02 August 2011

One in two South #Koreans lose data in massive #hacker attack

One in two South Koreans have had personal information stolen in a massive hack of the nation's biggest social networking site and a popular local search engine.

SK Communications, which owns Cyworld and search engine Nate said it was attacked by suspected Chinese hackers this week who made off with data on a whopping 35 million users.

Read full article: http://bit.ly/nvJXVm

#Chinese #Hackers Score Heist of 35 Million South Koreans' Personal Info

There's an elephant in the room, when it comes to internet attacks, and that elephant is China.  While America once was fearful of China's communist philosophies, today the Asian giant poses a far greater threat in its economic success.

Read full article: http://bit.ly/oa1nie

Australian firms could be held responsible for #hacker breaches

This change formed part of discussions on Monday between Privacy Minister Brendan O'Connor and a lobby group that wants to subject companies and journalists to criminal penalties for privacy breaches.

The talks covered the possibility of using the government's proposed privacy tort to sue companies when criminal computer hackers breach firewalls and other security measures to steal data.

Read full article: http://bit.ly/pnf0gR

How to Be A Private Sector Cyber Mercenary - #hackers #whitehat

Gen. Michael Hayden, former NSA and CIA Director under President George W. Bush, suggested Friday that mercenaries could be the solution to the growing number of digital break-ins.

While making my customary reading rounds checking in on security issues, I happened upon this article at "rawstory.com" and I thought it would be interesting and amusing for everyone here to look into and discuss:

Hayden told the Aspen Security Forum that in the near future, the Department of Defense may have to allow the creation of a "digital Blackwater."

Private sector offense "might be one of those big new ideas in terms of how we have to conduct ourselves in this new cyber domain," Hayden explained. "You think back long enough in history and there are times when the private sector was responsible for its own defense."

"We may come to a point where defense is more actively and aggressively defined even for the private sector and what is permitted there is something that we would never let the private sector do in physical space ... Let me really throw out a bumper sticker for you. How about a digital Blackwater?" he suggested.

--
Read full article here: INFOSEC ISLAND

View complete blog here: CYBERWAR_NEWS

Read CYBERWAR NEWS MORNING REPORT for daily news updates



U.S. government hankers for #hackers

WASHINGTON, Aug 2 (Reuters) - The National Security Agency has a challenge for hackers who think they're hot stuff: prove it by working on the "hardest problems on Earth."

Computer hacker skills are in great demand in the U.S. government to fight the cyber wars that pose a growing national security threat -- and they are in short supply.

Read full article: http://bit.ly/o8vxFn

Remind everyone you know: #malware kills computers, smartphones are computers

"I know you're searching right now, so look up Advanced Evasion Technique (AET)." I did and there wasn't much to find. But, I had an idea. If there are advanced techniques, there must also be regular ones.

Fortunately, Wikipedia came to the rescue with the entry: Intrusion Detection System Evasion Techniques.

 "Evasion is a term used to describe techniques of bypassing an information security device in order to deliver an exploit, attack, or other malware to a target network or system, without detection."

Read full article: http://bit.ly/pYpzNS

AETs allow stealthy perimeter attacks - #hackers #cybersecurity

"I know you're searching right now, so look up Advanced Evasion Technique (AET)." I did and there wasn't much to find. But, I had an idea. If there are advanced techniques, there must also be regular ones.

Fortunately, Wikipedia came to the rescue with the entry: Intrusion Detection System Evasion Techniques.

 "Evasion is a term used to describe techniques of bypassing an information security device in order to deliver an exploit, attack, or other malware to a target network or system, without detection."

Read full article: http://bit.ly/nNYTq4

Cyber Strategy More Of A Wish Than A Plan #cyberdefense

With some fanfare, the Defense Department recently unveiled its first cyberstrategy, but any possibility of rapidly streamlining U.S. cyberoperations, establishing clear command and control or securing the freedom to use offensive cyberweapons is looking more like a wish than a plan.

Read full article: http://bit.ly/rbCNoe