Laws Can’t Save Banks From DDoS Attacks

An posting from Information week in there security sections: The co-author of the Cyber Intelligence Sharing and Protection Act (CISPA) ought to know better.

Rep. Mike Rogers (R-Mich.), who is also chairman of the House Intelligence Committee, told NBC News on Wednesday that the Operation Ababil bank disruption campaign run by al-Qassam Cyber Fighters could be stopped, if only private businesses had unfettered access to top-flight U.S. government threat intelligence. Currently the federal government is “trying to share cyber threat information with these banks to help them get ahead of these attacks,” Rogers said. “Unfortunately, a series of policy and legal barriers is impeding that cooperation, as well as slowing down cooperation within the private sector and making it less effective.”

The problem with that reasoning is that the bank disruptions — often publicized in advance by attackers — overwhelm targeted networks through sheer quantities of packets. They don’t employ attacks of a stealthy or unknown nature that banks might have difficulty spotting if only they had access to better attack data.

To read more click here:

Facebook Home – Great if you think privacy is dead

An posting from naked seciuty about face book home:

Is Facebook Home the long rumored Facebook phone? Nope.

Rumors of a Facebook phone are nearly as common as OS X users who don’t think they need anti-virus, but that doesn’t make either one of them true.

Facebook is avoiding the hassles of designing and manufacturing its own hardware, but nevertheless making a land grab for control of the user experience.

The concept is simple: replace the lockscreen and application launcher on popular Android devices with a streamlined, Facebook-focused experience.

It is only available on a few devices at this time, including the Samsung Galaxy S3, Samsung Galaxy Note II, HTC First, HTC One X, and HTC One X+.

To read more click here: 

WordPress blogs and more under global attack – check your passwords now!

An posting  from naked security about word-press   If you have a web service that supports remote users, you will know that malevolent login attempts are an everyday occurrence.

Even on my own home-hosted SSH server, listening unassumingly on an IP number on a DSL line, I’ve seen thousands of login attempts from dozens of different IP numbers in the course of a single day.

But hosting providers worldwide are reporting that they’ve been seeing systematic attempts, over the last 48 hours or so, to breach blogs and content management systems (CMSes) at well above average levels.

 

To read more click here:

Hacker pleads guilty to attacks on UK Police, Oxbridge university websites

A posting from Naked Security:  A 21-year-old British man has pleaded guilty to charges that he attempted to bring down a number of websites, including those belonging to Oxford and Cambridge universities, as well as the site belonging to the Kent Police force who ultimately arrested him.

Lewys Stephen Martin was charged last November, following an investigation by Kent Police’s Special Branch investigations team, and the Kent Police Digital Forensic Unit.

To read more click here:

Microsoft security update may break Windows 7

an posting from NBC news in there Technology section: A security update that Microsoft pushed out earlier this week crashes some Windows 7, Windows Server 2008 and Windows Vista machines, forcing them into an endless cycle of reboots that can only be stopped by repairing the operating systems.

Microsoft recommends that all Windows 7 users uninstall the security update.

The update came as a part of Patch Tuesday, Microsoft’s longstanding tradition of releasing security patches on the second Tuesday of each month. The main vulnerability that this month’s update addressed required a would-be hacker to possess valid login credentials and physically interact with a computer. Although this issue was not critical by itself, some of the other problems that Patch Tuesday addressed were.

To read more click here: