Security

Obama reportedly signs secretive cybersecurity policy directive

President Obama has long said cybersecurity is one of his priorities and it appears he is now acting on his words.

According to the Washington Post, he is said to have signed a secret policy directive last month that will give the military and other government authorities the ability to act quickly if the country comes under cyberattack.

Dubbed the "Presidential Policy Directive 20," this classified document allegedly outlines the rules of how federal agencies are allowed to react when it comes to online breaches of security, hacking, cyberthreats, and attacks.

One of the major elements of the … Read more

Use Nextdoor to prepare your neighborhood for disaster

We don't know where, we don't know when, but we do know for sure that disaster will strike. The only thing we can do is prepare for a day we hope never arrives: the day something turns our world upside-down, as Sandy has done for so many people in New York, New Jersey, and other parts of the East Coast.

You can help your neighborhood get ready for whatever calamity fate may have in store by creating a neighbor social network that links to emergency-preparedness information customized to your locality. The free Nextdoor private social network launched recently … Read more

China cyber-espionage threatens U.S., advisory group warns

Congress needs to take action to deflect the growing threat of Chinese cyber-espionage against the U.S., a U.S. commission recommends in a new report.

Released today, the 500-page annual report to Congress by the U.S.-China Economic and Security Review Commission details various security issues concerning China. But the commission expressed particular fear over the country's ongoing cyberwarfare efforts.

Calling China the "most threatening actor in cyberspace," the report found that in 2012, Chinese state-sponsored hackers continued to target computers systems run by the U.S. government and military as well those maintained in … Read more

Skype fixes e-mail security flaw

Skype has resolved a nasty e-mail and password security bug and reinstated its password reset page.

Revealed by Skype earlier today, the vulnerability allowed someone to create a Skype account using the same e-mail address as that of the intended victim. That person was then able to reset the password for all accounts associated with that address, thereby locking out the account owner from Skype.

As a precaution, Skype earlier today took down its password reset page to prevent hackers from taking advantage of the flaw. But the company managed to resolve the security hole not long after announcing it, … Read more

Skype disables password resets due to e-mail security flaw

Update, 10:25 a.m. PT: Skype has since resolved the security issue and reinstated the password reset page.

Skype is investigating a security problem that allows someone to take over a user's account by resetting the account password.

The VoIP service provider best known for video calls confirmed in its blog today that it has taken down its password reset page as it probes the issue:

We have had reports of a new security vulnerability issue. As a precautionary step we have temporarily disabled password reset as we continue to investigate the issue further. We apologize for the … Read more

Why you shouldn't watch Obama throw punches on Twitter

If you get a direct message on Twitter telling you to click a link to watch a video of President Barack Obama punching a guy, don't do it.

Spammers are using the idea of the president retaliating against someone for calling him the n-word to steal Twitter passwords and deliver malware to computers, security company PandaLabs noted today.

It's a scheme that uses the names of Twitter, Facebook, and YouTube for nefarious purposes, with spammers creating fake pages to dupe unsuspecting Twitter users.

The scam involves sending a Twitter direct message that reads "Check out Obama punch … Read more

Cyberattacks against Lockheed have 'increased dramatically'

Cyberattacks against Lockheed Martin -- one of the largest defense contractors for the U.S. government -- have stepped up significantly in both pace and savvy, according to Reuters.

"The number of campaigns has increased dramatically over the last several years," Lockheed vice president and chief information security officer Chandra McMahon said in a news conference today, according to Reuters. "The pace has picked up."

McMahon claims that roughly 20 percent of the attacks are being perpetuated by other countries or groups that aim to steal information or threaten the company's operations. She told reporters … Read more

Antivirus pioneer McAfee sought for questioning in murder case

John McAfee, who founded the antivirus software giant named after him, is wanted for questioning by police in Belize who are investigating the murder of a 52-year-old man, CBS reported today.

According to the report, police are searching for the killer of Gregory Viant Faull, an American expat. Gizmodo reported earlier today that McAfee was wanted for the crime, but CBS, quoting Rafael Martinez, spokesman for the Belize National Security Ministry, said it would be incorrect to call McAfee a suspect at this time.

Police in Belize say Faull, a general contractor and restaurant owner from Florida, was shot Saturday … Read more

Ransomware a growing menace, says Symantec

Cybercriminals gangs are creating a surge in ransomware, says a new report from Symantec.

Ransomware is a type of malware best described as an online extortion racket. Malware locks or disables your PC in some way and then demands payment in the form of a "fine" to render your PC usable again. Like most scams, the ransomware message claims to come from a legitimate organization, such as the government or a public corporation, to try to convince victims that they did something wrong to incur the fine.

But paying the fine does nothing since the initial malware remains … Read more

SEC staffers leave computers open to cyber attack, report says

Staffers in the SEC's Trading and Markets Division left their computers totally unprotected from possible security attacks, forcing the organization to scramble to determine if any sensitive data was stolen, Reuters reported, citing unidentified sources with knowledge of the situation.

As it turns out, the trading and markets division is charged with ensuring that markets don't fall victim to cyberattacks.

Reuters also reports that the staffers attended the annual Black Hat Conference for hackers and brought the unprotected computers with them.

Soon after the security issues were identified, the SEC hired a third-party company and paid it "… Read more