Adware-associated firms Superfish and Comodo attract odium for their products' alleged enabling of man-in-the-middle attacks. Lenovo, still controlling reputational damage, swears it will never, ever pre-install adware (like Superfish's, anyway) again. AV vendors like Bitdefender roll out countermeasures.
Trend Micro continues to track Arid Viper around Gaza (amid some questions about individual attribution Forbes reports that remind all that real lives can be at stake).
Gemalto says its investigation reveals that a SIM card hack "probably happened," but that it didn't lead to "massive theft of SIM encryption keys." In any case, the company says only 2G devices would be affected, 3G and 4G remaining secure. Gemalto competitor G&D basically concurs.
Fallout from earlier cyber capers continues. Anthem says almost 9M non-customers may have been affected by its breach (the FBI is said to be closing in on a suspect), Target puts the cost of its PoS breach at $162M, and Gartner declares the Sony incident a "new breed of attack."
Ars Technica reports an Atlantic Council characterization of the Internet's dismal future: it's deteriorating from a rough neighborhood to a "failed state:" if you're looking for a movie metaphor, don't think Dirty Harry, think Snake Plissken.
Mozilla issues a set of patches.
Google, hoping to speed vulnerability disclosure (an important form of cyber intelligence-sharing, many think) makes Pwnium a year-round rolling program.
Congratulations to Europol and industry partners Symantec, AnubisNetworks, and Microsoft for their Ramnit botnet takedown.
The FBI puts a $3M bounty on alleged GameOverZeus master Evgeniy Bogachev.
Today's issue includes events affecting Bangladesh, Brazil, China, Egypt, European Union, Germany, India, Indonesia, Israel, Italy, Macedonia, Netherlands, New Zealand, Palestinian Territories, Philippines, Russia, Singapore, South Africa, Turkey, Ukraine, United Arab Emirates, United Kingdom, United States, and Vietnam.
Gaza Resident Linked To Cyber Attacks On Israel: Security Company Has Put My Life In Danger(Forbes) If ever there was proof attribution of digital attacks is a sticky and risky business, the following story provides it. Last week, security giant Trend Micro released a report on attacks aimed at Israeli government, military and infrastructure providers, amongst many others. Trend linked the hacks, dubbed Arid Viper, to a group of Gaza-based males who appeared to have set up the infrastructure used by the attackers and had evinced some form of anti-Israeli emotion online. But one of those named tells Forbes that he's not a hacker at all, but a businessman providing IT services, and that by naming him in the report, Trend has put his life, and the future of his family, in danger
Gemalto: NSA/GCHQ Hack 'Probably Happened' But Didn't Include Mass SIM Key Theft(TechCrunch) Gemalto — the world's biggest maker of SIM cards for mobile phones — says that it has "reasonable grounds" to believe that the NSA and GCHQ carried out an operation to hack its network in 2010 and 2011, but the consequences of those actions were not as far-reaching as has been reported. The hack breached Gemalto's office networks, but it "could not have resulted in a massive theft of SIM encryption keys," and "in the case of an eventual key theft, the intelligence services would only be able to spy on communications on second generation 2G mobile networks. 3G and 4G networks are not vulnerable to this type of attack"
Gemalto rival G&D reviewed security following hacking report(Mobile World Live) The recent attack on Gemalto proves how secure the SIM card actually remains, argued Giesecke & Devrient (G&D), although the German vendor did review its own security and that of its customers following last week's report
Snowden: Spy Agencies 'Screwed All of Us' in Hacking Crypto Keys(Wired) NSA whistleblower Edward Snowden didn't mince words during a Reddit Ask Me Anything session on Monday when he said the NSA and the British spy agency GCHQ had "screwed all of us" when it hacked into the Dutch firm Gemalto to steal cryptographic keys used in billions of mobile SIM cards worldwide
Target Says Credit Card Data Breach Cost It $162M In 2013-14(TechCrunch) When it comes to data breaches, retailers are one of the biggest targets these days, and today we have some detail on the costs around one of the more high-profile attacks. Target today said that it has booked $162 million in expenses across 2013 and 2014 related to its data breach, in which hackers broke into the company's network to access credit card information and other customer data, affecting some 70 million customers
387 new malware samples arriving every minute: McAfee(India Today) Mobile app providers have reportedly been very slow to address the most basic secure sockets layer (SSL) vulnerabilities of gadgets like smartphones and computers. More than 387 new samples of malware are affecting the smart devices every minute, besides the mobile malware samples have grown up by 14 per cent during the fourth quarter of 2014
Security Patches, Mitigations, and Software Updates
Bitdefender Adware Removal Tool updated to remove Superfish(Beta News) Bitdefender has announced that its stand-alone Bitdefender Adware Removal Tool has been updated to remove the Superfish root certificate, while also "disinfecting drivers or executables that have been affected by the malware"
Google Pwnium Program Now Open All Year(Threatpost) Google is expanding its successful Pwnium vulnerability reward program — which has run at various security conferences for a couple of years now — to run continuously and offer an unlimited pool of financial rewards
Hackers Are Now Posing As That Guy From Your IT Department(DCInno) In a cybersecurity report released Tuesday by FireEye's Mandiant, the firm announced that business services and retail operations — up 10 percent in the last year regarding total threat engagement — saw the most online intrusions from malicious hackers in 2014. Mandiant and its parent company, FireEye (FEYE), have made headlines recently because of efforts to address the massive Anthem Insurance data breach and to track pro-Assad government malware tactics
Insider threats continue to dominate(Help Net Security) Ordinary employees, privileged users and the supply chain — such as contractors and third party service providers — are all conduits for a traditional insider threat, according to Vormetric. But the spectrum of insider threats also includes the compromise of these insider accounts by hackers using APT attacks and other methods
From Hacking Systems To Hacking People(Dark Reading) New low-tech attack methods like 'visual hacking' demand an information security environment that values data privacy and a self-policing culture
In cybersecurity, sharp eyes and speed are the new padlocks(CBS News) It's distressing to learn State Department computer experts — despite three months of trying — can't get hackers out of the agency's email system, even with the government's admirable commitment of money and tech prowess to cybersecurity. Pair this news with revelations of NSA malware burrowed within computer hard drives worldwide, and we can conclude one thing: a lot of old, clichéd security metaphors are obsolete
Cybersecurity in healthcare: Examining the state of the industry(FierceHealthIT) Cybersecurity in healthcare is easier said than done, something both Franklin, Tennessee-based provider Community Health Systems and Anthem, the nation's second-largest health insurer, know all too well. In 2014, CHS which operates 206 hospitals in 29 states--fell victim to hackers, compromising personal information for 4.5 million patients
Internet of Things adoption is gaining momentum(Help Net Security) Enterprise adoption of the Internet of Things (IoT) is starting to gain momentum, fueled by a mix of technological, political and social factors. The declining costs of sensors, connectivity and processing power has made IoT a more viable proposition to a broader set of organizations. Changing regulatory requirements across a number of industries are also making an impact
As More Cyber Threats Emerge, These Three Cybersecurity Firms Bear Watching(The Street) Cyber attacks against U.S. companies have become almost impossible to stop. So cybersecurity companies like FireEye (FEYE — Get Report) , CyberArk (CYBR) and Palo Alto Networks (PANW — Get Report) are focusing not only on prevention but minimizing the damage from such attacks when they inevitably occur
NSA staffers rake in Silicon Valley cash(The Hill) Former employees of the National Security Agency are becoming a hot commodity in Silicon Valley amid the tech industry's battle against government surveillance
Defense Firms Put Down Roots in UAE(Defense One) Global defense companies are opening offices and forming partnerships with local industry in hopes of winning business in the United Arab Emirates
New Singtel-FireEye cybersecurity centre launched(Channel News Asia) The privately-funded Advanced Security Operations Centre is a partnership between the local telco and US-based cybersecurity firm FireEye, and will service customers from both public and private sectors, including banks
Kaspersky Lab Announces Training And Competition For Startups(JBG News) It's practically a given that cyber-crime is almost always evolving — but we receive grim reminders of that fact more often than anyone would like. The unspoken hope is that those who actually know how to stop them — or know anything about computers — will step in on the average Joe's behalf, and in a lot of ways Kaspersky Lab has done its part to fight back. Even so, it's still just one organization, and can't possibly prevent every cyber-crime. The obvious counter to that is to empower others to fight for themselves; as luck would have it, that's exactly what Kaspersky Lab intends to do from here on
London BT Tower 'cyber-attack' preps brightest minds to counter(CNN) The U.K. is preparing its response to future cyber-attacks, and a simulated attack may help Britain find the brightest minds to help stop hackers. The iconic BT Tower rising above the London skyline, it's an international communications hub that fell victim to hackers
Threat Intelligence in an Active Cyber Defense (Part 2)(Recorded Future) In this second part of the discussion on threat intelligence we will explore how organizations can incorporate threat intelligence to better achieve security. Threat intelligence can be used in a number of ways — especially as part of an active defense. In this piece, one strategy for active defense, the Active Cyber Defense Cycle (ACDC), will be used
GPG And Me(Moxie Marlinspike (Thoughtcrime blog)) I receive a fair amount of email from strangers. My email address is public, which doesn't seem to be a popular choice these days, but I've received enough inspiring correspondence over the years to leave it be
Ukraine Signs Defense Deal With UAE(Defense News) Ukrainian President Petro Poroshenko announced a deal for unspecified military and technical cooperation with the UAE on Tuesday, and said negotiations are ongoing with the United States and unspecified European nations
A Comparative "Cyber" Study of National Security Strategies — UK and the U.S.(Tripwire: the State of Security) Recently, Tripwire published a study on the use of the term "cyber" in the United States' National Security Strategy (NSS) documents. This analysis reveals that each NSS report has used the word "cyber" more frequently than its immediate predecessor. It also demonstrates how the meaning of "cyber" has diversified and evolved over time
Army National Guard cyber protection teams announced(DVIDS) Army National Guard officials at the National Guard Bureau announced the location plan today for the first three of an eventual 10 new Army National Guard cyber protection teams to be established over the next three fiscal years
Cybercrime ring controlling millions of PCs crippled(Business Times) A cybercrime ring using 3.2 million hacked computers worldwide to steal banking information by seizing control of servers has been disrupted by European police and technology companies, officials said on Wednesday
For a complete running list of events, please visit the Event Tracker on the CyberWire website.
Newly Noted Events
St. Louis SecureWorld 2015(St. Louis, Missouri, USA, September 22 - 23, 2015) Join your fellow security professional for affordable, high-quality cybersecurity training and education at a regional conference near you. Earn CPE credits while learning from nationally recognized industry...
10th Annual ICS Security Summit(Orlando, Florida, USA, February 22 - March 2, 2015) Attendees come to the Summit to learn and discuss the newest and most challenging cyber security risks to control systems and the most effective defenses. The Summit is designed so you leave with new tools...
Cybersecurity: You Don't Know What You Don't Know(Birmingham, Alabama, USA, February 24 - 25, 2015) What: Connected World Conference in partnership with University of Alabama at Birmingham's Center for Information Assurance and Joint Forensics Research (The Center) have teamed up to bring professionals...
The Future of Cybersecurity Innovation(Washington, DC, USA, February 26, 2015) The US intelligence community has ranked cyberattacks as the No. 1 threat to national security — more than terrorist groups or weapons of mass destruction. But the military's cyberwarriors fight...
2015 Cyber Risk Insights Conference — San Francisco(San Francisco, California, USA, March 3, 2015) Following on the success of the 2014 half-day cyber risk event, Advisen will present a full day of learning and networking for risk managers, CISOs, CROs, insurance brokers, insurance underwriters, reinsurers...
Cybergamut Technical Tuesday: Tor and the Deep Dark Web(Columbia, Maryland, Sioux Falls, March 3, 2015) This talk will explore the use of Tor and how it relates to garnering useful intelligence. Distinguishing attribution or valuable intelligence from limited event data is difficult. Leveraging external...
Boston SecureWorld(Boston, Massachusetts, USA, March 4 - 5, 2015) Join your fellow security professional for affordable, high-quality cybersecurity training and education at a regional conference near you. Earn CPE credits while learning from nationally recognized industry...
Mercury Proposers' Day Conference(IARPA1, Washington, DC, March 5, 2015) The Intelligence Advanced Research Projects Activity (IARPA) will host a Proposers' Day Conference for the Mercury Program on March 5, in anticipation of the release of a new solicitation in support of...
OISC: Ohio Information Security Conference(Dayton, Ohio, USA, March 11, 2015) Technology First invites you to participate in the 12th Annual Ohio Information Security Conference Wednesday, March 11, at the Sinclair Community College Ponitz Center in Dayton, Ohio. The conference...
RiSK Conference 2015(Lasko, Slovenia, March 11 - 12, 2015) In recent years RISK conference has become one of the leading events on computer security in the Adriatic region and is attended by engineering as well as executive staff of companies from the region.
B-Sides Vancouver(Vaqncouver, British Columbia, Canada, March 16 - 17, 2015) The third annual Security B-Sides Vancouver is an information security conference that will be held March 16th and 17th. We love to see brand new speakers, seasoned speakers, and everyone in between
Insider Threat 2015 Summit(Monterey, California, USA, March 16 - 17, 2015) The Insider Threat 2015 Summit is about bringing Government and Industry organizations and their cybersecurity leaders together in order to better understand the type of threats that may impact their infrastructure...
2015 North Dakota Cyber Security Conference(Fargo, North Dakota, USA, March 17, 2015) The North Dakota Cyber Security Conference brings together community members from academia, government and industry to share strategies, best practices and innovative solutions to address today's challenges...
Philadelphia SecureWorld(Philadelphia, Pennsylvania, USA, March 18 - 19, 2015) Join your fellow security professional for affordable, high-quality cybersecurity training and education at a regional conference near you. Earn CPE credits while learning from nationally recognized industry...
2015 Cyber Security Summit(McLean, Virginia, USA, March 19, 2015) During Congressman Mike Rogers' "The Code War in America" talk at the June 2013 POC breakfast, he challenged all of us to "recognize that every day U.S. businesses are targeted by governments like China...
BSides Salt Lake City(Salt Lake City, Utah, USA, March 20 - 21, 2015) BSides is a community-driven framework for building events for and by information security community members. The goal is to expand the spectrum of conversation
CarolinaCon-11(Raleigh, North Carolina, USA, March 20 - 22, 2015) CarolinaCon-11 (also hereby referred to as "The Last CarolinaCon As We Know It") will occur on March 20th-22nd 2015 in Raleigh NC (USA). We are now officially accepting speaker/paper/demo submissions...
Cyber Security Conference 2015(Bolton, UK, March 23 - 24, 2015) Cyber Security Conference 2015 is a coming together of the North of England's two most successful Cyber Security Conferences; BEC Information & Data Security Conference and Lancaster University's North...
CyberTech Israel 2015(Tel Aviv, Israel, March 24 - 25, 2015) In the face of these enemies and threats, individuals, organizations and states are required to produce innovative, unique solutions that would improve the resistance and resilience of the sensitive systems...
2nd Annual ISSA COS Cyber Focus Day(Colorado Springs, Colorado, USA, March 25, 2015) Join us for the Information Systems Security Association (ISSA) — Colorado Springs Chapter — Cyber Focus Day set to take on Wednesday, March 25, 2015 at the University of Colorado Colorado...
CYBERWEST: the Southwest Cybersecurity Summit(Phoenix, Arizona, USA, March 25 - 26, 2015) The purpose of CYBERWEST is to bring together Government and businesses to: Exchange information and learn in areas of policy and strategy; technology and R&D; workforce training and education; and economic,...
Women in Cyber Security(Atlanta, Georgia, USA, March 27 - 28, 2015) Despite the growing demand and tremendous opportunities in the job market, cybersecurity remains an area where there is significant shortage of skilled professionals regionally, nationally and internationally.
Automotive Cyber Security Summit(Detroit, Michigan, USA, March 30 - April 1, 2015) The debut Automotive Cyber Security Summit will bring together CTOs, CSOs, Engineers and IT professionals from GM, KIA, Nissan, Bosch, Qualcomm and more for three days of case studies, workshops, panel...
Insider Threat Symposium & Expo(Laurel, Maryland, USA, March 31, 2015) The National Insider Threat Special Interest Group (NITSIG) announced that it will hold FREE 1 day Insider Threat Symposium & Expo (ITS&E) on March 31, 2015 in Laurel, Maryland. The symposium is exclusively...
SPONSOR & SUPPORT
Grow your brand and reach new customers.
Grow your brand and increase your customer base by educating our audience about your products, services, and events by advertising on The CyberWire. We’ve built trust with an influential (and often hard to reach) audience of CISOs, CSOs, and other senior execs in the security space, across a wide array of industry verticals. Learn more.
Be a part of the CyberWire story.
People ask us (a lot) how they can support what we do. We have our sponsorships and services, of course, but those are not always within every supporter's financial reach, or it might just not be the right time for you to do those things. That's why we launched our new Patreon site, where we've created a wider variety of support levels, each with some new benefits. Our patrons are important to our future, and we hope you'll consider becoming one. We invite you to become part of the CyberWire story. Become a patron today.