Security

China cyberspies highlighted by Schmidt book, Post report

Hot on the heels of reports from The New York Times and The Wall Street Journal, another storied U.S. newspaper -- The Washington Post -- has confirmed that it too was attacked by what it suspects were Chinese hackers. And a new book from Google's Eric Schmidt reportedly calls the Asian country "the most sophisticated and prolific" hacker of foreign companies.

In an article published today, the Post says attackers gained access to the paper's computer systems as early as 2008 or 2009 and that malware installed on the systems was neutralized in 2011 by … Read more

Wall Street Journal: China hackers hit us, too

The Wall Street Journal said today that it's been the target of Chinese hackers stemming from its coverage of China, echoing reports from other news organizations.

Hackers infiltrated the newspaper's computer system through its Beijing bureau in order to monitor the paper's coverage of China, according to the report. Paula Keve, chief spokeswoman for the Journal's parent company, Dow Jones, issued a statement that said the hacks "are not an attempt to gain commercial advantage or to misappropriate customer information." The company completed a "network overhaul" on Thursday to increase security.

The … Read more

Internet, social media least trusted industries for privacy

Internet and social media ranked at the bottom on a list of the most trusted industries for privacy, according to the Ponemon Institute.

Released yesterday, Ponemon's "2012 Most Trusted Companies for Privacy" was compiled from a survey of U.S. adults asked to name the five companies they trust the most to protect the privacy of their personal information.

Based on more than 6,700 responses, the Top 20 list did not include several tech players that had been on it in past years.

Apple failed to make the list for the first time in four years. … Read more

How to enable two-factor authentication on popular sites

One of the safest and simplest computer-security measures available is also one of the least used. Two-factor authentication adds a layer of protection to the standard password method of online identification. The technique is easy, relatively quick, and free. So, what's the problem?

Critics are quick to point out the shortcomings of two-factor authentication: it usually requires a USB token, phone, or other device that's easy to lose; you sacrifice some privacy by having to disclose your telephone number to a third party; and it is subject to man-in-the-middle and other browser- and app-based attacks.

Still, for online … Read more

UPnP networking flaw puts millions of PCs at risk

Common bugs in networking systems are placing PCs, printers and storage devices at risk, according to security researchers.

According to the security team at Rapid7, technology used worldwide in both routers and standard networking equipment is making it possible for hackers to potentially infiltrate approximately 40 million to 50 million devices worldwide.

The vulnerability lies in the standard known as Universal Plug and Play (UPnP). This standard set of networking protocols allows devices such as PCs, printers and Wi-Fi access points to communicate and discover each other's presence. After discovery, devices can be connected through a network in order … Read more

Wickr turns iOS message self-destruct up to 11

Wickr (download) gained new secure sending and subsequent self-destructing powers in a big update to the encryption and security app today, perhaps not coincidentally Data Privacy Day.

There are four new features in the app. You can now send and subsequently self-destruct images and PDFs from Google Drive, Dropbox, and Box to other Wickr users, which expands the limits of the original send-and-self-destruct feature. You can also send up to three 30-second videos, up to 5 MB, per message. Audio messages, which function like voice mails, have been extended to 30 seconds long, as well.

Wickr can now connect to … Read more

Pentagon to boost Cyber Command fivefold, report says

Cyberattacks and data breaches are becoming a common occurrence worldwide.

When it takes little more than a script kiddie or a downloadable toolkit to cause havoc in corporate systems -- or even transform a governmental Web site into a game of Asteroids as part of a protest, governments are in serious trouble unless they begin to invest more in the future of their digital defense.

When Anonymous recently took down the U.S. Sentencing Commission's Web site through code distributed by the hacktivist collective for "Operation Last Resort," ussc.gov was transformed much to the amusement of … Read more

Corporations bring a 'knife to a gun fight' amid cyberattacks

Corporations are increasingly under fire from the rapidly rising threat of distributed denial-of-service (DDoS) attacks, according to new research from security firm Radware.

The study notes that DDoS attacks on corporations rose 170 percent in 2012 over the previous year.

After analyzing data from a number of security breaches and responses from 179 participating firms, Radware said that many corporations can be compared to "someone who brings a knife to a gun fight." In other words, businesses are attempting to protect themselves from cyberattacks but often fail because they are unprepared.

A number of trends point toward a … Read more

'Cyber 9/11' may be on horizon, Homeland Security chief warns

The head of Homeland Security announced today that she believes a "cyber 9/11" could happen "imminently," according to Reuters. If such an event were to occur it could cripple the country -- taking down the power grid, water infrastructure, transportation networks, and financial networks.

"We shouldn't wait until there is a 9/11 in the cyber world," Homeland Security Secretary Janet Napolitano said during a talk at the Wilson Center think tank today, according to Reuters. "There are things we can and should be doing right now that, if not prevent, … Read more

U.S. is home to greatest number of botnet servers, says McAfee

The United States is responsible for the highest number of botnet servers in the world, according to new data from McAfee.

A map and a list of major countries posted by McAfee yesterday show the greatest concentration of botnet servers to be in the U.S., with 631. That's more than two and a half times higher than the second country on the list -- the British Virgin Islands with 237.

The Netherlands took third place with 154 servers, followed by Russia with 125, Germany with 95, and Korea with 81. Among the Top 10, Canada fared the best … Read more