Cyber Security: UK and US spies to carry out fake hacking attacks on banks, airlines and nuclear plants

Britain and the US are to set up a joint ‘cyber squad’ to carry out fake hacking attacks on banks, aircraft and nuclear power plants. In talks at the White House, David Cameron and Barack Obama are set to agree an unprecedented level of co-operation, with a team of agents to help safeguard both countries. A report from British spy chiefs to be published today says four in every five big firms in the UK last year experienced some sort of serious cyber security breach. Click here to read the article.

 

 

 

 

Cyber Security: ICS-CERT Vulnerability Summary for Week of January 12

Click the link below to view the summary of cyber security vulnerabilities for the week of January 12 as collected and reported by ICS-CERT.

https://www.us-cert.gov/ncas/bulletins/SB15-019

Cyber Security: 2015 cyber risk and data protection predictions

Businesses in 2015 are expected to experience increasing challenges as they struggle to contend with the burgeoning threat of complex cybercrime. EY analysis has outlined some of the key areas that cyber risks threaten to impact in the coming year, including the difficulties in the insurance sector of underwriting cyber risk, the raft of regulation coming out of both the EU and the UK, the importance of integrated risk functions in firms, and the cyber risk of supply chains moving to the cloud. Click here to read more.

Cyber Security: ICS-CERT Vulnerability Summary for Week of December 8

Click the link below to view the summary of cyber security vulnerabilities for the week of December 8 as collected and reported by ICS-CERT.

https://www.us-cert.gov/ncas/bulletins/SB14-349

Cyber Security: Cyber attacks to worsen in 2015, McAfee researchers say

A series of spectacular cyber attacks drew headlines this year, and the situation will only worsen in 2015 as hackers use more advanced techniques to infiltrate networks, security researchers said yesterday. Click here to read the article.

Cyber Security: A Good Cyber Defense Can Protect Pharmaceutical and Medical Device Companies

The inability to keep data safe can undermine the results of a clinical study and an organization’s ability to generate new products and ensure the safety of existing ones. Much of the world’s critical infrastructure and vital goods are at significant risk of cyber security threats. Add to this discomforting list of threats to medical devices and pharmaceutical manufacturing.

Some companies in different industries underestimate the threat of cyber attacks believing falsely that because their control and monitoring systems are not connected to the Internet, they many not be subject to traditional hacking. “The big theory is that there is no technology connection between us in the plant and others in the outside world so our control systems are safe,” said Doug Clifton, global director, critical infrastructure and security practice at Schneider Electric.

Read the full article here.

Cyber Security: ICS-CERT Vulnerability Summary for Week of November 24

Click the link below to view the summary of cyber security vulnerabilities for the week of November 24 as collected and reported by ICS-CERT.

https://www.us-cert.gov/ncas/bulletins/SB14-335

Cyber Security: Anonymous pledges more attacks in Canada

The Anonymous hacker group that took credit for the cyber attack on Ottawa City Hall has pledged eight more targets in Canada, including Ottawa Police and the Supreme Court. Click here for the full story.

Cyber Security: Simulated terrorist cyber-attack on London

A cyber-detonated terrorist attack on the UK's critical infrastructure targeting key landmarks in London will be at the heart of the 2015 Cyber Security Challenge UK Masterclass, with some 42 of the country's most talented amateur cyber-defenders seeking to thwart the attack in real time. Click here to read the article.

Cyber Security: Badly secured routers leave 79 percent of US home networks at risk of attack

As many as four out of five internet-connected households in the US could be at risk of attack through their wireless router. This is among the findings of a study by security specialist Avast which found that more than half of all home routers are poorly protected using default or easily hacked password combinations such as admin/admin or admin/password. Read the article here.

Cyber Security: ICS-CERT Vulnerability Summary for Week of October 27

Click the link below to view the summary of cyber security vulnerabilities for the week of October 27 as collected and reported by ICS-CERT.

https://www.us-cert.gov/ncas/bulletins/SB14-307

Cyber Security: ICS-CERT Vulnerability Summary for Week of October 20

Click the link below to view the summary of cyber security vulnerabilities for the week of October 20 as collected and reported by ICS-CERT.

https://www.us-cert.gov/ncas/bulletins/SB14-300

Cyber Security: Oil and Gas Industry Unites to Pull Plug on Cyberintruders

Companies in the U.S. oil and gas industry are moving to work together to fight the onslaught of cyber security marauders infiltrating their computer network systems. Last year, the Department of Homeland Security said it worked on 256 security events involving critical infrastructure; sixty percent involved the energy sector. Read more here.

Cyber Security: China says US must change 'mistaken policies' before deal on cyber security

Resuming cyber security cooperation between China and the United States would be difficult because of “mistaken US practices”, China’s top diplomat has told the secretary of state, John Kerry.

Yang Jiechi, a state councilor overseeing foreign affairs, told Kerry at private talks in Boston the US “should take positive action to create necessary conditions for bilateral cyber security dialogue and cooperation to resume”, according to a statement seen on the Chinese foreign ministry website on Sunday.

“Due to mistaken US practices, it is difficult at this juncture to resume Sino-US cyber security dialogue and cooperation,” Yang was quoted as saying. The statement did not elaborate.

Read the article here.

 

Cyber Security: Russian Cyberspies Hit Ukrainian, US Targets With Windows Zero-Day Attack

The Russian cyber espionage and cybercrime worlds once again have collided in a newly discovered cyberspying campaign that uses a zero-day flaw found in all supported versions of Microsoft Windows. Researchers at iSIGHT Partners, who have been tracking the so-called Sandworm cyber espionage team out of Russia and four other such teams there for some time, discovered the group using a previously unknown security weakness in Windows. Click here to read the article.

 

 

Cyber Security: ICS-CERT Vulnerability Summary for Week of October 6

Click the link below to view the summary of cyber security vulnerabilities for the week of October 6 as collected and reported by ICS-CERT.

https://www.us-cert.gov/ncas/bulletins/SB14-286

Cyber Security: The one cybersecurity threat everyone misses

After a spate of high-profile cyber security breaches at major companies like Target and, more recently, Home Depot and JPMorgan Chase, the biggest players for the most part have strong protections to wall off their proprietary information. But smaller vendors who can't afford expensive security measures—and yet have links to some of their larger client's sensitive data—are now in the crosshairs of sophisticated hackers. Read the article here.

Cyber Security: ICS-CERT Vulnerability Summary for Week of September 29

Click the link below to view the summary of cyber security vulnerabilities for the week of September 29 as collected and reported by ICS-CERT.

https://www.us-cert.gov/ncas/bulletins/SB14-279

Cyber Security: Massively Distributed Citadel Malware Targets Middle Eastern Petrochemical Organizations

Recently, IBM Trusteer researchers identified targeted cyber attacks on several Middle Eastern petrochemical companies. They have identified a campaign in which attackers are using a variant of the evasive Citadel malware. Citadel was originally created for the purpose of stealing money from banks and has been massively distributed on users’ PCs around the world. Read the article here.

Cyber Security: Seven safety tips from hackers

It's easy to get hacked. And yes, it can happen to you. Click here to read safety tips from hackers.