• Home
  • Posts Tagged'Cyber Attack'

Posts Tagged ‘Cyber Attack’

Project Enlightenment Webinar – Additional Details Revealed

Cyber Squared Webinar Will Share Project Enlightenment Study Details and Reinforce the Need for Organizations to Step Up their Cyber Security Measures
In response to growing interest in their Project Enlightenment Case Study, Cyber Squared has scheduled a webinar, “Anatomy of a sophisticated cyber-attack and how it affects your organization”, for May 30th to publically release …

Read More
 

Small Businesses – Often Overlooked, but Just as Vulnerable to Cyber Attacks

Cyber-attacks make headlines on a daily basis.   The news media commands attention by publicizing high profile cases – well-known companies, enormous losses, and serious consequences.   With all the focus on the big guys, it’s easy to overlook the fact that no business demographic is immune from cyber-attacks.  In fact, recent reports estimate that small companies, …

Read More
 

The Foundation of Internet Trust is Crumbling

DigiNotar Certificate Authority Breached

Google recently reported the possibility of a Man-In-The-Middle (MITM) attack using fraudulent SSL certificates issued by DigiNotar.  The attack affected people logging into Google’s popular email services from Iran, and google has responded by rejecting all the Certificate Authorities operated by DigiNotar. We now know that Google is not the only possible target of these bogus …

Read More
 

Cyber Espionage - Knowing You Are a Target

The existence of a persistent cyber-espionage threat to the military, government, and defense contractors is nothing new. While the ability of these organizations to react and remediate attacks against their networks is still often demonstrably lacking, there is now at least some level of cognizance of the threat and even an expectation of serious, …

Read More
 

RSA Compromised by APT (1 of 2)

A couple of days ago the Executive Chairman of RSA, Art Coviello, released an open letter to its customers talking vaguely of a compromise that has occurred within RSA. Coviello does not depict the events in a clear manner so customers cannot fully understand the scope of the activity, only stating “our security systems identified an extremely sophisticated cyber attack in progress” and also stated “investigation also revealed that the attack resulted in certain information being extracted from RSA’s systems”. As to what systems were accessed by the threat actors and what information was extracted remains a mystery. The only thing revealed by RSA is “certain information being extracted from RSA’s systems that relates to RSA’s SecurID two-factor authentication products”. Coviello does provide some comfort to his customers by stating “we are confident that the information extracted does not enable a successful direct attack”.

Read More
 

Malicious Code Goes Mobile

The market store for the Andriod phones has hosted at least 50 different apps that contained malicious software (malware) called DroidDream. The apps loaded with malware ranged from chess apps to photo editing software. At this time the believed methodology of the hackers who performed this activity was to download the official app, inject their malicious code and re-upload the app so unsuspecting users can download the app. This proved to be successful at least 200,000 times over.

Read More
 

Nasdaq Cyber Attack

There were a couple of recent articles released by the Wall Street Journal regarding a possible penetration into the computers that run the Nasdaq stock market. The exchange’s trading platform computers were not the ones compromised, but a complete understanding of systems affected by the intrusion is still unknown. It has been reported that other parts of network were accessed, but for how long and what knowledge was gained is an unknown.

Read More
 

The Rise of Digitally Signed Malware

As newer operating systems that either require digitally signed drivers, such as the 64bit version of Vista and Windows 7, or will prompt a user before allowing installation, like the Vista and Windows 7 32bit counterparts, digitally signed malware will become more and more prevalent. FSecure has already noticed this trend. As of July 2010, they had found close to 24,000 examples of digitally signed malware.

Read More
 

Banks See Increased Cyber Attacks

The Zeus Trojan is in the news once again for its success in stealing money from multiple banks. “Operation Trident Breach”, a FBI named operation, was successful in arresting multiple people in multiple countries.

Read More
 

Stuxnet Attacks SCADA

SCADA (Supervisory Control and Data Acquisition) networks which control power and water distribution among other things are widely considered to be the most attractive targets for inflicting the most panic on the public. The Stuxnet worm which surfaced a few months ago has put the threat to these systems at the forefront. While the greater public may be downplaying the badness associated with this cyber attack, since it is not targeting the home user, the industrial industry should stay on high alert as the capabilities associated with this malware continue to be investigated.  The attackers motives are yet to be fully understood but it is clear from their actions thus far that these malicious actors see benefit in taking control over SCADA enabled systems worldwide.

Read More
 
  • Page 1 of 2
  • 1
  • 2