks has prompted the Federal Communications Commission (FCC) to form a cyber security working group. The group is expected to assess the FCC's current cyber security expertise, identify vulnerabilities and submit recommendations to address any deficiencies.

http://www.tgdaily.com/content/view/43908/108/ 

August 2009

Computer Hacker Gonzalez to Admit Guilt, Forfeit $1.65 Million  

By Patricia Hurtado and Linda Sandler

Albert Gonzalez, the computer hacker charged with stealing 130 million credit and debit card numbers, will plead guilty to previous data-theft charges in New York and Massachusetts and forfeit assets, U.S. prosecutors said.

http://www.bloomberg.com/apps/news?pid=20601087&sid=aEUeqdHRHd5M     

Air National Guard breaks ground, Construction to start on home for Network Warfare Squadron 

By Angie Basiouny

The Delaware Air National Guard broke ground Thursday on a $3.2 million building that will house the 166th Network Warfare Squadron, a unit dedicated to the security of the vast digital information systems that keep everything in America running -- from traffic lights to satellites.

http://www.delawareonline.com/article/20090828/NEWS02/908280334     

Social Networks Leak Personal Information  

By Thomas Claburn

Online social networking sites leak personal information, a new study has found, raising the possibility that users of such sites can be tracked everywhere they go online.

http://www.informationweek.com/      

July 2009

Chinese Spying Claimed in Purchases of NSA Crypto Gear 

By Kevin Poulsen

A Chinese national was indicted this week for conspiring to violate U.S. export law, following a nearly three-year investigation into his alleged efforts to acquire sensitive military and NSA-encryption gear from eBay and other internet sources.

http://www.wired.com/threatlevel/2009/07/export/     

Troubles Plague Cyberspy Defense 

By Siobhan Gorman

The flagship system designed to protect the U.S. government's computer networks from cyberspies is being stymied by technical limitations and privacy concerns, according to current and former national-security officials.

http://online.wsj.com/article/SB124657680388089139.html     

South Korea hit by cyber attack 

By Staff Reporter

The cyber attack has disrupted government and banking websites. South Korean officials are investigating an apparent cyber attack that has paralysed the websites of major government agencies, banks and internet service providers.

http://english.aljazeera.net/news/asia-pacific/2009/07/2009784212730781.html    

Report: Social Security numbers can be predicted

By Elinor Mills

It is possible to use publicly available data on state and date of birth to predict someone's Social Security number, particularly if they were born after 1988 and in smaller states, according to an article published Monday in The Proceedings of the National Academy of Sciences. 

http://news.cnet.com/8301-1009_3-10280614-83.html    

Troubles Plague Cyberspy Defense

By Siobhan Gorman

The flagship system designed to protect the U.S. government's computer networks from cyberspies is being stymied by technical limitations and privacy concerns, according to current and former national-security officials.

http://online.wsj.com/article/SB124657680388089139.html#mod%3Drss_US_News

June 2009

U.S. and Russia Differ on a Treaty for Cyberspace

By John Markoff and Andrew E. Kramer

The United States and Russia are locked in a fundamental dispute over how to counter the growing threat of cyberwar attacks that could wreak havoc on computer systems and the Internet.

http://www.nytimes.com/2009/06/28/world/28cyber.html?_r=4   

US accidentally posts list of nuclear sites

By Eileen Sullivan and H. Josef Hebert

The government accidentally posted on the Internet a list of government and civilian nuclear facilities and their activities in the United States, but US officials said yesterday the posting included no information that compromised national security.

http://www.boston.com/    

DHS to create online dialogue for security review

By John S. Monroe

The Homeland Security Department plans to create an online dialogue with security and policy experts nationwide to help officials prepare its first Quadrennial Homeland Security Review.

http://fcw.com/articles/2009/06/02/homeland-security-national-dialogue.aspx  

May 2009

Anti-U.S. Hackers Infiltrate Army Servers

By Paul McDougall

A known computer hacking clan with anti-American leanings has successfully broken into at least two sensitive Web servers maintained by the U.S. Army, InformationWeek has learned exclusively.

http://www.informationweek.com  

Information-sharing platform hacked

By Ben Bain

The Homeland Security Department’s platform for sharing sensitive but unclassified data with state and local authorities was hacked recently, a DHS official has confirmed

http://fcw.com/Articles/2009/05/13/Web-DHS-HSIN-intrusion-hack.aspx   

Glossy Internet Magazine Targets Americans for Jihad Training

By Eric Shawn

The cover of "Jihad Recollections," a magazine about Al Qaeda that impels Americans to join in jihad. It's been likened to Al Qaeda's "Vanity Fair," a new English-language Internet magazine called "Jihad Recollections" that focuses on the terrorist group, its founder, Usama Bin Laden, and how to commit jihad. It also predicts the demise of the United States.

http://www.foxnews.com/story/0,2933,518611,00.html  

IG: Air traffic control system vulnerable to cyberattack 

By Kathleen Hickey

The Federal Aviation Administration’s air traffic control system is vulnerable to cyberattacks via Web applications that support the system, according to a new report released by the Transportation Department’s Office of Inspector General (OIG).

http://gcn.com/articles/2009/05/06/air-traffic-control-vulnerabilities.aspx     

April 2009

Controversial Einstein systems to inspect U.S. government's Internet traffic 

By Carolyn Duffy Marsan

The largest U.S. carriers -- including AT&T, Qwest and Sprint -- are deploying special-purpose, intrusion-detection systems dubbed Einstein boxes in their networks as part of an 18-month-old effort to tighten security on federal networks.

http://www.networkworld.com/     

Documents: FBI Spyware Has Been Snaring Extortionists, Hackers for Years 

By Kevin Poulsen

A sophisticated FBI-produced spyware program has played a crucial behind-the-scenes role in federal investigations into extortion plots, terrorist threats and hacker attacks in cases stretching back at least seven years, newly declassified documents show.

http://www.wired.com/threatlevel/2009/04/fbi-spyware-pro/     

New Military Command Planned to Improve U.S. Cybersecurity 

By Siobhan Gorman and Yochi Dreazen

The Obama administration plans to create a new military command to coordinate the defense of Pentagon computer networks and improve U.S. offensive capabilities in cyberwarfare, according to current and former officials familiar with the plans.

http://online.wsj.com/article/SB124035738674441033.html     

Britain in the dock over secret tracking of internet accounts 

By Alexi Mostrous & David Charter

Fears that Britain is slipping into a surveillance society have been heightened by Brussels initiating legal action after declaring that UK laws guaranteeing data protection were “structurally flawed” and well below the European standard.

http://technology.timesonline.co.uk/tol/news/tech_and_web/article6097384.ece    

Report: Cyberspace remains a dangerous frontier 

By William Jackson

Rise in botnet activity in 2008 reverses gains made from aggressive law enforcement in 2007. The number of compromised computers actively being used in botnets to launch attacks on any given day last year was about 75,000, according to a new report on Internet threats from security firm Symantec Corp.

http://gcn.com/articles/2009/04/14/internet-threat-report.aspx   

Report: Cyberwarriors probing US electrical grid 

By Joel Hruska

Security officials from both past and current US administrations have owned up to the detection of foreign intrusions into our electrical and water infrastructures, but insist there's been no evidence that an attack has been attempted. The size of the risk such intrusions pose, however, is under debate.
 
http://arstechnica.com   

March 2009

Terrorism Recruiting Manual Worries Authorities 

By Dina Temple-Raston

For months now, counterterrorism officials have seen signs that al-Qaida has been looking for new and innovative ways to recruit terrorists, including a new manual that has surfaced on the Internet.
 
http://www.npr.org/templates/story/story.php?storyId=102193723&ft=1&f=1004  

NORAD move raises security concerns 

By Michael de Yoanna

NORAD, the high-tech facility responsible for monitoring the skies over North America, faces continuing security problems at its new location inside an office building on an air base here.
 
http://www.washingtontimes.com/news/2009/mar/27/norad-move-raises-concerns/  

China accused over global computer spy ring 

By Dan Glaister

An enormous electronic espionage programme run from servers in China has been used to spy on computers in more than 100 countries, according to two reports published at the weekend.
 
http://www.guardian.co.uk/world/2009/mar/30/china-dalai-lama-spying-computers  

NSA joining social network for intelligence analysts 

By David Wood

The super-secret National Security Agency, traditionally reluctant to share its code-breaking secrets, is joining a new, highly classified social network that links its analysts for the first time with thousands of colleagues at other U.S. intelligence agencies.
 
http://www.baltimoresun.com/technology/bal-te.md.spybook04mar04,0,2709017.story 

Cybersecurity Chief Resigns 

By Siobhan Gorman

The government's coordinator for cybersecurity programs has quit, criticizing what he described as the National Security Agency's grip on cybersecurity. Rod Beckstrom, a former Silicon Valley entrepreneur, said in his resignation letter that the NSA's central role in cybersecurity is "a bad strategy" because it is important to have a civilian agency taking a key role in the issue. The NSA is part of the Department of Defense.
 
http://online.wsj.com/article/SB123638468860758145.html  

February 2009

FAA breach heightens cybersecurity concerns 

By Mary Mosquera

The Federal Aviation Administration was doing such a good job at protecting data in its computer systems that the Office of Management and Budget chose it in January to be one of four agencies to guide other federal agencies in their cybersecurity efforts. Just a month later, FAA officials had to admit that hackers breached one of the agency’s servers, stealing 48 files. Two of the files contained information on 45,000 current and former FAA employees, including sensitive information that could potentially make them vulnerable to identity theft.
 
http://fcw.com/articles/2009/02/23/faa-data-breach.aspx?s=fcwdaily_230209 

US feds pull travel site offline after hacker break-in 

By Dan Goodin

A travel reservations website used by US government agencies remains offline more than a week after it was infected with malware that tried to install malicious code on the PCs of those who visited the site. 
 
http://www.theregister.co.uk/2009/02/19/govtrip_remains_down/ 

DOE seeks new approach to cybersecurity

By William Jackson

Reactive approaches to information security have not kept pace with the rapidly evolving information technology environment, and a panel of experts examining the state of security at the Energy Department has recommended a fundamentally different approach.  
 
http://gcn.com/articles/2009/02/12/doe-cyber-security-report.aspx?s=gcndaily_170209 

Los Alamos National Lab missing 67 computers 

By Jaikumar Vijayan

New Mexico-based Los Alamos National Laboratory (LANL), the nation's leading nuclear weapons lab, once again finds itself the focus of concerns about potentially serious cybersecurity lapses. 
 
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9127862

Mexico to fingerprint phone users in crime fight  

By Tomas Sarmiento and Cynthia Osterman

Mexico will start a national register of mobile phone users that will include fingerprinting all customers in an effort to catch criminals who use the devices to extort money and negotiate kidnapping ransoms.
 
http://uk.reuters.com/article/latestCrisis/idUKN09529514  

Not Everyone Is Cheering as Wi-Fi Takes to the Air  

By Micheline Maynard

For all the annoyance of being crammed into an aluminum tube at 35,000 feet with a bunch of strangers, air travel has offered one benefit: the ability to tell bosses and colleagues, “I’ll be on a flight, so you won’t be able to reach me.”
 
http://www.nytimes.com/2009/02/07/business/07plane.html?_r=2  

Electronics Firm Faces FTC Lawsuit Following Multiple Hacks  

By Tim Wilson

Warning to security professionals: If you don't do your job right, then it might not only be a firing offense -- it might be a federal offense.
 
http://www.darkreading.com/ 

January 2009

New York Police Fight With U.S. on Surveillance  

By David Johnston and William K. Rashbaum

An effort by the New York Police Department to get broader latitude to eavesdrop on terrorism suspects has run into sharp resistance from the Justice Department in a bitter struggle that has left the police commissioner and the attorney general accusing each other of putting the public at risk.
 
http://www.nytimes.com/2008/11/20/washington/20terror.html

UK identities sold for £80 online  

By Dominic Casciani

Internet fraudsters sell complete financial identities for just £80, according to an online safety group. The details packaged and sold online include names, addresses, passport numbers and confidential financial data such as credit card numbers.
 
http://news.bbc.co.uk/2/hi/uk_news/7732569.stm

China's hackers stealing US defence secrets, says congressional panel  

By Owen Bowcott

China is stealing sensitive information from American computer networks and stepping up its online espionage, according to a US congressional panel.
 
http://www.guardian.co.uk/world/2008/nov/20/america-china-hacking-security-obama       

Worm Infects Millions of Computers Worldwide  

By John Markoff

A new digital plague has hit the Internet, infecting millions of personal and business computers in what seems to be the first step of a multistage attack. The world’s leading computer security experts do not yet know who programmed the infection, or what the next stage will be.
 
http://www.nytimes.com/2009/01/23/technology/internet/23worm.html      

Systems for critical industries wide open to cyberattacks 

By Jill R. Aitoro

The networks used to manage the industries that the nation relies on, such as energy, transportation and chemicals, are vulnerable to cyberattacks, according to a survey of executives that operate critical infrastructure.
 
http://www.nextgov.com/nextgov/ng_20081111_2143.php?zone=itsecurity      

MI5: Internet phone services a risk to national security 

By Leo King

Internet telephone services pose a serious threat to Britain's security, the head of MI5 said. The danger with online calls, said spy chief Jonathan Evans, was that they do not result in telephone bills, which are key evidence documents in prosecutions. This meant it would be much easier for terrorists to make the calls and eventually escape prosecution if they are tried for criminal offenses.
 
http://www.computerworld.com/     

Cyber attacks ranked 3rd danger behind nuclear war 

By Staff Reporter

Cyber attacks pose the greatest threat to the United States after nuclear war and weapons of mass destruction - and they are increasingly hard to prevent, FBI experts say.
 
http://www.thearynews.com/english/newsdetail.asp?nid=19868      

Cops look to jam cell phones if terror strikes 

By Staff Reporter

The NYPD is examining ways to shut down cell phone calls in and around future hostage-taking scenarios without also shutting down the communications devices of the police trying to rescue them, Commissioner Raymond Kelly said at a congressional hearing yesterday.
 
http://www.newsday.com/      

December 2008

Researchers Hack Internet Security Infrastructure, International Team Discovers Way to Mimic Digital Identity 

By Brian Krebs

An international team of computer security researchers demonstrated today a key weakness in the Internet infrastructure that could let hackers launch virtually undetectable attacks aimed at intercepting secured online communications when consumers visit bank and e-commerce Web sites.
 
http://www.washingtonpost.com/wp-dyn/content/story/2008/12/30/ST2008123001136.html     

Justice IG finds IT security vulnerabilities 

By Ben Bain

Despite getting high marks for its compliance with computer security legislation, the Justice Department had major systemic information technology vulnerabilities and did not fully implement policies and procedures meant to increase IT security, according to an audit by the department’s inspector general.
 
http://www.fcw.com/online/news/154700-1.html?type=pf     

Hacking US is Big Business in Russia 

By Staff Reporter

MOSCOW -- Not long ago, the simple, anonymous thrill of exposing chinks in American software was enough of a payoff for a Russian hacker. Today it's cash. And almost all the targets are in the United States and Europe, where Russia's notorious hackers pilfer online bank accounts, swipe social security numbers, steal credit card data and peek at e-mail log-ins and passwords as part of what some estimate to be a $100 billion-a-year global cyber-crime business.

http://www.military.com/news/article/hacking-us-is-big-business-in-russia.html     

SF engineer to stand trial in hijacked network 

By Steven Musil

A network administrator will stand trial for allegedly hijacking the network he designed and maintained for the city of San Francisco.
 
http://news.cnet.com/8301-1009_3-10129313-83.html?tag=mncol;title     

U.S. Is Losing Global Cyberwar, Commission Says 

By Keith Epstein

The U.S. faces a cybersecurity threat of such magnitude that the next President should move quickly to create a Center for Cybersecurity Operations and appoint a special White House advisor to oversee it. Those are among the recommendations in a 44-page report by the U.S. Commission on Cybersecurity, a version of which will be made public today. The bipartisan panel includes executives, high-ranking military officers and intelligence officials, leading specialists in computer security, and two members of Congress.
 
http://www.businessweek.com/bwdaily/dnflash/content/dec2008/db2008127_817606.htm    

November 2008

China's hackers stealing US defence secrets, says congressional panel 

By Owen Bowcott

China is stealing sensitive information from American computer networks and stepping up its online espionage, according to a US congressional panel.
 
http://www.guardian.co.uk/world/2008/nov/20/america-china-hacking-security-obama   

Study: Critical infrastructure often under cyberattack 

By Robert McMillan

Computer systems that run the world's critical infrastructure are not as secure as they should be, according to a new survey.
 
http://www.computerworld.com/    

NSA's smart phone could become government issue 

By Bob Brewin

A new mobile phone specifically designed for the National Security Agency looks like any other commercial smart phone, with a decent-size screen for Web browsing and a full keyboard for data entry.
 
http://www.nextgov.com/nextgov/ng_20081107_9172.php    

State Department, VA disclose two new data breaches 

By Jaikumar Vijayan

Two federal agencies that have already drawn attention this year for data security breaches are back in the spotlight again -- for the same reason. One of them is the U.S. Department of State, which last week disclosed that it had notified close to 400 individuals that the data they had submitted with their passport applications had been stolen in a database intrusion. And last Saturday, the U.S. Department of Veteran's Affairs (VA) said that one of its medical centers in Oregon had accidentally posted personal data on about 1,600 patients on its public Web site.
 
http://www.computerworld.com/   

Cyber-terrorism will be punishable by death 

By Tahir Niaz

President Asif Ali Zardari promulgated the Prevention of Electronic Crimes Ordinance on Thursday, making cyber-terrorism punishable with death or imprisonment for life.
 
http://www.dailytimes.com.pk/   

October 2008

New law brings 911 services into Internet Age 

By William Jackson

FCC issues rules implementing 911 requirements for wireless VOIP. The Federal Communications Commission issued regulations this week for voice-over-IP service providers to offer Enhanced 911 emergency call services to all customers. The rules were required under the New and Emerging Technologies 911 Improvement Act of 2008, which was signed into law in July.
 
http://www.gcn.com/cgi-bin/udt/im.display.printable?client.id=gcn_daily&story.id=47432  

Spy Fears: Twitter Terrorists, Cell Phone Jihadists 

By Noah Shachtman

Could Twitter become terrorists' newest killer app? A draft Army intelligence report, making its way through spy circles, thinks the miniature messaging software could be used as an effective tool for coordinating militant attacks.
 
http://blog.wired.com/defense/2008/10/terrorist-cell.html  

U.S. spent $4 billion more on spying in fiscal '08 than '07 

By David Wood

The U.S. spent $4 billion more on spying in the fiscal year ending Sept. 30 than during the previous year, the director of national intelligence said yesterday.
 
http://www.baltimoresun.com/news/nation/bal-te.spy29oct29,0,1077309.story  

DOD: Controlled but unclassified data is leaking 

By Alice Lipowicz

Controlled but unclassified Defense Department information is leaking to the public from thousands of Web sites sponsored by DOD, according to a recent memo by DOD Chief Information Officer John Grimes.
 
http://www.fcw.com/online/news/154195-1.html 

Al-Qaeda Web Forums Abruptly Taken Offline 

By Ellen Knickmeyer

Four of the five main online forums that al-Qaeda's media wing uses to distribute statements by Osama bin Laden and other extremists have been disabled since mid-September, monitors of the Web sites say.
 
http://www.washingtonpost.com/ 

Keyboard sniffers to steal data  

By Staff Reporter

The attacks were shown to work at a distance of 20 metres. Computer criminals could soon be eavesdropping on what you type by analysing the electromagnetic signals produced by every key press. By analysing the signals produced by keystrokes, Swiss researchers have reproduced what a target typed.

http://news.bbc.co.uk/2/hi/technology/7681534.stm 

Supreme Court takes on 'aggravated' identity theft  

By Bill Mears

The Supreme Court agreed Monday to examine whether prosecutors can aggressively prosecute illegal immigrants for identity theft if they didn't know the documents they were given belonged to someone else.
 
http://www.cnn.com/2008/CRIME/10/20/scotus.immigrants.idtheft/ 

MoD breach: Data goes missing from "secure location"  

By Tom Espiner

IT contractor EDS has lost a hard drive containing Ministry of Defence data. According to press reports, the drive contained sensitive information on approximately 100,000 armed-forces personnel, plus 600,000 potential recruits.
 
http://www.silicon.com/publicsector/0,3800010403,39301020,00.htm

Panel Says Data Mining for Terrorists is an Exercise in Futility 

By Jaikumar Vijayan

The kind of pattern-seeking data mining and behavioral surveillance technologies that are being used by several federal agencies to identify potential terrorists are far too unreliable to be of any real value, according to a report issued by the National Research Council.
 
http://www.csoonline.com/

NIST publishes security guidance for wireless links, industrial controls 

By William Jackson

The National Institute of Standards and Technology has released three information security documents in its 800 series of special publications; two final guidelines on information security assessment and Bluetooth security, and a draft of guidelines for security industrial control systems. 
 
http://www.gcn.com/online/vol1_no1/47273-1.html 
            

Employees, not hackers, cause most corporate data loss 

By Joel Hruska

Earlier this summer, we covered a report suggesting that the majority of corporate data loss comes from risky employee actions and systemic failures at the corporate level when it comes to implementing comprehensive IT security policies. Now, a new study from Compuware reports new information that supports Trend Micro's conclusions from back in July. The unsung heroes in the IT department, it turns out, may be doing a better job stopping outside hackers than they get credit for. 
 
http://arstechnica.com/
            

Encountering Al Qaeda On The Web 

By Dani Reshef

The cyberspace was a main tool for the Global Jihad in indoctrination, communication, guidance, propaganda and recruiting of young Muslims to the cause of Jihad. Footage of successful terror attacks all over the world, hostages begging for their life, beheading of infidels, distributing of alleged atrocities committed by infidels are posted on regular basis on the web.
 
http://www.rightsidenews.com/
            

September 2008

YouTube bans terrorism training videos 

By Staff Reporter

Terrorist training videos will be banned from appearing on YouTube, under revised new guidelines being implemented by the popular video-sharing site. The Google-owned portal will ban footage that advertises terrorism or extremist causes and supporters of the change hope it will blunt al-Qaeda's strong media online campaign.
 
http://news.theage.com.au/            

Hackers block Qaeda’s 9/11 terror on tape 

By Pramit Pal Chaudhuri

Hackers prevented Al Qaeda from releasing a videotape to mark the seventh anniversary of 9/11. Al Qaeda has traditionally issued a video or audiotape by either Osama bin Laden or Ayman al Zawahiri, the terror network’s two leaders, to mark their massive terrorist attack on the US.
 
http://www.hindustantimes.com/            

Exclusive: Widespread cell phone location snooping by NSA? 

By Chris Soghoian

If you thought that the National Security Agency's warrantless wiretapping was limited to AT&T, Verizon and Sprint, think again.
 
http://news.cnet.com           

IRS finds unauthorized Web servers connected to its networks 

By Jill Aitoro

The Internal Revenue Service found more than 1,000 unauthorized Web servers connected to its networks, leaving the agency's systems open to hackers, according to a report released on Thursday by the IRS inspector general.
 
http://www.nextgov.com/nextgov/ng_20080904_3324.php          

Tracking the Terrorists Online 

By Yassin Musharbash

For years, al-Qaida and other terror groups have set up shop in the Internet. Those who track them have covertly followed. The companies SITE and IntelCenter have penetrated even deeper into the terror Web than most intelligence agencies.

http://www.spiegel.de/international/world/0,1518,575276,00.html         

Internet Traffic Begins to Bypass the U.S. 

By John Markoff

The era of the American Internet is ending. Invented by American computer scientists during the 1970s, the Internet has been embraced around the globe. During the network’s first three decades, most Internet traffic flowed through the United States. In many cases, data sent between two locations within a given country also passed through the United States.

http://www.nytimes.com/2008/08/30/business/30pipes.html?_r=1&th&emc=th&oref=slogin         

August 2008

Gov't Warns Against Chinese Cyber-Spys 

By John Markoff

U.S. intelligence officials issued a strong warning Thursday that Americans traveling overseas, particularly visitors to the Olympics in China, face a serious risk of having sensitive information stolen, reports CBS News correspondent Bob Orr. The travel alert is blunt: "All information you send electronically - by fax machine, personal digital assistant (PDA), computer or telephone - can be intercepted."

http://cbs2chicago.com/national/china.olympics.pda.2.790453.html        

Caucasus foes fight cyber war 

By Neil Arun

Armed with computers, unseen ranks of hackers are fanning conflict in the Caucasus. Internet users in Russia and Georgia have attacked vital websites in each other's countries, in a virtual echo of battles being fought on the ground by troops and tanks.

http://news.bbc.co.uk/1/hi/world/europe/7559850.stm       

Cyberspace Barrage Preceded Russian Invasion of Georgia 

By John Markoff

Weeks before physical bombs started falling on Georgia, a security researcher in suburban Massachusetts was watching an attack against the country in cyberspace.

http://www.nytimes.com/2008/08/13/technology/13cyber.html?em       

11 charged in theft of 41 million card numbers 

By Brad Stone

Federal prosecutors have charged 11 people with stealing more than 41 million credit and debit card numbers, cracking what officials said on Tuesday appeared to be the largest hacking and identity theft ring ever exposed. 

http://www.iht.com/articles/2008/08/06/business/06theft.php      

July 2008

Bush Administration Announces Restructuring of Intelligence Agencies 

By Joby Warrick

The Bush administration today announced a restructuring of the nation's intelligence-gathering apparatus, approving new guidelines that bolster the authority of the Office of the Director of National Intelligence (DNI) as the leader of the nation's 16 spy agencies. 

http://www.washingtonpost.com/wp-dyn/content/article/2008/07/31/AR2008073101655.html     

Secret Defense Data Lost on UK Government USBs 

By James Rogers

The U.K.’s Ministry of Defence (MoD) has admitted that 121 USB sticks, including five containing secret information, have been lost or stolen since 2004, in the British government’s latest embarrassing data breach .

http://www.darkreading.com/document.asp?doc_id=159479&WT.svl=news1_5     

IG: DHS has problems with top secret data 

By Alice Lipowicz

The Homeland Security Department still has problems handling classified top secret intelligence information, according to a new report from the department’s Office of the Inspector General.

http://www.fcw.com/online/news/153292-1.html    

Terrorism and the Internet 

By Aaron Sudholt

As the Internet continues to dominate the world over, the nation's military is considering how to better handle threats posed by attacks through it.

http://stclairjournal.stltoday.com/articles/2008/07/26/news/sj2tn20080726-0730fhj-technet.ii1.txt    

Beijing's red spider's web 

By Dan Verton

The fall of the Soviet Union and the end of the Cold War had a profound impact not only on how security and intelligence professionals viewed the world of espionage but also on the motivations of the players and the targets of their espionage activities.

http://www.atimes.com/atimes/China/JG22Ad01.html    

Firms Tackle Security Flaw In Web Addressing System 

By Christopher Rhoads

A computer researcher revealed a fundamental flaw in the Internet's addressing system, necessitating a massive Internet security upgrade primarily for businesses and service providers, according to a division of the Department of Homeland Security.

http://online.wsj.com/article/SB121557348238938533.html?mod=googlenews_wsj   

Cyberspace becoming a legal battleground 

By Adrian McCoy

It could only happen in cyberspace. Someone commits a crime and posts the evidence online for the world to see.

http://www.post-gazette.com/pg/08187/894946-96.stm  

The Citizen Watchdogs of Web 2.0 

By Jeremy Caplan

Buzz From John Edwards' haircut to Hillary Clinton's tear, Web videos have played a well-publicized role in generating buzz about this year's presidential candidates. As influential as those viral clips may be, though, a broader role is arising for so-called voter-generated content. Civic-minded techies are increasingly bringing Web 2.0 to political activism, developing new watchdog tools that open up congressional machinery for ordinary citizens to scrutinize and critique.

http://www.time.com/time/business/article/0,8599,1819187,00.html?xid=rss-topstories  

Judge Orders Google to Turn Over YouTube Records 

By Miguel Helft

A federal judge in New York has ordered Google to turn over to Viacom a database linking users of YouTube, the Web’s largest video site by far, with every clip they have watched there.

http://www.nytimes.com/2008/07/04/technology/04youtube.html?hp 

Public institutions' Web sites target of cyber-attacks  

By The Yomiuri Shimbun

Since March, many Web sites of public institutions such as municipal governments have been altered by cyber-attacks using the method called SQL injection, it has been learned. The attacks are conducted ingeniously by hacking into the server that manages the Web site and setting up a program that infects the site with computer viruses.

http://www.yomiuri.co.jp/dy/national/20080702TDY03305.htm

June 2008

Hackers Hijack Sites of Internet Organizations  

By Stefanie Hoffman

Turkish hackers broke into two of the most established international Websites that oversee and regulate the Internet in order to reroute visitors to a rogue domain, the New York Times reported Friday.

http://www.crn.com/security/208801497

Cyber-terrorism legislation approved by State Senate  

By Eric Gross

Legislation sponsored by State Senator Vincent Leibell that cracks down on computer transgression by creating the new crimes of cyber-terrorism, computer intrusion and the use of a minor in the commission of a computer offense has been approved in the New York State Senate.

http://www.zwire.com

Lloyd's faces up to threat of e-crime  

By Neon Kelly

The growing trend of organised gangs turning to e-crime has been confirmed by Lloyd’s of London, whose networks have been bombarded by structured and competent attacks.

http://www.whatpc.co.uk/computing/analysis/2219887/lloyd-faces-threat-crime

Congress Reaches Deal on Wiretapping Bill   

By Eric Lichtblau

After months of wrangling, Democratic and Republican leaders reached a deal Thursday that would re-write the rules for the government’s wiretapping powers, and would provide what amounts to limited immunity to the telephone companies that took part in President Bush’s warrantless eavesdropping program after the Sept. 11 attacks.

http://www.nytimes.com/2008/06/20/washington/20fisacnd.html?hp

Groups ask court to reverse ruling, limit laptop searches at border  

By Gautham Nagesh

Two advocacy groups are pressing a federal appeals court to rule that government officials at U.S. borders are not allowed to search, download or seize information on travelers’ laptop computers without reasonable suspicion.

http://www.nextgov.com/nextgov/ng_20080613_2643.php?zone=itsecurity

Data breaches usually come from company soft spots, study finds  

By Joseph Menn

Most thefts of sensitive information from corporations occur when the victimized companies don't know what data they have, where they have it or who has access to it, according to a study released Wednesday by Verizon Communications Inc.

http://www.latimes.com/la-fi-breaches11-2008jun11,0,6127882.story

Cyber criminals overseas steal U.S. electronic health records  

By Bob Brewin

In 2004, when Bush administration officials unveiled a project to provide every American with an electronic health record by 2014, they pledged to put privacy and security first. But the discovery in April of stolen health records containing sensitive medical information about U.S. patients on a computer server in Malaysia controlled by cyber criminals indicates such records so far do not pass the privacy and security test.

http://www.nextgov.com/nextgov/ng_20080613_6536.php?zone=ngtoday

Security hole in software exposes world's utilities to Net attacks  

By Jordan Robertson

Attackers could gain control of water treatment plants, natural gas pipelines and other critical utilities because of a vulnerability in the software that runs some of those facilities, security researchers reported Wednesday.

http://www.usatoday.com

NJ congressman's computer hacked from China  

By Robert Cohen

A New Jersey congressman says he is one of at least three lawmakers whose computers have been hacked from China, apparently in search of information about political dissidents and human rights legislation.

http://www.nj.com/news/index.ssf/2008/06/nj_congressmans_computer_hacke.html

N.Y. attorney general forces ISPs to curb Usenet access  

By Declan McCullagh

New York Attorney General Andrew Cuomo announced on Tuesday that Verizon Communications, Time Warner Cable, and Sprint would "shut down major sources of online child pornography."

http://news.cnet.com/8301-13578_3-9964895-38.html

The evolution of national security  

By Andrew B. Einhorn

Last week, the White House issued a new directive providing instructions for standardizing the methods employed by federal agencies to collect, maintain and share biometric data such as fingerprints and other physiological or behavioral characteristics of suspected terrorists.

http://ohmygov.com/blogs/general_news/archive/2008/06/10/white-house-issues-order-to-share-terrorist-biometric-data.aspx 

Taking a byte into crime  

By Editorial Staff

From the beginning, we opposed creation of a KBI -- a Kentucky Bureau of Investigation. We thought that, in the hands of the wrong attorney general, it could become a political dark arts squad, assigned to partisan mischief. The good news is that Kentucky's new attorney general, Jack Conway, has renamed the thing and given it needed focus. It's now his Department of Criminal Investigations, in which he has created a Cybercrimes Division to pursue wrongdoers on the Internet, taking responsibility for evidence that is found in computer and cell phone memory and helping parents protect youngsters from Internet predators.

http://www.courier-journal.com/apps/pbcs.dll/article?AID=/20080610/OPINION01/806100348

NY Bank ‘loses’ 4.5M unencrypted customer records  

By Michael Krigsman

In yet another unbelievable story of data irresponsibility, the Bank of New York (BNY) Mellon lost two sets of unencrypted backup tapes containing private data belonging to 4.5 million individuals. Third-party vendors misplaced the tapes during transport to off-site locations. According to the bank, the tapes “included shareowner and plan participant account information, such as name, mailing address, Social Security number, and transaction activity.”

http://blogs.zdnet.com/projectfailures/?p=603&tag=nl.e550

May 2008

Comcast.net site is hacked briefly  

By Associated Press Staff

Hackers took over Comcast Corp.'s Web portal for several hours overnight, denying 14.1 million subscribers access to the cable company's site for e-mail, news and technical support.

http://www.chicagotribune.com/business/technology/sns-ap-tec-comcast-web-hack,0,3610680.story

Chinese hackers pose serious danger to U.S. computer networks  

By Shane Harris

Computer hackers in China, including those working on behalf of the Chinese government and military, have penetrated deeply into the information systems of U.S. companies and government agencies, stolen proprietary information from American executives in advance of their business meetings in China, and, in a few cases, gained access to electric power plants in the United States, possibly triggering two recent and widespread blackouts in Florida and the Northeast, according to U.S. government officials and computer-security experts.

http://www.govexec.com/story_page.cfm?articleid=40112&dcn=e_gvet

Cyber Terrorism Threat Growing, EU Agency Says  

By Jennifer LeClaire

The threat of cyber terrorism is growing, the European Network and Information Security Agency has warned. ENISA urged more European Union investments in security to avoid a "digital 9/11." Andrea Pirotti, executive director of ENISA, urged the EU to require reporting on security breaches and more cooperation among member states.

http://www.newsfactor.com/news/EU-Warned-of-Growing-Cyber-Threat/story.xhtml?story_id=1230048OPVML

Hackers make way for criminals in cyberspace  

By Huw Jones

Attacking the European Union's Internet backbone is now the preserve of organised crime, not young hackers out to prove a point, the head of the bloc's Web security body said on Tuesday. Andrea Pirotti, executive director of the European Network and Information Security Agency (ENISA), said public authorities have been able to hold their own in the contest -- so far.

http://www.guardian.co.uk/business/feedarticle/7542606

FBI releases details of expansive data-sharing program  

By Andrew Noyes

The FBI released details this week about a little-known information-sharing initiative known as N-DEx, or the Law Enforcement National Data Exchange, which lets agents search and analyze crime data on a secure Web site to help connect the dots between people, places and events.

http://www.govexec.com/story_page.cfm?articleid=39839&sid=60

Homeland Security, FBI must reveal whether detained travelers are on watch list, court order says  

By Antonio Olivo

After years of being detained and interrogated for hours by federal agents each time he returned from a trip abroad, Chicago entrepreneur Akif Rahman could finally know whether his name is on a government watch list for suspected terrorists, his attorneys said Wednesday.

http://www.chicagotribune.com/news/local/chi-watchlist-24-apr24,0,7847146.story

Home Office plans to create 'Big brother' database for phones calls, emails and web use  

By Andy Bloxham

The Home Office will create a database to store the details of every phone call made, every email sent and every web page visited by British citizens in the previous year under plans currently under discussion, it has emerged. The Government wants to create the system to fight terrorism and crime. The police and security services believe it will make it easier to access important data as communications become more complex.

http://www.telegraph.co.uk

Analysis: Feds bust Romanian cyber-ring 

By Shaun Waterman

U.S. indictments unsealed this week charge 38 people with being part of a multinational cybercrime ring that fooled thousands of Americans into giving up credit card and bank information through spam "phishing" e-mails and used it to steal millions of dollars.

http://www.upi.com

ID-protection ads come back to bite pitchman 

By Associated Press Staff

Todd Davis has dared criminals for two years to try stealing his identity: Ads for his fraud-prevention company, LifeLock, even offer his Social Security number next to his smiling mug. Now, Lifelock customers in Maryland, New Jersey and West Virginia are suing Davis, claiming his service didn't work as promised and he knew it wouldn't, because the service had failed even him.

http://www.mercurynews.com/ci_9343471?source=rss

US Air Force Prepares for Cyber Warfare 

By Will Spencer

The Air Force has begun intensive research and development to create cyber warfare tools. An announcement was placed in the government website soliciting ideas for business opportunities. The solicitation notice was released as the Dominant Cyber Offensive Engagement and Supporting Technology effort by the Air Force Research Library.

http://www.americanchronicle.com/articles/62296

Routine conduct at risk with MySpace suicide case 

By Anick Jesdanun

Think twice before you sign up for an online service using a fake name or e-mail address. You could be committing a federal crime. Federal prosecutors turned to a novel interpretation of computer hacking law to indict a Missouri mother on charges connected to the suicide of a 13-year-old MySpace user. Prosecutors alleged that by helping create a MySpace account in the name of someone who didn't exist, Lori Drew, 49, violated the News Corp.-owned site's terms of service and thus illegally accessed protected computers.

http://www.physorg.com/news130180938.html

Woman indicted in fatal cyber-bully case 

By Dan Whitcomb

A Missouri woman who prosecutors say used a fake MySpace persona to "torment, harass, humiliate and embarrass" a 13-year-old girl who committed suicide was indicted on Thursday on federal charges.

http://www.reuters.com/article/domesticNews/idUSN1531758020080515

Internet fuels emergence of violent Islamist groups in the United States 

By Katherine McIntire Peters

The violent Islamist terrorist threat has evolved and expanded since al Qaeda planned the Sept. 11, 2001, terrorist attacks, and radicalization of disaffected Muslims and recent converts to Islam is increasingly occurring here in the United States. Yet the federal government has "no cohesive and comprehensive outreach and communications strategy in place to confront this thread." Those are among the findings of a new report by the staff of the Senate Homeland Security and Governmental Affairs Committee.

http://www.govexec.com/story_page.cfm?articleid=39998&dcn=e_gvet

Criminals try to 'copyright' malware 

By Jordan Robertson

Even criminal hackers want to protect their intellectual property, and they've come up with a method akin to copyrighting — with an appropriate dash of Internet thuggery thrown in. Professional virus writers are now selling a suite of software on the Internet with an unusual attachment: a detailed licensing agreement that promises penalties for redistributing the malicious code without permission.

http://www.usatoday.com/tech/news/computersecurity/2008-04-30-criminals-malware_N.htm

April 2008

The Art of Cyber Warfare, Part 1: The Digital Battlefield

By Jack M. Germain

Computer network attacks are often perpetrated by gangs of criminal hackers attempting to break into a system for financial gain. However, cyber attacks for political purposes could just as easily be -- and sometimes are -- perpetrated. A country's national security could be severely threatened should a team of hackers successfully crack certain computer systems.

http://www.technewsworld.com/story/The-Art-of-Cyber-Warfare-Part-1-The-Digital-Battlefield-62779.html#

German intel agency blasted for cyber espionage

By Robert Lemos

Eight months after the nation's chancellor accused China of information attacks, Germany now faces criticism over its intelligence agency's use of software designed to spy on other countries' officials.

http://www.securityfocus.com/brief/730

Agencies getting serious about virtual worlds 

By Anne Laurent

The National Defense University is building a 600-seat auditorium above an island in a virtual world. Ten days ago, the Air Force put out a call to gauge companies’ interest in prototyping a virtual base. The Transportation Department has constructed a synthetic world with IBM. Last year, the State Department held an eight-hour jazz fest for 300 avatars and chatted in Second Life with 20 others from Canada and Poland about student visas.

http://www.nextgov.com/nextgov/ng_20080428_3630.php?zone=ngtoday

Radio Free Europe says it’s under cyber attack

By Associated Press

Several Web sites of the U.S.-funded Radio Free Europe/Radio Liberty have been attacked, the broadcaster said today, suggesting the Belarus government could be responsible. In the form of a denial-of-service attack that floods servers with fake traffic so legitimate visitors cannot get through, the assault began Saturday and continues, the network said in a statement.

http://www.bostonherald.com/news/international/europe/view.bg?articleid=1090260&srvc=rss

FBI releases details of expansive data-sharing program

By Andrew Noyes

The FBI released details this week about a little-known information-sharing initiative known as N-DEx, or the Law Enforcement National Data Exchange, which lets agents search and analyze crime data on a secure Web site to help connect the dots between people, places and events.

http://www.govexec.com/story_page.cfm?articleid=39839&dcn=e_gvet

Malicious microprocessor opens new doors for attack

By Robert McMillan

Researchers have found a difficult but viable method for hacking a PC's microprocessor -- an attack that would be devastating and virtually undetectable. For years, hackers have focused on finding bugs in computer software that give them unauthorized access to computer systems, but now there's another way to break in: Hack the microprocessor.

http://www.infoworld.com/article/08/04/15/Malicious-microprocessor-opens-new-doors-for-attack_1.html

Europe facing radicalization over the Web

By Olivier Guitta

Bernard Squarcini the head of the DST (Direction de la Surveillance du Territoire), the French equivalent of the FBI, told the French daily Libération regarding Islamic radicalization: "An ideological transformation can be done in three months on the Web. An individual can at night auto-radicalize himself via the Web and get in touch with leaders of terrorist organizations." This assessment shows how dire the situation is in Europe when it comes to al-Qaida's use of the Web.

http://www.metimes.com/International/2008/04/20/europe_facing_radicalization_over_the_web/5616/

Unwittingly hosting terror

By Brian Grow, Keith Epstein and Chi-Chu Tschang

For more than a year, a Burlington-based Internet company hosted a website that taught its members how to outfit a suicide bomber, aired Al Qaeda propaganda videos, and offered an "exclusive" Taliban video showing the beheadings of three "spies," according to computer records.

http://www.boston.com/news/nation/articles/2008/03/27/unwittingly_hosting_terror/

The New E-spionage Threat

By Brian Grow, Keith Epstein and Chi-Chu Tschang

A BusinessWeek probe of rising attacks on America's most sensitive computer networks uncovers startling security gaps.
The e-mail message addressed to a Booz Allen Hamilton executive was mundane—a shopping list sent over by the Pentagon of weaponry India wanted to buy. But the missive turned out to be a brilliant fake. Lurking beneath the description of aircraft, engines, and radar equipment was an insidious piece of computer code known as "Poison Ivy" designed to suck sensitive data out of the $4 billion consulting firm's computer network.

http://www.businessweek.com/print/magazine/content/08_16/b4080032218430.htm

FBI Data Transfers Via Telecoms Questioned

By Ellen Nakashima

When FBI investigators probing New York prostitution rings, Boston organized crime or potential terrorist plots anywhere want access to a suspect's telephone contacts, technicians at a telecommunications carrier served with a government order can, with the click of a mouse, instantly transfer key data along a computer circuit to an FBI technology office in Quantico.

http://www.washingtonpost.com/wp-dyn/content/article/2008/04/07/AR2008040702364.html?hpid=moreheadlines

Army urged to develop process to wage war in cyberspace

By Greg Grant

With wars increasingly fought among the people, information is now an element of combat power as important as lethal action in determining a conflict's eventual outcome, said an Army officer who heads the services computer warfare efforts.

http://www.govexec.com/story_page.cfm?articleid=39733&dcn=e_gvet

Commercial Espionage: Travelers Beware

By Scott Louis Weber

We are addicted to information and cannot go long without being "connected." Indeed, while you are reading this article you will likely check your e-mail or instant message a friend or colleague. Traveling with technology is commonplace. Whether we are on the move for business or pleasure, technology allows us to remain in communication with our personal and business lives, 24/7, without any travel interruptions. But look out. All this can be just fodder for spies.

http://www.forbes.com/opinions/2008/04/08/viator-corporate-espionage-oped-cx_slw_0408viator.html

Nato creates cyber-defence command

By Nick Heath

Nato is creating a cyber-defence command to protect its allies against crippling online attacks on national infrastructures. The Cyber Defence Management Authority (CDMA) will co-ordinate cyber-defence among Nato allies after its formation was backed by members at a Nato summit in Bucharest last week.

http://news.zdnet.co.uk/security/0,1000000189,39382597,00.htm

Zombie Computers Decried As Imminent National Threat

By Ryan Singel

Across the world, thousands of home computers have been conscripted into zombie computer gangs that cyber criminals use to spam, attack and defraud others on the net, causing considerable consternation to law enforcement and security professionals alike, who count the so-called botnets as the most vexing net threat today.

http://blog.wired.com/27bstroke6/2008/04/zombie-computer.html

Congress to industry: 'We need your help'

By William Jackson

Making national cybersecurity policy is an always difficult and often thankless task, the director of a House subcommittee told an audience Wednesday at the RSA Security conference. “One of the things that make cybersecurity difficult is that there are a lot of mixed messages out there,” said Jacob Olcott of the House Homeland Security Subcommittee on Emerging Threats, Cyber Security, and Science and Technology. Some see the threat of cyberterrorism as a reality, and others think dire pronouncements are overblown. “There is a lot of disagreement about what, exactly, we’re dealing with.”

http://www.gcn.com/online/vol1_no1/46086-1.html

US Cyberwarfare Prep Includes Offense

By Anick Jesdanun

U.S. military officials seeking to boost the nation's cyberwarfare capabilities are looking beyond defending the Internet: They are developing ways to launch virtual attacks on enemies. But first the military will have to figure out the proper boundaries.

http://www.wtopnews.com/?nid=108&sid=1381656

March 2008

EU Debates Cybercrime Law Enforcement

By Jan Sliva

Two groups working separately to boost Europe's defenses against online crime will present proposals this week, almost a year after most of the nation of Estonia's links to the Internet were disrupted for days or weeks.

http://www.physorg.com/news126199429.html

Mukasey: piracy funding terror

By Jordon Robertson

Attorney General Michael Mukasey warned Friday that the huge profits generated from piracy and counterfeiting are increasingly flowing into the coffers of terrorist groups.

http://www.thestate.com/technology-wire/story/359147.html

Cyberterrorism, hacktivism: Trying to find hope

By Scott Stewart

Watching the behavior of countries like China and the United States underscores one of the most important insights you can have into geopolitics: Essentially, the world community is in anarchy. The world stage is in a Hobbesian state of nature; there are no rules for those with enough strength or influence to avoid them.

http://media.www.unogateway.com

Hannaford breach raises new fears

By Clarke Canfield and Brian Bergstein

At first, it sounded like another in a long line of credit card breaches: Up to 4.2 million account numbers were stolen by thieves who cracked computers at Hannaford Bros. Co., an Eastern supermarket chain. But the specifics of the crime, revealed this week, included some troubling twists that might expose big holes in the payment industry's security standards.

http://www.denverpost.com/nationworld/ci_8640617

Military to Boost Cyber-Protections

By Lolita Baldor

The military is beefing up efforts to gather intelligence, fend off cyber-attacks and improve relations with other nations as part of a strategy for keeping the U.S. safe while fighting two wars, according to a Pentagon document.

http://www.gopusa.com/news/2008/march/0319_military_cyber1.shtml

Some Viruses Come Pre-Installed

By Jordan Robertson

From iPods to navigation systems, some of today's hottest gadgets are landing on store shelves with some unwanted extras from the factory - pre-installed viruses that steal passwords, open doors for hackers and make computers spew spam.

http://www.physorg.com/news124646014.html

Online Terrorism is Global Concern

By Mandy Clark

While people work hard on their computers - so too do the Internet viruses or malicious software known as malware. Cyber experts say hundreds of thousands of them bombard personal computers every day. Far from being a mere nuisance, these bugs threaten modern life.

http://www.voanews.com/english/2008-03-13-voa17.cfm

NSA's Domestic Spying Grows As Agency Sweeps Up Data

By Siobhan Gorman

Five years ago, Congress killed an experimental Pentagon antiterrorism program meant to vacuum up electronic data about people in the U.S. to search for suspicious patterns. Opponents called it too broad an intrusion on Americans' privacy, even after the Sept. 11 terrorist attacks.

http://online.wsj.com/public/article/SB120511973377523845.html?mod=blog

U.S. unprepared for ongoing cyberwar, say top military and intelligence officials

By Bob Brewin

The United States is in the midst of a cyberwar and is not prepared to deal with it, top Defense Department and intelligence officials acknowledged this week.

http://www.govexec.com/story_page.cfm?articleid=39466&dcn=todaysnews

Windows Hacked in Seconds Via Firewire

By Matthew Broersma

A New Zealand security researcher has published a software tool allowing attackers to quickly gain access to Windows systems via a Firewire port.

http://computerworld.co.nz/news.nsf/scrt/939892823D52DE75CC25740300048AD0

OMB reports 60 percent increase in information security incidents

By Jill R. Aitoro

The number of information security incidents reported by federal agencies jumped from 5,146 in fiscal 2006 to 12,986 last year, with a 70 percent increase in unauthorized access to federal networks alone, according to a report from the Office of Management released Saturday.

http://www.govexec.com/story_page.cfm?articleid=39425&dcn=e_nextgov

February 2008

Why no united front on cyber crime? Divided we fall…

By Simon Moores

The internet is certainly not safe. The statistics may show the risk of crime is decreasing in some areas because of new technical measures and policies. But elsewhere, under the extreme pressures of criminal interests, new leaks are appearing in the collective firewall. They may become a flood if not tackled quickly. That growing influence of serious and organised crime in cyberspace is the focus of representatives from business, finance, government and law enforcement agencies at next week's sixth international e-Crime Congress in London.

http://management.silicon.com/government/0,39024677,39170197,00.htm

German court limits cyber spying

By Staff Reporter

Germany's highest court has restricted the right of the security services to spy on the computers of suspected criminals and terrorists.

http://news.bbc.co.uk/1/hi/world/europe/7266543.stm

Report: Agencies lack identity theft protections even after lapses

By Frederic J. Frommer

Nearly two years after an embarrassing flap in which veterans' personal information was put at risk of identity theft, federal agencies are still not doing all they can to prevent further lapses, investigators have found.

http://www.govexec.com/story_page.cfm?articleid=39347&sid=1

Government still suffers from information insecurity

By Jill R. Aitoro

Federal agencies continue to struggle with information security, according to a new report from the Government Accountability Office. Weak access controls, network device configuration, and management procedures leave systems vulnerable to malicious attacks and data at risk of exposure.

http://www.govexec.com/story_page.cfm?articleid=39314&dcn=e_gvet

Cyberterrorism, Inc

By Peter Buxbaum

A new report says that 2008 will see an expansion of economic espionage in which nation-states and companies will use cybertheft of data to gain economic advantage in multinational deals.

http://www.speroforum.com/site/article.asp?id=14354&tag=

Combating Enemies Online

By James Jay Carafano and Richard Weitz

Even before the terrorist attacks of September 11, 2001, security experts were becoming increasingly concerned about the vulnerability of U.S. computer systems and associated infrastructure. The 9/11 attacks amplified these concerns.

http://frontpagemagazine.com/Articles/Read.aspx?GUID=4FC31039-5A9C-4ADC-97EB-583829145052

Microsoft Helps Nab $900M Piracy Ring

By Jessica Mintz

Near-perfect knockoffs of 21 different Microsoft programs began surfacing around the world just over a decade ago. Soon, PCs in more than a dozen countries were running illegal copies of Windows and Office, turning unwitting consumers into criminals and, Microsoft says, exposing them to increased risk of malicious viruses and spyware.

http://www.examiner.com/a-1208462~Microsoft_Helps_Nab__900M_Piracy_Ring.html?cid=sec-promo

Bush administration proposes $7.3 billion for IT security

By Jill R. Aitoro

President Bush's proposed budget for fiscal 2009 includes $7.3 billion for cybersecurity efforts -- a 9.8 percent increase from last year and a 73 percent increase from fiscal 2004.

http://www.govexec.com/story_page.cfm?articleid=39252&dcn=e_nextgov

U.S. Intelligence Uncovers ‘Russian Threat’

By Dmitry Sidorov

U.S. Congress held annual hearings on security issues, based on the report by National Intelligence Director Michael McConnell. Along with al-Qaeda, Iraq, and Iran, U.S. intelligence officials listed Russia and China among the outer threats. Moscow and Beijing are charged with using their growing economic influence in the world for advancing their own political goals, and with cyber-terrorism. 

http://www.kommersant.com/p850125/r_527/U.S._spy_chiefs_list_Russia_among_threats/

January 2008

Swedish Bank Stops Digital Theft

By Staff Reporter

A gang of Swedish criminals was seconds away from completing a digital bank heist when an alert employee literally pulled the plug on their brazen scam, investigators said Wednesday. The would be bank robbers had placed "advanced technical equipment" under the employee's desk that allowed them to take control of his computer remotely, prosecutor Thomas Balter Nordenman said in a statement.

http://www.newsvine.com/_news/2008/01/30/1265825-swedish-bank-stops-digital-theft

Bush To Request $6 Billion to Combat Cyber-Terrorism

By Tim Stevens

Just last week it was revealed that the group that perpetrated the cyber-attacks on Estonian networks, escalating the already high tension between that nation and its neighbor Russia, wasn't really a group at all. It was a 20-year-old hacker from within Estonia itself. That revelation was a bit of a wake-up call for the global community -- that a strong-minded individual could create an international incident without much trouble. President Bush seems to have been paying attention and is reportedly ready to propose a $6 billion project to create some sort of National Security Agency for American networks.

http://www.switched.com/2008/01/29/bush-wants-6-billion-for-cyberterrorism-protection/

Half Million Computers Infected by Bots Every Day

By Staff Reporter

Every day, some half a million computers are infected by bots, according to data compiled by PandaLabs in its annual report on malware activity in 2007. Bots are programs that operate as agents for a user or another program to simulate human activity, and malicious bots can take complete control of the infected system. Once they have control over several hundred computers, cyber-criminals can connect them to create botnets.

http://www.govtech.com/gt/252775?topic=117671

Bush Order Expands Network Monitoring

By Ellen Nakashima

President Bush signed a directive this month that expands the intelligence community's role in monitoring Internet traffic to protect against a rising number of attacks on federal agencies' computer systems.

http://www.washingtonpost.com/wp-dyn/content/article/2008/01/25/AR2008012503261.html?hpid=moreheadlines

Free Encryption Tool for Al Qaeda Supporters Gets an Upgrade

By Kelly Jackson Higgins

A Website frequented by al Qaeda supporters has released an upgrade to an encryption software tool for Islamic militants to communicate more privately and securely over the Internet -- with a stronger form of encryption, according to a Reuters report.

http://www.darkreading.com/document.asp?doc_id=143780

CIA Says Hackers Have Cut Power Grid

By Robert McMillan

Criminals have been able to hack into computer systems via the Internet and cut power to several cities, a U.S. Central Intelligence Agency analyst said this week.

http://www.pcworld.com/article/id,141564-c,hackers/article.html

Hack Attack Hits 10,000 Web Sites

By Gregg Keizer

A large-scale hack of legitimate Web sites to infect visitors' PCs is much more massive than first thought, researchers said Friday. At least 10,000 sites have been compromised, and have hijacked unpatched systems that steered to their URLs.

http://www.pcworld.com/article/id,141544-page,1/article.html

Al Qaeda Claims Its Space On The Web

By Staff Reporter

The internet has long been an al Qaeda stronghold - a center for raising money and spreading propaganda. A record 97 messages were posted in 2007. But now, the cyber world has also largely replaced conventional training camps and has become the primary location where Islamic radicals are recruited, trained and sent on their way to carry out attacks.

http://www.cbsnews.com/stories/2008/01/17/eveningnews/main3725693.shtml

FBI wants instant access to British identity data

By Owen Bowcott

Senior British police officials are talking to the FBI about an international database to hunt for major criminals and terrorists. The US-initiated programme, "Server in the Sky", would take cooperation between the police forces way beyond the current faxing of fingerprints across the Atlantic. Allies in the "war against terror" - the US, UK, Australia, Canada and New Zealand - have formed a working group, the International Information Consortium, to plan their strategy.

http://www.guardian.co.uk/humanrights/story/0,,2241005,00.html

US drafting plan to allow government access to any email or Web search

By Staff Reporter

National Intelligence Director Mike McConnell is drawing up plans for cyberspace spying that would make the current debate on warrantless wiretaps look like a "walk in the park," according to an interview published in the New Yorker's print edition today.

http://rawstory.com//printstory.php?story=8868

Al-Qaeda’s 007

By Gordon Corera

The extraordinary story of the solitary computer geek in a Shepherds Bush bedsit who became the world’s most wanted cyber-jihadist.

http://women.timesonline.co.uk/tol/life_and_style/women/the_way_we_live/article3191517.ece

One Way to Stop Exposing SSNs

By Allan Holmes

A Wisconsin government agency, like some companies, federal agencies and other organizations, has decided that the way to avoid accidentally exposing Social Security Numbers is to, well, not use them at all to identify citizens. The state's Department of Health and Family Services, which administers the state's Medicaid program, said this week that it would randomly generate ID numbers for the state's 800,000 Medicaid recipients instead of using their Social Security Number. The announcement immediately follows an incident in which EDS, which holds the contract to process the state's Medicaid claims, accidentally printed and mailed the Social Security Numbers of Wisconsin Medicaid recipients on newsletters. Another Wisconsin agency made a similar mistake last year.

http://blogs.govexec.com/techinsider/archives/2008/01/one_way_to_stop_exposing_ssns.php

Calif. Expands Privacy Protections; U.S. Sits By

By Allan Holmes

California has led the nation in passing laws to protect private data, and it continues to hold true to the role. This past Tuesday, a California law went into effect expanding the state's groundbreaking security breach notification law, the nation's first law requiring companies to notify customers if a cyberattack exposes personal financial information.

http://blogs.govexec.com/techinsider/archives/2008/01/calif_expands_privacy_protecti.php

Nato secrets USB stick lost in Swedish library

By Jan Libbenga

The discovery of a USB memory stick containing classified NATO information in a library in Stockholm has prompted a meeting between the Swedish Military Intelligence and Security Service and foreign defence officials.

http://www.theregister.co.uk/2008/01/04/another_stick_with_military_secrets_found/

Missing computer has info on 10,500 airmen

By Erik Holmes

A laptop computer with personal information of 10,501 active-duty and retired airmen is missing from Bolling Air Force Base in Washington, an Air Force official confirmed Wednesday.

http://www.airforcetimes.com/news/2008/01/airforce_missing_computer_080102/

Hackers From China Force Pa. To Shut Down State Web Site

By Staff Reporter

HARRISBURG, Pa. -- Pennsylvania's state government Web site was almost completely shut down Friday after it was infiltrated by hackers from China, but officials said they found no evidence of damage. Four departments had security problems with their Web pages, leading to a decision to take nearly all of the state's Internet site down on Friday morning. Office of Administration spokeswoman Mia DeVane said there was no reason to think anyone's personal data had been compromised or that any damage occurred when a hacker "got into what we would say is a back door."

http://www.nbc10.com/technology/14982217/detail.html?rss=phi&psp=news

If Your Hard Drive Could Testify ...

By Adam Liptak

A couple of years ago, Michael T. Arnold landed at the Los Angeles International Airport after a 20-hour flight from the Philippines. He had his laptop with him, and a customs officer took a look at what was on his hard drive. Clicking on folders called “Kodak pictures” and “Kodak memories,” the officer found child pornography.

http://www.nytimes.com

IRS incorrectly claimed security issues had been corrected

By Jill R. Aitoro

In addition to addressing less than 30 percent of the information security weaknesses highlighted in a 2007 Government Accountability Office report, the Internal Revenue Service provided false claims about its progress, according to a Government Accountability Office auditor.

http://www.govexec.com/story_page.cfm?articleid=38990&dcn=e_gvet

FAA warns of Boeing 787 hacker vulnerability

By Paul Miller

Boeing's still in the final stages of production on its 787 Dreamliner mid-sized jet, but the FAA has already spotted what looks to be a serious security vulnerability in the plane's IT infrastructure. Apparently the computers that provide the 787's passenger area with in-flight internet access and other amenities are physically networked with the main plane computers, including control, navigation and communication systems, which could theoretically provide a path for a hacker to screw with the plane, and even go as far as take full control of the 787.

http://www.engadget.com/2008/01/06/faa-warns-of-boeing-787-hacker-vulnerability/

December 2007

Groups: Record data breaches in 2007

By Mark Jewell

The loss or theft of personal data such as credit card and Social Security numbers soared to unprecedented levels in 2007, and the trend isn't expected to turn around anytime soon as hackers stay a step ahead of security and laptops disappear with sensitive information.

http://www.businessweek.com/ap/financialnews/D8TRVTIO0.htm

Satellite-Surveillance Plan Aims to Mollify Critics

By Siobhan Gorman

After delaying a domestic satellite-surveillance program for more than two months, Homeland Security Secretary Michael Chertoff expects to finalize a new charter for it this week, a move that attempts to quell civil-liberties concerns and get the program back on track.

http://online.wsj.com/article/SB119812248622741723.html?mod=hps_us_whats_news

Hackers Use Stealthy, New Prg Banking Trojan to Attack Commercial Banking Clients in Four Countries - Hackers Break Into Accounts without Username/Passwords

By Don Jackson

SecureWorks has discovered a stealthy, new Prg Banking Trojan. This new variant is the malware behind Zbot, a new botnet designed specifically to do banking fraud. The hackers using this new malware are specifically targeting banking clients that have commercial accounts. The banking variant has been designed and is being used by the Russian UpLevel hacking group and some German affiliates. The UpLevel hackers are staging their latest attacks using data centers in Moscow, Russia, and Mumbai, India.

http://www.secureworks.com/research/threats/bankingprg/?threat=bankingprg

Israel used cyberwar against Syria

By Staff Reporter

The Israeli military used cyberwar techniques to help blind Syrian air defenses prior to its strike on an alleged nuclear facility at Dayr az-Zawr.

http://www.upi.com

NASA will check backgrounds despite criticism

By Aliya Sternstein

NASA is going forward with what some are calling "invasive" background checks at all but one of its field centers despite ongoing litigation to end the process at that facility, NASA officials said Thursday.

http://www.govexec.com/story_page.cfm?articleid=38776&dcn=e_gvet

Hackers Launch Major Attack on US Military Labs

By John E. Dunn

Hackers have succeeded in breaking into the computer systems of two of the U.S.' most important science labs, the Oak Ridge National Laboratory (ORNL) in Tennessee and Los Alamos National Laboratory in New Mexico.

http://www.pcworld.com/article/id,140390-c,hackers/article.html

Air Force moving ahead with Cyber Command

By Gautham Nagesh

The Air Force is moving ahead on establishing its new Cyber Command, searching for permanent facilities and planning meetings to establish rules by which it will operate, according to Air Force officials.

http://www.govexec.com/dailyfed/1207/120707n1.htm

Despite controversy, DHS continues use of data mining

By Alice Lipowicz

Although the Homeland Security Department terminated a controversial visual analytics data mining program this summer, it continues to engage in visual analytics research in a separate program, a spokeswoman confirmed. The ongoing visual analytics research at the Science and Technology Directorate is being publicized as a means of eventually identifying terrorists through potential use of data collected from video surveillance footage, cell phone calls, photos, bank records, chat rooms and e-mails. But no real-world, operational data is actually being used in the research, said DHS spokeswoman Amy Kudwa.

http://www.gcn.com/online/vol1_no1/45491-1.html?topic=homeland-security

Passport applicant finds massive privacy breach

By Kenyon Wallace

A security flaw in Passport Canada's website has allowed easy access to the personal information - including social insurance numbers, dates of birth and driver's licence numbers - of people applying for new passports.

http://www.theglobeandmail.com

DHS launches pilot to integrate fingerprint databases with FBI

By Jill R. Aitoro

The Homeland Security Department began this week testing a fingerprint scanning application in certain airports so it can tap into an FBI database to identify more accurately whether visiting foreigners may be criminals, illegal immigrants or terrorists.

http://www.govexec.com/story_page.cfm?articleid=38755&dcn=e_gvet

Chinese Hackers Accused of Attacking Shell, Rolls Royce

By Jeremy Kirk

Britain's domestic intelligence agency is warning that cybercrime perpetrated by China is on the rise following hacking attacks against Rolls-Royce and Royal Dutch Shell.

http://www.pcworld.com/article/id,140221-c,hackers/article.html

Government 'failing on e-crime'

By Rory Cellan-Jones

Responsibility for investigating e-crime is split between agencies. IT chiefs at some of the UK's biggest companies have accused the government of failing to take e-crime seriously.

http://news.bbc.co.uk/2/hi/technology/7128491.stm

Al Qaeda-linked Web sites number 5,600: researcher

By Ibtihal Hassan

RIYADH (Reuters) - There are now about 5,600 Web sites spreading al Qaeda's ideology worldwide, and 900 more are appearing each year, a Saudi researcher told a national security conference on Tuesday. Saudi Arabia, the world's biggest oil exporter, has identified the Internet as a key battlefield with militants who launched a campaign to topple the U.S.-allied ruling royal family in 2003.

http://www.reuters.com/article/topNews/idUSL0488465620071204?feedType=RSS&feedName=topNews&sp=true

The Trojans are inside the computer gates

By Michael Evans

The golden rule in the counter-espionage business is that when your “enemies” get more sophisticated you have to keep one step ahead of them, particularly when the threat is an electronic one. The Chinese and Russians have now become so adept at hacking into computer systems that MI5 has had to issue a general warning to all government departments and defence companies to take extra precautions to protect their most sensitive information.

http://www.timesonline.co.uk/tol/news/politics/article2980544.ece

November

Hacker threat to U.S. rising

By Dave Montgomery

While U.S. forces in Iraq and Afghanistan engage the enemy with guns, tanks, airplanes and missiles, the American military is quietly fighting a much different kind of war on a new front – cyberspace.

http://www.sacbee.com/111/story/520067.html

U.K. rocked by loss of 25m records

By Joab Jackson

U.S. agency officials stung by data loss can take some solace in the fact that the United States isn’t the only country struggling with data security issues. A U.K. finance head admitted last week that Her Majesty's Revenue and Customs department (HMRC) lost 25 million records with personal information.

http://www.gcn.com/online/vol1_no1/45464-1.html

Cyber wars and the West

By Staff Reporter

In the spring of 2005, Mirsad Bektasevic and Cesur Abdulkadir shared a small apartment in Sarajevo. They watched with dismay as Western television networks gave their take on the wars in Iraq and Afghanistan. They grew enraged. And they vowed to strike back.

http://www.cbc.ca/news/viewpoint/vp_gillespie/2007/11/cyber_wars_and_the_west_1.html

Militants refine web tactics

By Staff Reporter

Islamist militants are becoming more skilled at tailoring their message to specific audiences, including women and children, and Western societies are struggling to find a response. That was the message from a meeting hosted by the Organisation for Security and Cooperation in Europe (OSCE) this week, attended by leading experts on Islamist radicalisation.

http://www.stuff.co.nz/stuff/4280823a28.html

States clammed up after 9/11

By John Gramlich

The 2001 terrorist attacks led every state but South Dakota to restrict access to information deemed critical to homeland security — from architectural blueprints to emergency evacuation routes, according to a comprehensive, state-by-state study of post-9/11 changes to open-government laws.

http://www.stateline.org/live/details/story?contentId=258013

Bureau warns on tainted discs

By Yang Kuo-wen, Lin Ching-chuan and Rich Chang

Portable hard discs sold locally and produced by US disk-drive manufacturer Seagate Technology have been found to carry Trojan horse viruses that automatically upload to Beijing Web sites anything the computer user saves on the hard disc, the Investigation Bureau said. Around 1,800 of the portable Maxtor hard discs, produced in Thailand, carried two Trojan horse viruses: autorun.inf and ghost.pif, the bureau under the Ministry of Justice said.

http://www.taipeitimes.com/News/taiwan/archives/2007/11/11/2003387202

EU justice ministers agree limited data protection rules (Roundup)

By Staff Reporter

Brussels - European Union justice ministers Friday agreed on a minimum set of rules protecting the cross-border exchange of personal data by law-enforcement agencies in the 27 member states.

http://news.monstersandcritics.com/

Alicia Keys' MySpace Page Sings with Malicious Code

By Steven Schwankert

When a visitor views the page, an exploit first attempts to install malware on the visitor's computer if it is not properly patched. Thompson said he was not sure yet which flaw the malware was looking to exploit. If that is not successful, the user is then asked to install a fake codec to view a video.

http://www.pcworld.com/article/id,139472-c,hackers/article.html

Intelligence community developing virtual world analysis tools

By Mark Mazzetti

The Intelligence Advanced Research Projects Activity project is directed by Jeffery Morrison, who runs the Analyst Space for Exploitation (A-SpaceX) program. Morrison says his project is designed to harness technologies to help the 15 agencies that report to the Office of the Director of National Intelligence to change from a "need to know" culture to a "need to share" culture.

http://www.govexec.com/story_page.cfm?articleid=38498&dcn=todaysnews

October

$43.5 Billion Spying Budget for Year, Not Including Military

By Mark Mazzetti

Congress authorized spending of $43.5 billion over the past year to operate spy satellites, remote surveillance stations and C.I.A. outposts overseas, according to a budget figure released Tuesday by Mike McConnell, director of national intelligence.

http://www.nytimes.com/2007/10/31/washington/31intel.html?_r=1&oref=slogin

Austria plans to start conducting secret online searches in 2008

By Staff Reporter

It is planned that the police will use online searches in Austria from autumn 2008 onwards. According to a report of the radio station Ö1, the Minister of Justice, Maria Berger (SPÖ) [Social Democratic Party of Austria] and her colleague, the Minister for Internal Affairs, Günther Platter (ÖVP) [Austrian People's Party] have agreed to this. In the station's morning news show called "Morgenjournal" Platter maintained that online searches would only be used in the case of serious crime or suspicion of supporting a terrorist organisation. The law drafted by Platter and Berger is to be discussed today in a cabinet meeting. After that a group of experts will settle the legal and technical details arising from the use of a Trojan program.

http://www.heise.de/english/newsticker/news/97595

Reports of federal security breaches double in four months

By Jill R. Aitoro

Federal agencies report an average of 30 incidents a day in which Americans' personally identifiable information is exposed, double the number of incidents reported early this summer, according to the top information technology executive in the Bush administration.

http://www.govexec.com/story_page.cfm?articleid=38348&dcn=e_hsw

IG: DHS has yet to properly secure networks

By Jill R. Aitoro

The Homeland Security Department, chastised by Congress and security experts for having some of the worst information security practices in government, has improved its security plan and policies but now must begin deploying its plan, according to a report recently released by the department's inspector general.

http://www.govexec.com/story_page.cfm?articleid=38312&dcn=e_tcmg

Tighter security over power plant computer systems urged

By Jill R. Aitoro

Current regulations to protect the control systems that support power plants nationwide fall short of federal recommendations, posing a serious threat to the electric infrastructure and national security, witnesses testified at a hearing Wednesday. One lawmaker threatened legislation if standards don't improve.

http://www.govexec.com/story_page.cfm?articleid=38319&dcn=e_tcmg

Verizon Says It Turned Over Data Without Court Orders

By Ellen Nakashima

Verizon Communications, the nation's second-largest telecom company, told congressional investigators that it has provided customers' telephone records to federal authorities in emergency cases without court orders hundreds of times since 2005.

http://www.washingtonpost.com/wp-dyn/content/article/2007/10/15/AR2007101501857.html?hpid=topnews

Critical Infrastructure Protection: Multiple Efforts to Secure Control Systems Are Under Way, but Challenges Remain

By GAO

Control systems--computer-based systems that monitor and control sensitive processes and physical functions--perform vital functions in many of our nation's critical infrastructures, including electric power, oil and gas, water treatment, and chemical production. The disruption of control systems could have a significant impact on public health and safety, which makes securing them a national priority. GAO was asked to (1) determine cyber threats, vulnerabilities, and the potential impact of attacks on critical infrastructure control systems; (2) determine the challenges to securing these systems; (3) identify private sector initiatives to strengthen the cybersecurity of control systems; and (4) assess the adequacy of public sector initiatives to strengthen the cybersecurity of control systems. To address these objectives, we met with federal and private sector officials to identify risks, initiatives, and challenges. We also compared agency plans to best practices for securing critical infrastructures.

http://www.gao.gov/docsearch/abstract.php?rptno=GAO-07-1036

An Internet Jihad Aims at U.S. Viewers

By Michael Moss

When Osama bin Laden issued his videotaped message to the American people last month, a young jihad enthusiast went online to help spread the word.

http://www.nytimes.com/2007/10/15/us/15net.html?_r=2&oref=slogin&oref=slogin

19 year old to be arraigned for breaching US 911 emergency call system

By Staff Reporter

Washington State resident Randall Ellis, 19, will be arraigned on 22nd October for abusing the 911 emergency call system. It appears that he has a method for spoofing the origin of a 911 call, and is believed to have used this to make over 200 hoax emergency calls throughout the US over a period of a couple of years. However, as reported by the Orange County Register, his latest exploit came near to ending in tragedy on the night of 29th March this year. He reported a bogus drug-related shooting at an apparently randomly selected private address in Lake Forest, Orange County, California, eliciting a full armed response from the authorities.

http://www.heise-security.co.uk/news/97549

Researchers Take 'Internet Census'. Computer Security, Infrastructure Issues Top List of Reasons for Study

By Ashley Phillips

For the first time, researchers have conducted an Internet census by mapping the Web's nearly 3 billion assigned IP addresses, an effort that could provide important clues to how to fight computer viruses, according to the University of Southern California Information Sciences Institute.

http://abcnews.go.com/Technology/TenWays/story?id=3713460&page=1

Qaeda Goes Dark After a U.S. Slip, Enemy Vanishes From Its Web Sites

By Eli Lake

Al Qaeda's Internet communications system has suddenly gone dark to American intelligence after the leak of Osama bin Laden's September 11 speech inadvertently disclosed the fact that we had penetrated the enemy's system.

http://www.nysun.com/article/64163

August VA systems outage crippled western hospitals, clinics

By Bob Brewin

A day-long system outage at a new Veterans Affairs Department data processing center in northern California on Aug. 31 crippled critical information systems used to manage patient care at VA hospitals and clinics scattered across more than a third of the world, according to details from an internal VA after-action report.

http://www.govexec.com/story_page.cfm?articleid=38235&sid=1

September

"Cyber Jihadist" Trial Opens New Front in Anti-Terror Fight

By Sonia Phalnikar

Defining what constitutes terrorism on the Internet poses new challenges for governments. In a landmark case, a court in Germany will decide whether posting terrorist propaganda and calls to violence on the Internet is tantamount to supporting terrorism as it tries a man for conducting a "virtual jihad."

http://www.dw-world.de/dw/article/0,2144,2800263,00.html

Estonia urges UN Member States to cooperate against cyber crimes

By UN Staff

The international community should step up its efforts to defeat cyber crime, starting by acceding to an international convention on the issue and eventually building to the development of a globally negotiated and comprehensive law of cyberspace, Estonia’s President Toomas Hendrik Ilves told the General Assembly tonight.

http://www.un.org/apps/news/story.asp?NewsID=23977&Cr=general&Cr1=debate

Contractor Blamed in DHS Data Breaches

By Ellen Nakashima and Brian Krebs

The FBI is investigating a major information technology firm with a $1.7 billion Department of Homeland Security contract after it allegedly failed to detect cyber break-ins traced to a Chinese-language Web site and then tried to cover up its deficiencies, according to congressional investigators.

http://www.washingtonpost.com/wp-dyn/content/article/2007/09/23/AR2007092301471.html

Mouse click could plunge city into darkness, experts say Story Highlights

By Jeanne Meserve

Researchers who launched an experimental cyber attack caused a generator to self-destruct, alarming the government and electrical industry about what might happen if such an attack were carried out on a larger scale, CNN has learned.

http://www.cnn.com/2007/US/09/27/power.at.risk/index.html

GIMF Develops Defensive and Offensive Software for Jihadi Operations

By Abdul Hameed Bakier

In July 2007, jihadi forums announced the creation of a new computer program called the Secrets of the Mujahideen, version 1.0. The objective of the program—which was published and distributed by the Global Islamic Media Front (GIMF) through many jihadi websites—is to replace the old and unreliable PGP corporation encryption tools that jihadis had used in the past. Since the release of the program, jihadi websites, especially the GIMF, are instructing their subscribers to communicate using the program's encryption keys (http://ebnseren.modawanati.com, March 22). Furthermore, al-Qaeda operatives are using Secrets of the Mujahideen in an attempt to avoid U.S. eavesdropping operations against them (http://el-bilad.com, July 6).

http://www.jamestown.org/terrorism/news/article.php?articleid=2373681

Terrorism and Internet Use

By Brent MacLean

The great and many wondrous virtues of the Internet—its ease of access, lack of regulation, the potential audiences it caters to, and its fast flow of information, among others have been turned to the advantage of groups committed to terrorizing societies to achieve their selective goals. Today, most active terrorist groups have established their presence in some way or another on the Internet. Terrorism on the Internet is an extremely dynamic phenomenon: websites suddenly emerge, frequently modify their formats, and then swiftly disappear—or, in many cases, seem to disappear by changing their online address but retaining much the same content.

http://www.canadafreepress.com/2007/internet-security092107.htm

Swedish hacker slams US agencies, thanks Indians for support

By Abhishek Behl

In an exclusive telephonic interview, a Swedish hacker slammed the US government in believing the dictum ‘security in obscurity’. He appreciated the support of Indians in exposing the security loopholes.

http://www.merinews.com/catFull.jsp?articleID=126448

Bin Laden, Brought to You by . . .

By Joby Warrick

Early yesterday morning, a South Carolina Web designer who works at home managed to scoop al-Qaeda by publicly unveiling its new video, a feat she has accomplished numerous times since 2002. Within hours, cable news stations were broadcasting images of Osama bin Laden commemorating the Sept. 11, 2001, terrorist attacks, and crediting the 50-year-old woman, who uses the pseudonym Laura Mansfield.

http://www.washingtonpost.com/wp-dyn/content/article/2007/09/11/AR2007091102465.html

Pa. Welfare Department Computers Stolen

By Staff Writer

HARRISBURG, Pa. — Burglars stole two computers containing records on people who receive medical assistance benefits for mental health and substance abuse treatment, state officials said Tuesday.

http://www.chron.com/disp/story.mpl/ap/fn/5125978.html

Cyber attacks: a new weapon in the state arsenal

By Staff Writer

Cyber-attacks against government networks in recent months illustrate how states like China are discovering the power of a new weapon that is less expensive and more discreet than battalions of tanks or spies.

http://afp.google.com/article/ALeqM5izkiUz-8u1rsvfDH29rJEsd17clw

TSP to halt use of Social Security numbers as account IDs

By Brittany R. Ballenstedt

In an effort to enhance security, the 3.8 million participants in the federal Thrift Savings Plan will no longer be identified by their Social Security numbers, officials for the retirement savings program announced Friday.

http://www.govexec.com/story_page.cfm?articleid=37972&dcn=e_gvet

Homeland Security drops data-mining program

By Michael J. Sniffen

The Homeland Security Department has given up on one of its broadest anti-terrorism data-mining tools after investigators found it was tested with information about real people without the required privacy safeguards.

http://www.govexec.com/story_page.cfm?articleid=37936&dcn=todaysnews

Alleged Chinese hacker attack stirs fears of digital cold war

By Tom A. Peter

Since news broke this week that Chinese hackers, allegedly part of China's People's Liberation Army (PLA), had hacked into US, British, and German government computers to access defense and foreign-policy-related information, analysts have begun to speculate that the West may be moving into something of a new age cold war stand-off with China.

http://www.csmonitor.com/2007/0906/p99s01-duts.html

Cyberwarfare: The mouse that roared

By Economist.com

A decade or so ago, thinkers and pundits were fond of discussing the emerging threat of cyber attacks as a matter of international affairs. The growing reliance of advanced economies on the internet, and the increasing use of the internet by governments and armies, seemed to offer vulnerability along with riches and convenience. The scare of the “Y2K bug” seemed to highlight the danger, at least until it became obvious that the bug was of no threat to anyone.

http://www.economist.com/displaystory.cfm?story_id=9752625

August

Hackers steal info on users of federal job site

By Brittany R. Ballenstedt

Hackers have stolen the names and contact information of about 146,000 job seekers on the USAJOBS Web site, the Office of Personnel Management revealed Wednesday.

http://www.govexec.com/story_page.cfm?articleid=37888&dcn=e_gvet

DHS upgrades databases

By Wilson P. Dizard III

The Homeland Security Department has unveiled several important upgrades to databases that collectively contain tens of millions of personal immigration and travel records.

http://www.gcn.com/print/26_22/44925-1.html?topic=homeland-security

Beijing police launch virtual Web patrol

By Staff Reporter

BEIJING - Police in China's capital said Tuesday they will start patrolling the Web using animated beat officers that pop up on a user's browser and walk, bike or drive across the screen warning them to stay away from illegal Internet content.

http://www.msnbc.msn.com/id/20477258/

Merkel's China Visit Marred by Hacking Allegations

By Staff Reporter

German Chancellor Angela Merkel's visit to China has been overshadowed by a report in SPIEGEL claiming that the Chinese government has been hacking into computers in Merkel's chancellery and three other Berlin ministries.

http://www.spiegel.de/international/world/0,1518,502169,00.html

Homeland Security to broaden sharing of visitor data

By Chris Strohm

The Homeland Security Department on Wednesday announced broad changes for using a database that collects and stores information on foreign travelers to the United States. In one of the biggest changes, the department plans to regularly share information with U.S. intelligence agencies, department officials said in an interview Thursday. "This is a first step to make it clear that we do have the authority to conduct this type of sharing and to make the public know that we do plan to do so in the future," one official said on condition of anonymity.

http://www.govexec.com/story_page.cfm?articleid=37843&dcn=e_gvet

Death penalty proposed for cyber terrorism

By Staff Writer

ISLAMABAD: The Electronic Crimes Bill 2007 has already been approved in principle by the federal cabinet and will be enacted soon through an act or an ordinance.

http://www.thenews.com.pk/daily_detail.asp?id=69539

Exposing on-line Jihadists

By Judi McLeod

When it comes to capitalizing on the Worldwide Internet, Al Qaida has shot up to the top of the list in the savvy category. Jihadists working the Internet are prolific, so much so that they could easily borrow a line in popular use during the Cold War: “They’re everywhere!”

http://www.canadafreepress.com/2007/cover081007.htm

DHS cuts time it will save passenger data

By Alice Lipowicz

In response to more than 600 public comments, the Homeland Security Department has shortened the amount of time it will retain data and made other changes to its Automated Targeting System (ATS).

http://www.fcw.com/article103446-08-07-07-Web

Border Computers Vulnerable to Attack

By Spencer S. Hsu

The U.S. government's main border control system is plagued by computer security weaknesses, increasing the risk of computer attacks, data thefts, and manipulation of millions of identity records including passport, visa and Social Security numbers and the world's largest fingerprint database, officials said.

http://www.washingtonpost.com/wp-dyn/content/article/2007/08/02/AR2007080202260.html?hpid=sec-nation

Computer Security Problems Found at IRS

By Jim Abrams

IRS employees ignored security rules and turned over sensitive computer information to a caller posing as a technical support person, according to a government study.

http://www.time.com/time/business/article/0,8599,1649553,00.html

NSA Spying Part of Broader Effort

By Dan Eggen

The Bush administration's chief intelligence official said yesterday that President Bush authorized a series of secret surveillance activities under a single executive order in late 2001. The disclosure makes clear that a controversial National Security Agency program was part of a much broader operation than the president previously described.

http://www.washingtonpost.com/wp-dyn/content/article/2007/07/31/AR2007073102137.html?hpid=topnews

July

FBI Seeks To Pay Telecoms For Data

By Ellen Nakashima

The FBI wants to pay the major telecommunications companies to retain their customers' Internet and phone call information for at least two years for the agency's use in counterterrorism investigations and is asking Congress for $5 million a year to defray the cost, according to FBI officials and budget documents.

http://www.washingtonpost.com/wp-dyn/content/article/2007/07/24/AR2007072402479.html

Internet Imams: Inside the Cyber-Jihad

By Christopher Dickey

Muslims in America have long resisted the calls to violence preached in other parts of the world. But Al Qaeda and its spinoffs are working hard to change that, and one of their most important tools is the Internet. In a briefing for reporters last week, Edward Gistaro, the national intelligence officer for transnational threats, noted that many jihadist sites are now published in English as well as Arabic, and are "calling for attacks against the United States." The concern is that loners and small groups acting on their own will be inspired to kill, if not for Islam, then for what former federal prosecutor Mary Jo White aptly describes as "the terrorists' own self-created religion" based on rage against the West.

http://www.msnbc.msn.com/id/19886672/site/newsweek/

Point, click, terror?

By Zinia Sen

Social networking services can be used for everything from publicizing a garage band to finding dates to connecting supporters of democracy - and even terrorism!

http://timesofindia.indiatimes.com/Cities/City_Supplements/Calcutta_Times/Point_click_terror_/articleshow/2223383.cms

Hackers Steal U.S. Government, Corporate Data from PCs

By Jim Finkle

Hackers stole information from the U.S. Department of Transportation and several U.S. companies by seducing employees with fake job-listings on advertisements and e-mail, a computer security firm said.

http://www.eweek.com/article2/0,1895,2159835,00.asp?kc=EWKNLGOV071807STR1

Homeland Security, E.U. reach agreement on passenger data sharing

By Brian Krebs

The global jihad landed in Linda Spence's e-mail inbox during the summer of 2003, in the form of a message urging her to verify her eBay account information. The 35-year-old New Jersey resident clicked on the link included in the message, which took her to a counterfeit eBay site where she entered personal financial information.

http://www.govexec.com/story_page.cfm?articleid=37398&dcn=e_hsw

Data on Americans Mined for Terror Risk

By Lara Jakes Jordan

The FBI is gathering and sorting information about Americans to help search for potential terrorists, insurance cheats and crooked pharmacists, according to a government report obtained Tuesday.

http://www.examiner.com/a-822338~Data_on_Americans_Mined_for_Terror_Risk.html

Three Worked the Web to Help Terrorists

By Elizabeth Newell

A new agreement between the Homeland Security Department and the European Union, expected to be finalized in the coming weeks, will clarify the manner in which DHS can use personal information about international travelers collected from airline reservation systems.

http://www.washingtonpost.com/wp-dyn/content/article/2007/07/05/AR2007070501945_pf.html

High-tech border network could fall prey to cyberattacks

By Bob Brewin

The Homeland Security Department's planned wireless network of high-tech towers to watch for illegal immigrants crossing the border from Mexico into the United States is vulnerable to cyberattacks that could shut the system down, according to security experts.

http://www.govexec.com/story_page.cfm?articleid=37393&dcn=e_gvet

June

Forum Users Improve Electronic Jihad Technology

By Abdul Hameed Bakier

The members of http://al-jinan.org have targeted websites critical of Islam and Islamic rituals. They have labeled themselves electronic jihadis and believe that they are engaging in an online form of the jihad. The website distributes a program called Electronic Jihad that assists in overwhelming the servers of certain websites, thereby taking the websites offline, at least temporarily.

http://jamestown.org/terrorism/news/article.php?articleid=2373496

BP: Cyber terrorism threat is growing

By Fiona Raisbeck

A cyber terrorism attack on the UK infrastructure will happen in the next five years, according to the Digital Security Services Manager at BP. The British energy giant will develop technology to protect the organisation and the national infrastructure against a cyber terrorism attack over the next few years, said Rob Martin at the opening of Symantec’s Security Operations Centre (SOC) yesterday.

http://scmagazine.com/uk/news/article/666240/bp-cyber-terrorism-threat-growing/

Cyber Attack Hits Pentagon

By AP Staff

The Defense Department took as many as 1,500 computers off line because of a cyber attack, Pentagon officials said Thursday. Few details were released about the attack, which happened Wednesday, but Defense Secretary Robert Gates said the computer systems would be working again soon.

http://www.sfgate.com/cgi-bin/article.cgi?f=/n/a/2007/06/21/financial/f134611D07.DTL

Swiss Internet Terror Trial Opens

By Gabriella Broggi

BELLINZONA, Switzerland (AP) -- A North African man and his wife went on trial Wednesday on charges they ran Web sites that supported al-Qaida-linked groups with videos of people killed by terrorists and information on how to make bombs.

http://www.kstp.com/article/stories/S119071.shtml?cat=6

France Warns Officials on BlackBerry Use

By John Leicester

PARIS - BlackBerry handhelds have been called addictive, invasive, wonderful _ and now, a threat to French state secrets. That, at least, is the fear of French government defense experts, who have advised against their use by officials in France's corridors of power, reportedly to avoid snooping by U.S. intelligence agencies.

http://www.casperstartribune.net/articles/2007/06/21/ap/hitech/d8psueeo1.txt

DHS acknowledges own computer break-ins

By Ted Bridis

WASHINGTON -- The Homeland Security Department, the lead U.S. agency for fighting cyber threats, suffered more than 800 hacker break-ins, virus outbreaks and other computer security problems over two years, senior officials acknowledged to Congress.

http://seattlepi.nwsource.com/national/1152AP_DHS_Computer_Security.html

Hackers Blamed For Data Breach That Compromised 300,000

By Sharon Gaudin

The FBI's investigation into a data breach that compromised sensitive information on 300,000 people in Illinois is pointing to an outside hacker.

http://www.informationweek.com/story/showArticle.jhtml?articleID=199901334

FBI: Over one million computers working for botnets

By Jeremy Reimer

The US Department of Justice and the FBI have released a statement that they have identified over one million computers who have become part of a "botnet"—taken over by malicious software for the purpose of sending out spam and attacking other computers. The FBI has been working with industry partners such as Microsoft and the Computer Emergency Response Team Coordination Center at Carnegie Mellon University.

http://arstechnica.com/news.ars/post/20070614-fbi-over-one-million-computers-working-for-botnets.html

The Internet: Midwife of Global Radicalism?

By Caryle Murphy

In a dimly lit, ninth-floor room of an office building in northern Virginia, Ned Moran and his staff practice their craft of cyber-surveillance. Seated at stylish chrome desks, uncluttered but for white Mac iBooks, they finger tap their way into the most public arena visited by al-Qaida and other extremist Islamist groups: the Internet.

http://www.science-spirit.org/newdirections.php?article_id=705

Army, Air Force seek to go on offensive in cyber war

By Bob Brewin

In an unusual act of candor, both the Army and Air Force in the past two months have issued solicitations asking the computer industry to provide technologies the services can use to wage offensive cyberattacks against enemy computer systems.

http://www.govexec.com/story_page.cfm?articleid=37185&dcn=e_gvet

EU Approves Visa Data System

By AP Staff

The European Union on Tuesday approved a European visa data system which will store biometric information like fingerprints and photos on 70 million visa-holders who pass through the EU's borderless travel zone each year.

http://www.physorg.com/news100866989.html

FAA Computer Glitch Causes Flight Delays

By Alan Zibel

WASHINGTON -- A cascading computer failure in the nation's air-traffic control system caused severe flight delays and some cancellations Friday along the East Coast. A computer system in Atlanta that processes pilots' flights plans and sends them to air-traffic controllers failed early Friday, Federal Aviation Administration spokeswoman Diane Spitaliere said. In response, the agency rerouted the system's functions to another computer in Salt Lake City, which overloaded because of the increased volume of data, magnifying the problem.

http://www.chicagotribune.com/travel/sns-ap-flight-delays,1,288718.story?track=rss

Cyberwinter? Here's What It Means To Commercial IT

By Patricia Keefe

The recent distributed denial-of-service blitz that has paralyzed parts of Estonia's government and commercial Web sites over the past month has spawned a lot of talk of "cyberwinters" and "cyberterrorism." While what happened to Estonia is unusual in its scope and focus, and is possibly the first publicized attack on a country's cyberinfrastructure, it's not necessarily a bellwether of trends to come.

http://www.informationweek.com/blog/main/archives/2007/06/cyber_winter_he.html

The NYT, the Voice of the KGB

By JüriUustalu

How the New York Times Traded Journalistic Integrity for Vodka and Caviar.
Those of us who read the New York Times regularly have been shocked by what can be at best described as pro Kremlin reporting or at worst, a case of outright journalistic fraud.

http://www.epl.ee/sartikkel/1077

Terrorism, cyber and transnational crime top Aseanapol's priorities

By S Ramesh

SINGAPORE: International cooperation within the police community gets a boost with ASEAN's police chiefs signing a declaration of cooperation with Interpol on Wednesday.

http://www.channelnewsasia.com/stories/singaporelocalnews/view/280572/1/.html

Cyber-crime protection pushes new precedents for privacy

By John Blau

Law enforcement officials in Germany and Austria are now among the first to have electronic access to each other's fingerprint databases, the German Federal Ministry of the Interior said yesterday. The two countries have shared their DNA databases since last year as one of several measures agreed by some European Union nations under the Treaty of Prum in 2005.

http://www.intergovworld.com/article/f8265ea10a01040800daab16f34211a8/pg1.htm

Singapore flags ASEAN data link with Interpol

By AFP

SINGAPORE: ASEAN will link up its common database of criminal information with Interpol as the region steps up efforts to combat crime and terrorism, a Singapore minister said on Monday.

http://www.dnaindia.com/report.asp?NewsID=1101084

May

Terrorism Targets On Wall Street

By Doug McIntyre

On Sept. 10, 2001, the Dow Jones industrial average closed at 9,605.51. In the aftermath of the Sept. 11 terrorist attacks, the market reopened on Sept. 17, 2001, and hit an intraday low of 8,755.46. The market could not recover for a month.

http://www.forbes.com

Agencies told to limit use of Social Security numbers

By Michael J. Sniffen

Plagued by regular breaches in the security of personal data, federal agencies were ordered Tuesday to eliminate the unnecessary collection and use of Social Security numbers by early 2009.

http://www.govexec.com/story_page.cfm?articleid=37002&sid=1

Nations seek protection from growing threat of cyber warfare

By The Economist - Staff Writer

Imagine that agents of a hostile power, working in conjunction with organized crime, could cause traffic jams in your country's biggest cities that are big enough to paralyze business, media, government and public services, and to cut you off from the world.

http://www.hamiltonspectator.com

GAO: FBI Network Wide Open to Hacking

By Allan Holmes

The FBI's effort to upgrade its computer systems -- a program that has had numerous missteps and failures over the years -- is again under fire. This time the Government Accountability Office concludes in a report released this week that the FBI's new network has major security lapses that leave the system open to hackers both inside the agency and out.

http://blogs.govexec.com/techinsider/archives/2007/05/gao_fbi_network_wide_open_to_h.html

Brussels to wage war on cyber crime

By Renata Goldirova

STRASBOURG – The European Commission has tabled a proposal suggesting how to win the war against high-tech crimes such as online fraud, child pornography and hacking - just days after institutional websites in EU state Estonia were crippled by a series of cyber attacks.

http://euobserver.com/9/24107

Alcatel-Lucent trying to find lost disk

By Staff Writer

TRENTON, N.J. (AP) - Alcatel-Lucent (Nachrichten/Aktienkurs) said Friday it is reviewing security procedures and has halted use of couriers for sending personnel information after a computer disk with financial and other data on employees and retirees went missing.

http://www.finanznachrichten.de/nachrichten-2007-05/artikel-8270943.asp

Estonia Urges E.U. And Nato For Strategy To Counter Cyber Terror

By Susheela Hegde

Tallinn, Estonia (AHN) - A distraught Estonia urged Nato and the European Union to work out a strategy against cyber offenses after being hit by the third wave of cyber attacks in three weeks on Thursday.

http://www.allheadlinenews.com/articles/7007386317

NSA seeks to open classified network to allies

By Bob Brewin

NSA and Defense plan to open a classified network known as the Secret Internet Protocol Router Network (SIPRNet), to a small pool of trusted allies, including Australia, Canada, the United Kingdom and New Zealand, according to PowerPoint briefing slides dated April 27, 2007, and prepared by NSA's Office of Assured Information Sharing Technologies and Products.

http://www.govexec.com/story_page.cfm?articleid=36953&dcn=todaysnews

Estonia accuses Russia of ' waging cyber war'

By Tony Halpin

Estonia is accusing Russia of waging cyber war against it by launching massive attacks on computer systems in the Baltic republic. In an interview with The Times, Urmas Paet, the Estonian Foreign Minister, accused the Kremlin of direct involvement in attempts to paralyse Estonian government websites and telephone networks as part of a campaign of unofficial sanctions.

http://www.timesonline.co.uk/tol/news/world/europe/article1802959.ece

Bush orders agencies to develop emergency operations plans

By Daniel Pulliam

President Bush signed a directive Wednesday outlining a strategy for preparing the federal government to continue running during a national emergency such as a terrorist attack or a natural disaster.

http://www.govexec.com/story_page.cfm?articleid=36884&dcn=e_gvet

FBI reaches out to clamp down on economic espionage

By Tom Breen

America has no friends when it comes to the research that gives its companies, universities and government a competitive edge. Countries all over the world - including friends and allies - would like to have that research, and they would love to get it for free. To combat that, the FBI is approaching universities and businesses to offer guidance and advice on how to better recognize security breaches and to take steps to keep them from happening.

http://www.zwire.com/site/news.cfm?newsid=18315135&BRD=2212&PAG=461&dept_id=465812&rfi=6

Homeland Security data-sharing systems criticized

By Winter Casey

The U.S. homeland security information-sharing structure was criticized Thursday by witnesses at a House subcommittee hearing -- with the failure to integrate existing communications systems being singled out as a major culprit.

http://www.govexec.com/story_page.cfm?articleid=36888&dcn=e_tcmg

Report says Internet a key tool for extremists

By Mimi Hall

WASHINGTON — Government and community leaders aren't doing enough to counter multimedia-savvy terrorists from using flashy websites, provocative video games, hip-hop music and gruesome images of bloodied Muslim children to recruit young people online, according to a new report that says the Internet may be extremists' most powerful frontier.

http://www.usatoday.com/news/washington/2007-05-02-internet-extremists-report_N.htm

Lloyd's Report Warns of Threats from 'Political Violence'

By Staff Writer

A new report from Lloyd's and the Economist Intelligence Unit (EIU) has found that global businesses are becoming increasingly concerned about risks from political violence. However, too little has been done to analyze those risks and to "really understand" their impact.

http://www.insurancejournal.com/news/international/2007/05/10/79591.htm

Air Force chief: 'Killing another nation's satellite is an act of war' 

By Staff Writer

China’s anti-satellite weapon test earlier this year was a “strategically dislocating event,” said Air Force Chief of Staff Gen. Michael Moseley last week, who warned that any such attack on U.S. satellites would be an act of war.

http://www.worldtribune.com/worldtribune/07/front2454224.913888889.html?tr=y&auid=2656481

TSA Loses Hard Drive With Personal Info

By Matt Apuzzo

WASHINGTON — The Transportation Security Administration has lost a computer hard drive containing Social Security numbers, bank data and payroll information for about 100,000 employees.

http://www.spokesmanreview.com/ap/story.asp?AP_ID=D8OTTA9O0

USDA officials apologize for exposing Social Security numbers

By Michael Posner

Top Agriculture Department officials conceded Wednesday they discovered 38,700 Social Security numbers of farmers were publicly available on the Internet only after a sleepless farm woman found hers there one night.

http://www.govexec.com/story_page.cfm?articleid=36794&dcn=e_gvet

April

Cyber terror threat is growing, says Reid

By George Jones

Terrorists could attempt to cause economic chaos or plane crashes in an electronic attack on the UK's computer networks John Reid, the Home Secretary, said yesterday. Cyber terrorism could target air traffic control systems.

http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2007/04/26/nterr26.xml

Joining forces against the digital enemy

By Tom Young

Security experts have been saying for some time that cyber attacks against critical elements of the national infrastructure are one of the biggest dangers we face today. And a growing number of governments are starting to listen.

http://www.computing.co.uk/computing/analysis/2188580/joining-forces-against-digital

Fed breach leaks Social Security numbers

By Michael J. Sniffen

WASHINGTON -- The Social Security numbers of 63,000 people who received Agriculture Department grants have been posted on a government Web site since 1996, but they were taken down last week. Free credit monitoring is being offered to those affected.

http://seattlepi.nwsource.com/national/1152AP_Government_Data_Breach.html

New hacker techniques threaten agencies

By Aliya Sternstein

With hackers constantly concocting new types of malicious software, government agencies are struggling to stay abreast of the latest threats, according to testimony released Thursday by federal auditors.

http://www.govexec.com/story_page.cfm?articleid=36690&dcn=e_gvet

Government to test Internet routing in space

By Winter Casey

The U.S. government is moving forward with a project to test Internet routing in space. Companies will work on a Defense Department plan to determine the feasibility of conducting military communications through an Internet router located there.

http://www.govexec.com/story_page.cfm?articleid=36689&dcn=e_gvet

Uncle Sam Gets a C-Minus for Information Security

By Brian Prince

A House committee gave the federal government a grade of C-minus for 2006 as part of the committee's annual assessment of how well information is protected on government computers.

http://www.eweek.com/article2/0,1895,2113592,00.asp?kc=EWGOVEMNL04180707EOAD

Wireless security puts IRS data at risk

By The Associated Press

Internal Revenue Service offices across the nation that use wireless technology are still vulnerable to hackers, according to the latest assessment of the agency's security policies released Tuesday.

http://www.businessweek.com/ap/financialnews/D8OIKNJG0.htm

Intelligence chief announces 100-day reform plan

By Daniel Pulliam

The new director of national intelligence on Wednesday announced a 100-day initiative to improve "integration and collaboration" among the federal government's 16 intelligence agencies.

http://www.govexec.com/story_page.cfm?articleid=36584&dcn=e_gvet

Another Social Security Breach at UC Leads to Further Call for Legislation

By Frank D. Russo

Assembly member Dave Jones Jones is the author of legislation that would require all colleges and universities in California to remove Social Security numbers from their Internet-accessible files unless their inclusion is absolutely necessary.

http://www.californiaprogressreport.com/2007/04/another_social.html

March

Audit finds few problems with IRS outsourcing program

By Jenny Mandel

The Internal Revenue Service has done an effective job in setting up a program for private sector companies to collect federal tax debts, according to a recent audit, but some members of Congress and an employee union are hoping to end the program before its planned expansion later this year.

http://www.govexec.com/story_page.cfm?articleid=36491&dcn=e_gvet

Terror Database Has Quadrupled In Four Years

By Karen DeYoung

Each day, thousands of pieces of intelligence information from around the world -- field reports, captured documents, news from foreign allies and sometimes idle gossip -- arrive in a computer-filled office in McLean, where analysts feed them into the nation's central list of terrorists and terrorism suspects.

http://www.washingtonpost.com/wp-dyn/content/article/2007/03/24/AR2007032400944.html

TJX: At Least 45.7M Card Numbers Stolen

By AP staff

BOSTON Mar 29, 2007 (AP)— More than two months after first disclosing that hackers accessed customers' financial data from its computers, discount retailer TJX Cos. has revealed that information from at least 45.7 million credit and debit cards was stolen over an 18-month period.

http://abcnews.go.com/Business/wireStory?id=2990845&Business=true

Experts Call for More Security in Sharing Airline Passenger Data

By DW staff

Data Protection experts in the EU and the US are pushing for more security in the controversial gathering of key passenger data by US authorities from European airlines as part of measures to fight terrorism.

http://www.dw-world.de/dw/article/0%2C2144%2C2419460%2C00.html?tr=y&auid=2505957

Al-Qaeda terrorists among 10,000 who conned UK out of passports

By Gerri Peev

TWO convicted terrorists, including a key al-Qaeda member, were among at least 10,000 applicants who fraudulently obtained passports from the Home Office in the last year, ministers said.One of the men - Dhiren Barot - was the al-Qaeda figure who planned radioactive "dirty" bombs in London. He was convicted in December after admitting conspiracy to murder and jailed for 40 years. He managed to obtain nine British passports, seven of them in his name.

http://thescotsman.scotsman.com/index.cfm?id=435932007&tr=y&auid=2486243

Auditors urge DHS to assess privacy risks in data-mining program

By Chris Strohm

The Homeland Security Department has not built adequate privacy protections into a data-mining program under development, increasing the risk that innocent people could be tagged as terrorists or criminals, government auditors concluded in a report Wednesday.

http://www.govexec.com/story_page.cfm?articleid=36416&dcn=e_gvet

Al-Qaeda plot to bring down UK internet

By David Leppard

SCOTLAND YARD has uncovered evidence that Al-Qaeda has been plotting to bring down the internet in Britain, causing chaos to business and the London Stock Exchange. In a series of raids, detectives have recovered computer files revealing that terrorist suspects had targeted a high-security internet “hub” in London.

http://www.timesonline.co.uk/tol/news/uk/crime/article1496831.ece

Census Bureau exposes personal data on public Web site

By Daniel Pulliam

The Census Bureau this week announced that it accidentally posted personal information concerning 302 American households on a Web site where it was publicly accessible intermittently for about five months.

http://www.govexec.com/story_page.cfm?articleid=36323&dcn=e_gvet

Feds test new data mining program

By John Yaukey

WASHINGTON —Lawmakers and privacy advocates are concerned that a powerful new data searching tool being tested by the Department of Homeland Security could pose a threat to Americans' privacy as it sifts through mountains of information for patterns that might reveal terrorists. Called ADVISE — for Analysis, Dissemination, Visualization, Insight and Semantic Enhancement — the program is capable of linking and cross-matching material from websites and blogs to government records and personal data.

http://www.usatoday.com/news/washington/2007-03-07-datatools_N.htm

CRS: Terrorists find fertile environment in cyberspace

By Patience Wait

Finding proof that terrorists plan to launch cyberattacks against the United States is difficult, but the accessibility and vulnerability of the Internet to attack makes it a growing threat. “The time may be approaching when a cyberattack may offer advantages that cause terrorists to act, even if the probability of success or level of effectiveness is unknown,” according to the Congressional Research Service.

http://www.gcn.com/online/vol1_no1/43263-1.html?topic=homeland-security

February

How Modern Terrorism Uses the Internet

By Gabriel Weimann

The great virtues of the Internet—ease of access, lack of regulation, vast potential audiences, and fast flow of information, among others—have been turned to the advantage of groups committed to terrorizing societies to achieve their goals. Today, all active terrorist groups have established their presence on the Internet. Our scan of the Internet in 2003–4 revealed hundreds of websites serving terrorists and their supporters.

http://www.asiantribune.com/index.php?q=node/4627&tr=y&auid=2389671

Study on privacy protections finds citizens distrust security agencies

By Andrew Noyes

The CIA, Homeland Security Department and National Security Agency are the least trusted federal agencies when it comes to protecting Americans' privacy, according to a new study by the Ponemon Institute.

http://www.govexec.com/story_page.cfm?articleid=36167&dcn=e_gvet

Satellite wars are coming next

China's successful test of a ballistic anti-satellite missile last month by blowing up one of its own weather satellites without prior warning, and Iran's recent announcement that it has developed a similar long-range ballistic missile, are two strong indications that the time has come for decision-makers in the West to sit up and pay attention to a new dimension of global strategic concern.

http://www.jpost.com/servlet/Satellite?cid=1170359860633&pagename=JPost/JPArticle/ShowFull&tr=y&auid=2375646

Beijing Strangles the Internet

By Frederick W. Stakelbeck Jr.

The internet has become an important part of Chinese culture, with the country’s increasingly diverse population embracing the technology’s many powerful features. According to the state-controlled think tank China Internet Network Information Centre (CINIC), the country had 137 million internet users as of December 2006, up 26 million users, or 23.4 percent, from 2005.

http://frontpagemagazine.com/Articles/ReadArticle.asp?ID=26723

VA loses sensitive information on 1.3 million doctors

By Daniel Pulliam

The hard drive that went missing from a Birmingham, Ala., Veterans Affairs Department facility last month contained highly sensitive information on nearly all U.S. physicians and medical data for about 535,000 VA patients, agency officials announced over the weekend.

http://www.govexec.com/story_page.cfm?articleid=36113&dcn=e_gvet

New IT spending aimed partly at cybersecurity

By Aliya Sternstein

The president's proposal to increase funding for federal information technology programs by almost 3 percent over last year's budget request is aimed partly at fortifying cybersecurity, White House Office of Management and Budget officials said Wednesday.

http://www.govexec.com/story_page.cfm?articleid=36081&dcn=e_tcmg

Hackers overwhelm key Web computers

By Ted Bridis

WASHINGTON - Hackers briefly overwhelmed at least three of the 13 computers that help manage global computer traffic Tuesday in one of the most significant attacks against the Internet since 2002.

http://www.msnbc.msn.com/id/17011675/

Does data mining even work?

By William Jackson

The specter of agencies trawling databases of personal information in search of clues to terrorist activity raises difficult questions about balancing privacy with security, but witnesses at a recent Senate Judiciary Committee hearing helpfully cut through a lot of the fog to simplify this issue.

http://www.gcn.com/print/26_03/43074-1.html?topic=techreport

Google blots out Iraq basis on Internet

By Thomas Harding

British military bases in Iraq have been "blotted" out from Google Earth maps at the request of the Government to hinder terrorist attacks, it can be revealed.

http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2007/01/20/wgoogle20.xml

GAO's new high-risk list looks much like the old one

By Florence Olsen

The Government Accountability Office has added three federal program areas to its high-risk series report. Released today, the report highlights the need to protect technologies critical to national security, improve food safety and pay for transportation improvements. GAO’s auditors emphasized in their high-risk series report that critical technologies continue to be the targets of theft, espionage, reverse engineering and illegal export.

http://www.fcw.com/article97524-01-31-07-Web

January

Navy developing massive information network

By Daniel Pulliam

Navy Department officials are in the early stages of developing a massive information network that will encompass all existing department networks including the much maligned Navy-Marine Corps Intranet.

http://www.govexec.com/story_page.cfm?articleid=35978&dcn=e_gvet

Thrift Savings Plan hacker attack prompts extra precautions

By Karen Rutzick

Hackers breached the accounts of some Thrift Savings Plan participants in late December, stealing $35,000 and prompting officials to encourage extra safeguards.

http://www.govexec.com/story_page.cfm?articleid=35873&dcn=e_gvet

December 2006

Physical details of all residents to be held on ID database

By Hamish Macdonell

EVERYBODY living in the United Kingdom, including foreigners, will be required to have their biometric details recorded under the government's identity card scheme, it emerged yesterday. John Reid, the Home Secretary, announced that all UK residents, whether or not they were British citizens, would be forced to have their irises scanned and their fingerprints taken for the national database.

http://news.scotsman.com/uk.cfm?id=1887262006

U.S. Warns of Threat to Satellites

By Barry Schweid

WASHINGTON -- The Bush administration warned Wednesday against threats by terrorist groups and other nations against U.S. commercial and military satellites, and discounted the need for a treaty aimed at preventing an arms race in space.

http://www.latimes.com/news/nationworld/politics/wire/sns-ap-us-space,1,6056241.story?coll=sns-ap-politics-headlines&ctrack=1&cset=true

U.S.-Canada Trusted Traveler Program Upgraded, Expanded

By CBP Headquarters, Office of Public Affairs

Washington, D.C. – U.S. Customs and Border Protection announced today that three NEXUS trusted traveler programs have been integrated into a single program. This integration means that there will be one application form and fee to participate in all modes of the NEXUS program - air, land and marine. In addition, NEXUS will provide processing locations at additional airports in Canada throughout 2007.

http://www.customs.treas.gov/xp/cgov/newsroom/news_releases/12142006.xml

DHS, industry use LOGIIC to combat cyberthreats

By Kerri Hostetler

The Homeland Security Department has teamed with 13 organizations on a 12-month project to secure the process control systems of the nation’s oil and gas industries against cybersecurity threats. A cyberattack on the control and data systems of electric power plants, or oil and gas refineries and pipelines—two of 17 pieces of the nation’s critical infrastructure—could potentially bring the country to a halt. The problem is compounded because private companies control 85 percent to 90 percent of the country’s critical infrastructure—leaving the government few avenues to ensure that IT systems are secure.

http://www.gcn.com/print/25_34/42765-1.html?topic=homeland-security 

Internet criminals to step up "cyberwar" in 2007

By Peter Griffiths

LONDON (Reuters) - Computer hackers will open a new front in the multi-billion pound "cyberwar" in 2007, targeting mobile phones, instant messaging and community Web sites such as MySpace, security experts predict. As people grow wise to email scams, criminal gangs will find new ways to commit online fraud, sell fake goods or steal corporate secrets.

http://today.reuters.com/news/articlenews.aspx?type=internetNews&storyid=2006-12-11T171049Z_01_L1038087_RTRUKOC_0_US-BRITAIN-CYBERCRIME.xml&src=rss&rpc=22

DHS floats proposal for 'Global Envelope' of terrorist info sharing

By Wilson P. Dizard III

A senior Homeland Security Department official today sketched the outline of an ambitious plan for internationally sharing biometric identification information about individuals who pose terrorist threats. Robert Mocny, acting director of the U.S. Visitor and Immigrant Status Indicator Technology program, outlined a proposal under which the United States would begin exchanging information about terrorists first with closely allied governments in Britain, Europe and Japan ,and then progressively extend the program to other countries as a means of foiling terrorist attacks.

http://www.gcn.com/online/vol1_no1/42677-1.html?topic=homeland-security

Traveler screening to continue despite public outcry

By Chris Strohm

The Homeland Security Department plans to continue using a controversial program to screen all travelers to and from the United States, despite mounting calls that the program be suspended until Congress and the public have more time to investigate it.

http://www.govexec.com/story_page.cfm?articleid=35601&dcn=e_gvet

FBI taps cell phone mic as eavesdropping tool

By Declan McCullagh

The FBI appears to have begun using a novel form of electronic surveillance in criminal investigations: remotely activating a mobile phone's microphone and using it to eavesdrop on nearby conversations.

http://articles.techrepublic.com.com/2100-1035_11-6140191.html?tag=nl.e019

November

Countries obligated to share data, U.S. official says

By Chris Strohm

A senior Homeland Security official said Wednesday that countries have an obligation to share information with each other on potentially dangerous travelers. He estimated that a global identity management system could be operational by the end of the decade.

http://www.govexec.com/story_page.cfm?articleid=35574&dcn=e_gvet

Immigration services bureau loses thousands of records

By Daniel Pulliam

The U.S. Citizenship and Immigration Services agency may have processed as many as 30,000 citizenship applications in 2005 without reviewing critical background files, thousands of which have been lost, according to a new report from the Government Accountability Office.

http://www.govexec.com/story_page.cfm?articleid=35568&dcn=e_gvet

Security agency to eliminate millions in retention allowances

By Jonathan Marino

The Homeland Security Department's Federal Protective Service recently announced that it plans to end a retention allowance program that benefits hundreds of police and investigators, as it continues to fight a funding shortfall.

http://www.govexec.com/story_page.cfm?articleid=35569&dcn=e_gvet

Saving the Data

By Chris Preimesberger

U.S. businesses are going to have to change the way they handle electronically stored information when new federal rules go into effect Dec. 1. The new regulations, adopted by the U.S. Supreme Court in April, say businesses must be able to quickly find such data when required by the federal court.

http://www.eweek.com/article2/0,1895,2064416,00.asp?kc=EWGOVEMNL112906EOAD

Air Force to create Cyber Command

By Josh Rogin

The Air Force announced plans this month to create a Cyber Command to bring full-scale military operations to cyberspace, although no one knows if the tactics and policies that the Defense Department uses to wage war will be effective on the cyber battlefield.

http://www.fcw.com/article96791-11-13-06-Print

Policing terror

By John Moore

Thinking of local police as first responders recognizes only one of the important contributions they can make to homeland security. A recent Rand report suggests that local law enforcement is the critical line of defense for thwarting homegrown terrorist activity.

http://www.fcw.com/article96760-11-13-06-Print

Officials eye 50-percent mark on cyber compliance

By Heather Greenfield

HERNDON, Va. -- A survey of information technology officials found that most expect to be 50 percent compliant with federal cyber-security guidelines within the next year.

http://www.govexec.com/story_page.cfm?articleid=35482&dcn=e_tcmg 

Homeland Security eyes data fusion in states, localities

By Chris Strohm

The Homeland Security Department hopes to improve information sharing with state and local government fusion centers by giving those centers intelligence officers and an advanced communications network for classified information, a senior official said Friday.

http://www.govexec.com/story_page.cfm?articleid=35412&dcn=e_hsw

October

Hackers Disrupt Online Brokers

By Jonathan Keehner and Kevin Drawbaugh

NEW YORK (Reuters)—High-tech crooks using spyware are costing U.S. discount brokerages millions of dollars to repay clients who have been victimized by fraud, the brokerages said in recent days.

http://www.eweek.com/article2/0,1895,2037003,00.asp?kc=EWGOVEMNL102506EOAD

Agency explores new tool to connect intelligence dots

By Shane Harris

The government's top intelligence agency is building a computerized system to search very large stores of information for patterns of activity that look like terrorist planning.

http://www.govexec.com/story_page.cfm?articleid=35310&dcn=e_hsw

Business data breaches found to be more costly than thought

By Heather Greenfield

A new study reports that data breaches may cost companies even more than previously thought. The Ponemon Institute released its annual study on the cost of data breaches and found that they cost companies on average $182 per compromised record.

http://www.govexec.com/story_page.cfm?articleid=35328&dcn=e_gvet

Congress gives DHS six months to revise terrorist watch lists

By Chris Strohm

With frustration levels apparently reaching an all-time high, lawmakers have given the Homeland Security Department a hard deadline to revamp its process for clearing individuals who have been wrongly put on terrorist watch lists.

http://www.govexec.com/story_page.cfm?articleid=35246&dcn=e_gvet

Privacy groups rap DHS plan to limit access to clearance information

By Jonathan Marino

Privacy advocates have voiced strong opposition to the Homeland Security Department's proposal to scale back the amount of information that security clearance applicants can access about government investigations of their background.

http://www.govexec.com/story_page.cfm?articleid=35214&dcn=e_gvet

Chinese crackers attack US.gov

By John Leyden

Chinese hackers have launched a sustained attack against the web systems of the US Department of Commerce. Security experts reckon attacks originating from computer crackers largely located in China's Guangdong province are aimed at extracting sensitive information from targets such as the Commerce Department's technology export office.

http://www.theregister.co.uk/2006/10/09/chinese_crackers_attack_us/

September

Report points to flaws in Energy agency's IT security

By Daniel Pulliam

The information security program at the Energy Department division governing the natural gas industry, oil pipelines and hydroelectric projects fails to meet federal requirements, leaving the agency at risk to cyberattacks, auditors concluded in a recent report.

http://www.govexec.com/story_page.cfm?articleid=35155&dcn=e_gvet

VA installs encryption software on thousands of laptops

By Daniel Pulliam

The Veterans Affairs Department installed encryption software on nearly 15,000 laptop computers during the past two weeks in an attempt to better protect sensitive information against misuse, officials told lawmakers Tuesday.

http://www.govexec.com/story_page.cfm?articleid=35117&dcn=e_gvet

Googling for ATM Master Passwords

By Ryan Naraine

Using clues obtained from a YouTube video and a simple four-word Google search engine query, a criminal can find step-by-step instructions for how to hack into and take control of thousands of ATMs scattered around the United States.

http://www.eweek.com/article2/0,1895,2018674,00.asp?kc=EWFINEMNL092506EOAD

Commerce reports loss of more than 1,100 laptops over 5 years

By Daniel Pulliam

An agency-wide review at the Commerce Department turned up more than a thousand missing or stolen laptops over the last five years, with hundreds containing the personal information of American citizens.

http://www.govexec.com/story_page.cfm?articleid=35081&dcn=e_gvet

DHS names cybersecurity czar

By Daniel Pulliam

The Homeland Security Department announced the appointment of a cybersecurity chief Monday, more than 14 months after the position was created.

http://www.govexec.com/story_page.cfm?articleid=35050&dcn=e_gvet

Federal privacy law faces review from data advisers

By Andrew Noyes

Experts from two federal advisory committees are embarking on a review of critical privacy and policy issues, with a particular focus on implications of the decades-old Privacy Act and other legislation.

http://www.govexec.com/story_page.cfm?articleid=35046&dcn=e_gvet

U.S. seeks improvements to sharing of security info

By Winter Casey

Since attacks in the United States five years ago Monday focused world attention on terrorism, the European Union has taken strides to help fight terrorism. However, the United States is currently in discussions with Europe on two information-sharing agreements.

http://www.govexec.com/story_page.cfm?articleid=34991&dcn=e_gvet

August

A Tool We Need to Stop the Next Airliner Plot

By Michael Chertoff

Imagine that our troops in Afghanistan raided an al-Qaeda safe house and captured a computer containing the cellphone numbers of operatives in Europe. Wouldn't it be important to know whether one of those cellphone numbers was used to book a transatlantic flight? Unfortunately, today our ability to make that connection remains limited: Information that terrorists readily share with travel agents cannot easily be shared throughout the United States government. That needs to change.

http://www.washingtonpost.com/wp-dyn/content/article/2006/08/28/AR2006082800849.html

Technology trap / Is our national obsession with technology causing us to misdirect our terrorism-fighting efforts?

By John Moore

Technology has become so intertwined with homeland security it would be difficult to name a security program in which technology isn’t the main driver or an important underpinning.

http://www.fcw.com/article95769-08-28-06-Print

Bush names VA chief information officer

By Daniel Pulliam

Acting Veterans Affairs Department chief information officer Robert Howard will be nominated to fill the agency's top technology position on a permanent basis, the White House announced Tuesday.

http://www.govexec.com/story_page.cfm?articleid=34912&dcn=e_tcmg

Laptops with sensitive data stolen from Education contractor

By Daniel Pulliam

Two laptop computers believed to contain unencrypted personal information about 43 grant reviewers were stolen from an Education Department contractor in Washington, D.C., earlier this month.

http://www.govexec.com/story_page.cfm?articleid=34906&dcn=e_tcmg

IRS readies to start private debt collection next week

By Jenny Mandel

The Internal Revenue Service last week published guidance on an initiative to turn some tax debt collection over to private contractors, paving the way for three companies to begin receiving taxpayer data next week. But the initiative is facing stiff opposition.

http://www.govexec.com/story_page.cfm?articleid=34918&dcn=e_gvet

Indonesia accuses two of cyber terrorism

By Associated Press

JAKARTA — Police in Indonesia announced the arrests Wednesday of two men accused of using computer technology to aid terrorists in the world's most populous Muslim country.

Click Here for a Link That's Way Too Big

Education data breach puts 21,000 student loan borrowers at risk

By Daniel Pulliam

Student loan holders logging on to an Education Department Web site between Sunday night and Tuesday morning exposed their personal identities to others as a result of a glitch in a contractor's efforts to service the site.

http://www.govexec.com/story_page.cfm?articleid=34872&dcn=e_gvet

AT&T Sues Data Brokers for Stolen Customer Records

By Reuters

NEW YORK (Reuters)—AT&T Inc. on Wednesday sued 25 unnamed data brokers, accusing them of fraudulently gaining access to about 2,500 customers' calling records.

http://www.eweek.com/article2/0,1895,2007535,00.asp?kc=EWGOVEMNL082306EOAD

High-Res Executions and Bloddy DVDst

By Susanne Koelbl

Terrorists are becoming increasingly adept at producing high-quality videos. DVDs depicting bloody beheadings are now available at markets in Pakistan and Afghanistan. They're also on the Web.

http://service.spiegel.de/cache/international/spiegel/0,1518,432122,00.html

Encryption taken off Transportation IG laptop shortly before theft

By Daniel Pulliam

The Transportation Department inspector general's office removed the encryption on a laptop containing the personal information of 133,000 Florida residents about two weeks before it was stolen late last month from a government-owned Chevrolet Blazer parked outside a Miami area cafeteria.

http://www.govexec.com/story_page.cfm?articleid=34763&dcn=e_gvet

DHS to field additional data mining tools in wake of bomb plot

By Wilson P. Dizard III

The Homeland Security Department will deploy additional computerized methods of pinpointing threats in airports in response to the newly uncovered plot to blow up aircraft flying from London to the United States, department's secretary Michael Chertoff, said today.

http://www.gcn.com/online/vol1_no1/41607-1.html

How Hizballah Hijacks the Internet

By Hilary Hylton

What do a small south Texas cable company, a suburban Virginia cable provider and Web-hosting servers in Delhi, Montreal, Brooklyn and New Jersey have in common? Since fighting broke out in Lebanon, they all have had their communications portals hijacked by Hizballah. Hackers from the militant Lebanese group are trolling the Internet for vulnerable sites to communicate with one another and to broadcast messages from Al-Manar television, which is banned in the U.S. In the cyberterrorism trade it is known as "whack-a-mole" — just like the old carnival game, Hizballah sites pop up, get whacked down and then pop up again somewhere else on the World Wide Web.

http://www.time.com/time/world/article/0,8599,1224273,00.html

More sensitive information goes missing from VA

By Daniel Pulliam

A desktop computer possibly containing the names, Social Security numbers and medical data of up to 38,000 people is missing from the offices of a Veterans Affairs Department subcontractor.

http://www.govexec.com/story_page.cfm?articleid=34720&dcn=e_gvet

Cyber-Thieves Steal $700K Via ATM Hacking

By Chris Preimesberger

Cyber-thieves who hacked into the ATM information of at least 800 retail customers in California and Oregon have stolen as much as $700,000 from personal accounts during the last two months, according to police reports.

http://www.eweek.com/article2/0,1895,1999367,00.asp?kc=EWFINEMNL080706EOAD

July

The Man Who Put Al-Qaeda on the Web

Posting and boasting his way to prominence, Irhabi007 started appearing on radical Islamist bulletin boards and in chat rooms. For his user I.D., he melded "irhabi," which means "terrorist" in Arabic, to the code number of the world's most famous, albeit fictional, British secret agent.

http://www.newsfactor.com/story.xhtml?story_id=13200C4PE9Z0&page=1

Report: U.S. unprepared for major Web disruption

By Heather Greenfield

A Government Accountability Office report released Friday warns that the United States is not prepared for a major disruption to the Internet. The report found that existing legislation and regulations "do not specifically address roles and responsibilities for Internet recovery."

http://www.govexec.com/story_page.cfm?articleid=34657&dcn=e_gvet

Insurance Company Loses 540,000 N.Y. Employee Records

By  Matt Hines

Government officials in New York are warning 540,000 injured state workers that an outside contractor has lost a computer containing their personal data, including the employees' names, addresses and social security numbers.

http://www.eweek.com/article2/0,1895,1994416,00.asp?kc=EWGOVEMNL072606EOAD

Oversight agencies squabble over list of high-risk IT projects

By Daniel Pulliam

The Office of Management and Budget and the Government Accountability Office disagree over how OMB's list of high-risk information technology projects is managed. The list, consisting of 226 IT projects totaling about $6.4 billion, or 10 percent of the government's proposed $64 billion IT budget for fiscal 2007, spans 24 agencies and tracks the management and performance of the initiatives. In a new report (GAO-06-647), GAO said the criteria for placing projects on the list are not applied consistently.

http://www.govexec.com/story_page.cfm?articleid=34602&dcn=e_gvet

Lawmakers write IRS in opposition to tax collections outsourcing plan

From CongressDaily

A bipartisan group of 27 House members Wednesday wrote Internal Revenue Service Commissioner Mark Everson lamenting the agency's plan to contract out some tax collections to private firms.

http://www.govexec.com/story_page.cfm?articleid=34600&dcn=e_gvet

Failure of digital detection system allows millions in tax fraud

By David Perera

The Internal Revenue Service paid up to $300 million in bogus tax refunds this year because it failed to complete an update of its digital tool for catching falsified tax returns.

http://www.govexec.com/story_page.cfm?articleid=34557&dcn=e_gvet

OMB steps up data security reporting requirements

By Daniel Pulliam

In an effort to improve the federal response to data breaches putting personal information such as Social Security numbers at risk, the Office of Management and Budget is eliminating the distinction between suspected and confirmed breaches for reporting purposes.

http://www.govexec.com/story_page.cfm?articleid=34555&dcn=e_gvet

Democratic senators criticize administration's cybersecurity efforts

By Michael Martinez

Senate Democrats on Thursday assailed the Bush administration over its failure to fill a Cabinet-level post it created last July within the Homeland Security Department for a cyber security czar. In the wake of several high-profile data breaches at government agencies this year, Senate Judiciary Committee ranking Democrat Patrick Leahy of Vermont said the administration has been reckless in its refusal to fill the position in a timely manner. He said individuals whose personal information has been compromised have paid the price for such mistakes.

http://www.govexec.com/story_page.cfm?articleid=34549&dcn=e_gvet

DHS revamps emergency alert system

By Jonathan Marino

The Homeland Security Department is overhauling and expanding its emergency broadcast system, known as the Digital Emergency Alert System, so warnings will reach more people faster and are localized.

http://www.govexec.com/story_page.cfm?articleid=34534&dcn=e_gvet

Web chat rooms center of FBI probe into terrorist plot

By Winter Casey

On the first anniversary of the London terrorist attacks, U.S. security agents announced Friday they had disrupted a plot by terrorists to attack the New York transportation network. According to the Associated Press, FBI agents were able to discover the scheme through monitoring Internet chat rooms used by extremists.

http://www.govexec.com/story_page.cfm?articleid=34490&dcn=e_hsw

IRS headquarters to remain shut for months

By Amelia Gruber

The Internal Revenue Service announced Tuesday that repairs to its Washington headquarters, damaged by flooding late last month, may not be complete until January

http://www.govexec.com/story_page.cfm?articleid=34526&dcn=e_gvet

Top intelligence officer pushes businesses to act

By Chris Strohm

The government's top intelligence officer called on the nation's business community Monday to build its capacity for information sharing domestically and abroad and to report suspicious activity to law enforcement agencies.

http://www.govexec.com/story_page.cfm?articleid=34516&dcn=e_gvet

Web chat rooms center of FBI probe into terrorist plot

By Winter Casey

On the first anniversary of the London terrorist attacks, U.S. security agents announced Friday they had disrupted a plot by terrorists to attack the New York transportation network. According to the Associated Press, FBI agents were able to discover the scheme through monitoring Internet chat rooms used by extremists.

http://www.govexec.com/story_page.cfm?articleid=34490&dcn=e_gvet

Consultant Breached FBI's Computers

By Eric M. Weiss

A government consultant, using computer programs easily found on the Internet, managed to crack the FBI's classified computer system and gain the passwords of 38,000 employees, including that of FBI Director Robert S. Mueller III.

http://www.washingtonpost.com/wp-dyn/content/article/2006/07/05/AR2006070501489.html 

June

Data Brokers and Buyers Anger Congress

By Amanda Beck

WASHINGTON (Reuters)—Almost every piece of personal information that Americans try to keep secret—including bank account statements, e-mail messages and telephone records—is semi-public and available for sale.

http://www.eweek.com/article2/0,1895,1981909,00.asp

Major Israeli websites hacked

By Gal Mor, Ehud Kinan

More than 750 Israeli websites hacked in recent hours. Among them: Soldier’s Treasury Bank, Rambam Hospital, and Globus Group ticket center. Hackers: You’re killing Palestinians, we’re killing servers

Unprecedented number of Israeli websites hacked: Hundreds of websites were damaged by hackers in recent hours, following IDF activity in the Gaza Strip. The hackers are members of the Moroccan “Team Evil” group, responsible for most of the website damage in Israel in the past year. This is the largest, most concentrated attack on Israeli websites in recent years

http://www.ynetnews.com/articles/0,7340,L-3268449,00.html

GAO, Navy add to growing list of federal data breaches

By Daniel Pulliam

The number of agencies announcing data breaches is continuing to grow, with both the Navy and the Government Accountability Office revealing Friday the inadvertent release of personal information over the Internet. Personal information, including Social Security numbers, birthdates and names of about 28,000 sailors and their family members, turned up on a civilian Web site in spreadsheet files, the Navy announced. GAO revealed that sensitive information on fewer than 1,000 government workers was available in Internet-accessible archival records.

http://www.govexec.com/story_page.cfm?articleid=34421&dcn=e_gvet

TSP tries to remain vigilant in data security

By Karen Rutzick

In light of the well publicized Veterans Affairs Department data breach last month, another federal agency with its hands on a lot of personal information -- the Thrift Savings Plan -- is concentrating on information security.

http://www.govexec.com/story_page.cfm?articleid=34364&dcn=e_gvet

VA spends more than $14 million handling data breach

By Daniel Pulliam

The Veterans Affairs Department is burning through $200,000 a day to operate a call center for veterans and active-duty service members seeking information on last month's data breach, officials from the Veterans Benefits Administration told lawmakers Tuesday.

http://www.govexec.com/story_page.cfm?articleid=34363&dcn=e_gvet

House votes to block outsourcing of tax collections

By Jenny Mandel

The Internal Revenue Service would be blocked from allocating funds to outsource collection of tax debts under a provision in a spending bill passed by the House Wednesday.

http://www.govexec.com/story_page.cfm?articleid=34326&dcn=e_gvet

House committee OKs standards for security tools, training

By Juliana Gruenwald

The House Homeland Security Committee on Wednesday approved legislation to require federal officials to develop voluntary national standards for homeland security equipment and training.

http://www.govexec.com/story_page.cfm?articleid=34331&dcn=e_gvet

Auditors blame VA data breach on security flaws

By Daniel Pulliam

Long-standing weaknesses in the Veterans Affairs Department's information security systems were responsible for a massive data breach last month and its systems remain at risk, government auditors told a congressional panel Wednesday.

http://www.govexec.com/story_page.cfm?articleid=34325&dcn=e_gvet

Privacy language urged for bill to digitize federal employee health records

By Danielle Belopotosky

Employee groups on Tuesday urged a House panel to include in a health information technology bill language to protect the privacy of federal employees who would be covered under the bill.

http://www.govexec.com/story_page.cfm?articleid=34319&dcn=e_gvet

Defense tech agency expands telework program

By Daniel Pulliam

The number of employees who qualify for the Defense Information Systems Agency's telework program has increased by more than 1,000 since a policy change last December.

http://www.govexec.com/story_page.cfm?articleid=34314&dcn=e_gvet

DOE computers hacked; info on 1,500 taken

H. Josef Hebert

WASHINGTON -- A hacker stole a file containing the names and Social Security numbers of 1,500 people working for the Energy Department's nuclear weapons agency. But in the incident last September, somewhat similar to recent problems at the Veterans Affairs Department, senior officials were informed only two days ago, officials told a congressional hearing Friday. None of the victims was notified, they said.

http://seattlepi.nwsource.com/national/1153AP_DOE_File_Theft.html

Pentagon sets its sights on social networking sites

New Scientist has discovered that Pentagon's National Security Agency, which specialises in eavesdropping and code-breaking, is funding research into the mass harvesting of the information that people post about themselves on social networks. And it could harness advances in internet technology - specifically the forthcoming "semantic web" championed by the web standards organisation W3C - to combine data from social networking websites with details such as banking, retail and property records, allowing the NSA to build extensive, all-embracing personal profiles of individuals.

http://www.newscientist.com/article/mg19025556.200?DCMP=NLC-nletter&nsref=mg19025556.200

VA cuts telework, bans employee-owned computers

Daniel Pulliam

The Veterans Affairs Department has suspended use of employee-owned computers for official agency business and has limited telework at one of three major divisions, in an effort to prevent security breaches.

http://www.govexec.com/story_page.cfm?articleid=34291&dcn=e_tcmg

British computer whiz-kid exports terror via internet

AN INTERNET trail left by a British computer expert has led investigators to an intricate terror network spreading from the backstreets of Baghdad through cells of young militants living in European capitals to Islamic extremists plotting car-bomb attacks in North America.

http://www.timesonline.co.uk/article/0,,2-2214663,00.html

Management structure contributed to VA data breach, observers say

By Daniel Pulliam

As the scope of the Veterans Affairs Department's data breach continues to expand, former agency information technology officials say the catastrophe possibly could have been avoided with a better IT management structure.

http://www.govexec.com/story_page.cfm?articleid=34262&dcn=e_gvet

VA Reports Bigger Data Theft

By Wayne Rash

Secretary of Veterans Affairs R. James Nicholson has revealed that the data stolen from an employee's home in Maryland in May included personal information on over 1 million active duty, reserve and National Guard personnel.

http://www.eweek.com/article2/0,1895,1973260,00.asp

Records on active-duty military included in stolen VA data

By Daniel Pulliam

The names, Social Security numbers and birth dates of up to 50,000 active-duty military personnel were included in the data stolen from a Veterans Affairs Department employee's home last month, the department announced Saturday.

http://www.govexec.com/story_page.cfm?articleid=34240&dcn=e_gvet

Telework blamed in recent VA data loss

By Daniel Pulliam

Proponents of policies allowing federal employees to work away from the office are fighting recent claims that teleworking puts sensitive agency data at an unnecessary risk for theft or loss. In an attempt to avert future security breaches and to assuage lawmakers' concerns, Veterans Affairs officials have said they are reviewing the department's guidelines on remote use and access to agency information, following the theft of personal data on more than 26 million veterans from an employee's home.

http://www.govexec.com/story_page.cfm?articleid=34207&dcn=e_gvet

May

Data on millions of vets stolen from VA employee's home

By David Perera

Personal information, including Social Security numbers, of possibly every living U.S. veteran discharged since 1975 was stolen earlier this month from the home of a Veterans Affairs employee, the department announced Monday.

http://www.govexec.com/story_page.cfm?articleid=34134&dcn=e_gvet

OMB official: Too soon to judge computer security law

By David Perera

The Federal Information Security Management Act isn't old enough for its most effective provisions to prompt great cybersecurity improvements, an Office of Management and Budget official said Thursday.

http://www.govexec.com/story_page.cfm?articleid=34111&dcn=e_gvet

GAO: IRS procedural flaws leave taxpayer materials vulnerable

By Jenny Mandel

Taxpayer receipts and other sensitive materials were left out in open areas where they were vulnerable to loss or theft, and auditors found various problems with financial and security procedures at Internal Revenue Service facilities during an annual review.

http://www.govexec.com/story_page.cfm?articleid=34101&dcn=e_gvet

British Computer Hacker Set for U.S. Extradition

By Kate Holton, Reuters

LONDON (Reuters)—A British computer expert accused by Washington of the world's "biggest military hack of all time" should be extradited to the United States to stand trial, a court ruled on Wednesday. Gary McKinnon, 40, was arrested last June following charges by U.S. prosecutors that he illegally accessed 97 government computers—including Pentagon, U.S. army, navy and NASA systems—causing $700,000 worth of damage.

http://www.eweek.com/article2/0,1895,1960109,00.asp

DHS to design interoperability standards for emergency communications equipment

From National Journal's Technology Daily

Homeland Security Secretary Michael Chertoff on Monday said the department plans to assemble a task force focused on performance standards for achieving emergency communications equipment that can work across jurisdictions.

http://www.govexec.com/story_page.cfm?articleid=34049&dcn=e_gvet

Plans for digitizing immigration records called into question

By Daniel Pulliam

The U.S. Citizenship and Immigration Services bureau's $190 million project to automate 55 million paper-based immigration files has suffered from inadequate planning, according to a new report from the Government Accountability Office.

http://www.govexec.com/story_page.cfm?articleid=34031&dcn=e_gvet

Hackers access personal information on TRICARE servers

By Daniel Pulliam

Hackers gained access to the Pentagon's health insurance information systems, compromising the personal information of more than 14,000 people, the Defense Department announced Friday.

http://www.govexec.com/story_page.cfm?articleid=33964&dcn=e_gvet

April

Chinese government enacts unprecedented ID tag program

By Chris Strohm

China is on its way to becoming one of the largest markets for radio-frequency identification tags, propelled in part by U.S. importers that want the technology to be used for tracking assets, market analysts said.

http://www.govexec.com/story_page.cfm?articleid=33923&dcn=e_tcmg

Government-Funded Startup Blasts Rootkits

By Ryan Naraine

A startup funded by the U.S. government's Defense Advanced Research Projects Agency is ready to emerge from stealth mode with hardware and software-based technologies to fight the rapid spread of malicious rootkits.

http://www.eweek.com/article2/0,1895,1951941,00.asp

Council releases blueprint for federal cybersecurity research

By Daniel Pulliam

President Bush's science and technology council has released a blueprint for coordinating federal interagency cybersecurity research and development.

http://www.govexec.com/story_page.cfm?articleid=33927&dcn=e_gvet

Immigration enforcers want to mine databases

By Chris Strohm

The Homeland Security Department is seeking authority from Congress to mine databases containing Social Security numbers in order to identify illegal immigrants and the employers who knowingly hire them, according to senior department officials.

http://www.govexec.com/story_page.cfm?articleid=33884&dcn=e_gvet

Internet devices threaten NSA's ability to gather intelligence legally

By Shane Harris

Among the threats facing the National Security Agency are Al Qaeda, the Iraqi insurgency, and eBay. Yes, eBay, the online auction house. Not because its members sell state secrets, but because of a company that eBay purchased last year -- Skype.

http://www.govexec.com/story_page.cfm?articleid=33816&dcn=e_gvet

IRS Rule Changes Could Expose Your Tax Info

By Bary Alyssa Johnson

The IRS has stirred controversy with a proposal, here in PDF form, to loosen rules regarding electronic disclosure of private taxpayer information to outside parties. Current provisions in tax code section 7216 set criminal penalties for tax preparers that make unauthorized use or disclosure of tax return information. In hearings in Washington this week, the IRS asked for public comment on whether to rewrite the current tax law.

http://www.eweek.com/article2/0,1895,1947260,00.asp

Secret Service Sting Targets Web Con Artists

By Evan Schuman

In sharing information about an undercover federal investigation of Web frauds involving credit cards and stolen tax refunds, the Secret Service demonstrated that it can adapt with the times. The seven initial arrests stemming from what the Secret Service has dubbed "Operation Rolling Stone" show that federal investigators have started to learn how to crack through deceptive IP addresses and encrypted IM communications.

http://www.eweek.com/article2/0,1895,1946230,00.asp

Critics of IRS tax-return proposal urge changes

By Sarah Lai Stirland

One of the nation's largest purveyors of tax-preparation software on Tuesday urged the Internal Revenue Service to enact rules that would ban the sale or rental of tax-return information.

http://www.govexec.com/story_page.cfm?articleid=33758&dcn=e_gvet

March

DHS moves to deploy transportation ID cards

By Chris Strohm

Under mounting congressional pressure, the Homeland Security Department has announced a timetable for issuing tamper-resistant, biometric-based identification cards to millions of workers at U.S. transportation facilities.

http://www.govexec.com/story_page.cfm?articleid=33736&dcn=e_gvet

Concerns about wireless tracking devices discussed

By Winter Casey

Despite new research pointing to security vulnerabilities in wireless tracking technology known as radio-frequency identification, government and business representatives remain confident in its use.

http://www.govexec.com/story_page.cfm?articleid=33676&dcn=e_tcmg

Looser limits on tax preparers' sharing of data proposed

By Jenny Mandel

A December 2005 Internal Revenue Service proposal to loosen restrictions on how tax preparers can use information from tax returns is gaining attention and has recently attracted criticism from consumer groups.

http://www.govexec.com/story_page.cfm?articleid=33671&dcn=e_gvet

Lawmakers urge government, industry to partner on emergency communications

By Michael Martinez

Two key lawmakers on Wednesday said government agencies need to establish partnerships with the private sector in order ensure that critical communications infrastructure is reliable and available during emergency situations.

http://www.govexec.com/story_page.cfm?articleid=33615&dcn=e_gvet

FBI's 'Sentinel' Contract Falls Short on Oversight

By Caron Carlson

Even after being forced to scrap its $170 million case management initiative one year ago, and replacing it with the proposed "Sentinel" system, the FBI has already fallen behind in crafting required security and validation plans for the new system. Nonetheless, a contract for Sentinel, estimated to cost between $400 million and $500 million, is expected to be awarded within a month.

http://www.eweek.com/article2/0,1895,1937256,00.asp

Digging for hidden meanings: Data-mining techniques and their application in the war on terrorism

By John Fedrick

As more and more U.S. military ISR systems collect more and more data, intelligence analysts face two formidable challenges. One is to dig out the information they suspect is buried in the ever-growing databases. The other, more daunting task is to sift through the reams of data to discover hidden patterns and relationships — information the analysts don’t know they have until they see it. That’s where data mining comes in.

http://isrjournal.com/story.php?F=1474857

Lawmaker seeks czar to oversee transition to next-generation Internet

By Daniel Pulliam

The U.S. government, the world's largest purchaser of information technology products and services, needs a central authority dedicated to administering agencies' transition to the next-generation Internet, the chairman of the House Government Reform Committee said Tuesday.

http://www.govexec.com/story_page.cfm?articleid=33602&dcn=e_gvet

IRS announces first contracts for debt collection work

By Jenny Mandel

The Internal Revenue Service awarded three, two-year contracts Thursday in the first phase of an effort to outsource some of its debt collection work, and published a list of safeguards designed to prevent unauthorized use of taxpayer data.

http://www.govexec.com/story_page.cfm?articleid=33573&dcn=e_gvet

Homeland Security chief proposes screening of customer data

By Sarah Lai Stirland

The secretary of the Homeland Security Department on Tuesday proposed a screening system that would require companies to retain information about their customers but only require them to surrender information filtered by software.

http://www.govexec.com/story_page.cfm?articleid=33559&dcn=e_gvet

Survey: Agency programs to protect privacy inadequate

By Daniel Pulliam

Most government agencies have made little progress in addressing privacy concerns, and the issue needs to be elevated, according to a new survey of members of the federal information technology community.

http://www.govexec.com/story_page.cfm?articleid=33555&dcn=e_gvet

OMB: Agency compliance with cybersecurity law improving

By Daniel Pulliam

Agencies improved slightly in fiscal 2005 at meeting computer security standards, according to a report released Wednesday by the Office of Management and Budget.

http://www.govexec.com/story_page.cfm?articleid=33498&dcn=e_tcmg

Agencies move toward routing calls over the Internet

By Daniel Pulliam

Government agencies are moving away from traditional land-line-based telephone services to technology that routes calls over the Internet, a panel of experts and a congressional staffer knowledgeable on the issue said Wednesday.

http://www.govexec.com/story_page.cfm?articleid=33489&dcn=e_gvet

February

TIA Lives On

By Shane Harris

A controversial counter-terrorism program, which lawmakers halted more than two years ago amid outcries from privacy advocates, was stopped in name only and has quietly continued within the intelligence agency now fending off charges that it has violated the privacy of U.S. citizens.

http://nationaljournal.com/about/njweekly/stories/2006/0223nj1.htm

Homeland Security gets half of IT boost in Bush budget

By Daniel Pulliam

The modest information technology spending increase in President Bush's fiscal 2007 budget request is driven by the Homeland Security Department, according to a new report from a market research firm.

http://www.govexec.com/story_page.cfm?articleid=33446&dcn=e_gvet

Focus on cybersecurity compliance called ineffective

By Daniel Pulliam

Adherence to congressionally mandated IT security processes is a poor measure of the true state of cybersecurity across the government, a former federal chief information security officer said Wednesday.

http://www.govexec.com/story_page.cfm?articleid=33439&dcn=e_gvet

DHS runs drill to test readiness for online attack

By Danielle Belopotosky

The Homeland Security Department on Friday concluded a weeklong exercise aimed at assessing public- and private-sector responses to cyber attacks on the nation's critical infrastructure.

http://www.govexec.com/story_page.cfm?articleid=33380&dcn=e_gvet    

Homeland Security agency to focus on information-sharing plans

By Heather Greenfield

The homeland security agency tasked with protecting critical infrastructures sees 2006 as a year to improve information-sharing among key sectors like electricity, water and information technology.

http://www.govexec.com/story_page.cfm?articleid=33299&dcn=e_hsw    

GAO: Defense lacks coordination needed for global information grid

From National Journal's Technology Daily

The Defense Department plans to spend about $34 billion over five years to develop a global information grid, but the department's decentralized management approach "is not optimized to enforce investment decisions across the department," according to the Government Accountability Office.

http://www.govexec.com/story_page.cfm?articleid=33285&dcn=e_gvet    

January 2006

Defense tech agency boosts telework to prevent exodus

By Daniel Pulliam

The upcoming relocation of the Defense Information Systems Agency's headquarters from Northern Virginia to a military base south of Baltimore has prompted the organization to expand its telework policies. The agency is permitting employees to work away from the office more often in hopes of retaining its workforce.

http://www.govexec.com/story_page.cfm?articleid=33255&dcn=e_gvet   

Cyber crime is growing more professional, officials say

By Randy Barrett

Leading industry and government officials Tuesday agreed that cyber criminals are now more professional and primarily focused on stealing money.

http://www.govexec.com/story_page.cfm?articleid=33230&dcn=e_gvet

DHS chief eyes ID cards with biometric data

By Michael Martinez

Homeland Security Secretary Chertoff said today he intends to spend money to develop technology that will allow identification cards to serve several purposes, but stopped short of advocating a national identification card.

http://www.govexec.com/story_page.cfm?articleid=33197&dcn=e_gvet

FCC Sets Airwaves Sale for Internet on Planes

By Jeremy Pelofsky

WASHINGTON (Reuters)—U.S. regulators plan to sell airwaves starting May 10 to provide communications services like high-speed Internet to U.S. air travelers.

http://www.eweek.com/article2/0,1895,1910900,00.asp

DOD Eyes Network Revamp

By Paul F. Roberts

The U.S. Military's point man for global network operations says that a total overhaul of the government's classified and unclassified information networks may be necessary to ward off legions of hackers and adequately protect the military from crippling attacks in future conflicts.

http://www.eweek.com/article2/0,1895,1911008,00.asp

Gov't Cyber-sleuths Focusing on Linux, iPod, Xbox

By Paul F. Roberts

Cyber-security and computer experts from the government and law enforcement are increasingly concerned with malicious code that runs on Linux and Apple Computer Inc.'s Mac OS X operating systems and threats posed by devices such as iPods and Xboxes.

http://www.eweek.com/article2/0,1895,1910371,00.asp?kc=ewnws011306dtx1k0000599

Click here to return to the top of page