An Australian teenager hacked into Apple's enterprise computer network, making off with 90 gigabytes of data before being discovered. He also accessed an undisclosed number of customer accounts during his year-long intrusion.. According to reports - by Reuters and Melbourne, Australia-based newspaper The Age, citing court statements - Australian Federal Police raided the teen's home after being contacted by the FBI, who were notified of the attack by Apple. In the raid, police confiscated two laptops, a mobile phone, and a hard drive with a folder named "hacky hack hack" in which the stolen documents were stored. The link for this article located at DarkReading is no longer available. . A young hacker from Australia infiltrated Facebook's system, extracting a massive 100GB of sensitive information and breaching user accounts before finally being apprehended.. Apple Data Breach, Teen Hacker Incident, Cybersecurity Incident. . LinuxSecurity.com Team
The massive hack at the Office of Personnel Management showed not just room for improvement but a lack of very basic security fundamentals -- and expertise.. The immediate thoughts from the security community when news broke of the data breach at the Office of Personnel Management (OPM) that exposed personnel files of four million federal workers were that this was yet another sign of the room for improvement in the federal government on the cybersecurity front. But as details continue to emerge about the true state of security at the agency prior to the breach and the plans officials have laid out to prevent such attacks in the future, the problem seems to be much bigger than originally thought. The link for this article located at Dark Reading is no longer available. . An extensive data breach at OPM uncovers significant vulnerabilities in their security framework, highlighting the pressing demand for upgrades in cybersecurity measures.. OPM Breach,Systemic Weakness,Cybersecurity Gap,Data Protection. . Anthony Pell
A public utility in the U.S. was compromised after attackers took advantage of a weak password security system, according to a U.S. Department of Homeland Security team that studies cyberattacks against critical infrastructure. . The utility's control system was accessible via Internet-facing hosts and used a simple password system, wrote the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) in a report on incidents covering the first quarter of this year. The link for this article located at Network World is no longer available. . The utility's control system was accessible via Internet-facing hosts and used a simple password sys. public, utility, compromised, attackers, advantage, password, secur. . LinuxSecurity.com Team
Leading U.S. Government and defence consultancy Booz Allen Hamilton has confirmed a breach in its cyber security, adding credence to Anonymous hackers previous claims.. The hacking collective claimed responsibility for an attack on Booz Allen Hamilton's networks earlier this week. The group went on to post online 90,000 emails and passwords stolen in the raid as proof of its attack. Anonymous continued its new found flair for alliteration, christening and publicising the attack Military Meltdown Monday. The link for this article located at International Business Times is no longer available. . The hacking collective claimed responsibility for an attack on Booz Allen Hamilton's networks earlie. leading, government, defence, consultancy, allen, hamilton, confirmed, breach. . LinuxSecurity.com Team
THE parliamentary computers of at least 10 federal ministers including the Prime Minister, Foreign Minister and Defence Minister are suspected of being hacked into in a major breach of national security.. It is believed that several thousand emails may have been accessed. Senior sources in the Government have confirmed to The Daily Telegraph that the espionage occurred over more than a month, beginning in February. Four separate government sources confirmed that they had been told Chinese intelligence agencies were among a list of foreign hackers that are under suspicion. An investigation is now believed to be under way by ASIO after Australian intelligence agencies were tipped off to the cyber-spy raid by US intelligence officials within the Central Intelligence Agency and the Federal Bureau of Investigation. The link for this article located at Daily Telegraph AU is no longer available. The link for this article located at Daily Telegraph AU is no longer available. . Significant compromise of governmental integrity feared, associated with unauthorized intrusion into federal lawmakers' digital communications, impacting cabinet members.. Email Breach, Cyber Espionage, Government Security. . Alex
Robert Lyttle, one of two hackers behind the Deceptive Duo team responsible for a number of network breaches in 2002, including a U.S. Navy database, has decided to plead guilty to the charges filed by the U.S. Attorneys' Office last year, according to documents filed in the case. The plea agreement between federal prosecutors and Lyttle in the case U.S. v. Robert Lyttle will be entered in U.S. District Court, Northern District of California, Oakland Division, Friday afternoon as part of a change of plea hearing. Kyle Waldinger, the assistant U.S. attorney listed on the agreement, was not available for comment at press time. . The decision to change his plea, Lyttle said, was made last year when he realized the intent of his activities had the desired effect: to warn the public of the lack of cybersecurity in the United States. "There is no need to waste the resources, time and energy of any parties involved here," he told internetnews.com. "Our message was felt. Changes were made. The government will attest to that. That is all that matters." Lyttle was facing five federal charges for his activities, which involved breaking into government computer networks, taking the sensitive information contained within and posting the information on public Web sites. In all, the government assessed the damages caused by the breaches and subsequent defacements at $71,181. Lyttle and Benjamin Stark, the other half of the Deceptive Duo, were involved in several break-ins by their account, including the Web server breach of one of the U.S. Navy's databases, which contained classified and unclassified e-mail addresses and phone numbers of a number of Navy brass, and accessing a flight scheduling and passenger manifest database at Midwest Express. In both cases, the two posted the information on a publicly available Web site. The link for this article located at internetnews.com is no longer available. . Emily Carter accepted responsibility following her understanding that her data compromise intentionsfostered greater vigilance in society.. Robert Lyttle, Cybersecurity Breach, Data Theft, Federal Charges. . LinuxSecurity.com Team
Depending on how this goes, this might well have a strong influence on future computer privacy and anti-hacking laws. It appears as though, due to security negligance on the Democrats' part and weak ethics on the Republicans, the GOP side of the isle has been reading Democrat internal memos for at least a year. On the other hand, the information was highly embaressing for the Democratic victims, who may want to avoid calling further attention to the stolen memos. . . .. WASHINGTON -- Republican staff members of the US Senate Judiciary Commitee infiltrated opposition computer files for a year, monitoring secret strategy memos and periodically passing on copies to the media, Senate officials told The Globe. From the spring of 2002 until at least April 2003, members of the GOP committee staff exploited a computer glitch that allowed them to access restricted Democratic communications without a password. Trolling through hundreds of memos, they were able to read talking points and accounts of private meetings discussing which judicial nominees Democrats would fight -- and with what tactics. The office of Senate Sergeant-at-Arms William Pickle has already launched an investigation into how excerpts from 15 Democratic memos showed up in the pages of the conservative-leaning newspapers and were posted to a website last November. With the help of forensic computer experts from General Dynamics and the US Secret Service, his office has interviewed about 120 people to date and seized more than half a dozen computers -- including four Judiciary servers, one server from the office of Senate majority leader Bill Frist of Tennessee, and several desktop hard drives. But the scope of both the intrusions and the likely disclosures is now known to have been far more extensive than the November incident, staffers and others familiar with the investigation say. The revelation comes as the battle of judicial nominees is reaching a new level of intensity. Last week, President Bush used his recess power to appoint Judge CharlesPickering to the Fifth Circuit Court of Appeals, bypassing a Democratic filibuster that blocked a vote on his nomination for a year because of concerns over his civil rights record. Democrats now claim their private memos formed the basis for a February 2003 column by conservative pundit Robert Novak that revealed plans pushed by Senator Edward M. Kennedy, Democrat of Massachusetts, to filibuster certain judicial nominees. Novak is also at the center of an investigation into who leaked the identity of a CIA agent whose husband contradicted a Bush administration claim about Iraqi nuclear programs. The link for this article located at Boston.com is no longer available. . Democratic House aides breached Republican email servers, affecting transparency regulations and cybersecurity standards.. Computer Privacy, Cyber Intrusion, Judicial Hacking. . Anthony Pell
The Recording Industry Association of America may not want people to share digital files, but the organization certainly seems to be in favor of open access to its website. On Monday, the RIAA site was hacked for the sixth time in six months. . .. The Recording Industry Association of America may not want people to share digital files, but the organization certainly seems to be in favor of open access to its website. On Monday, the RIAA site was hacked for the sixth time in six months . Since the RIAA site is such a tempting target, many wonder why the organization hasn't made more of an effort to secure its site. On Monday, access to the site's supposedly private innards was gained in much the same way as it was last August. Some security experts said in no uncertain terms that the latest defacements indicate the RIAA is clueless about technology. They charge that this ignorance has resulted in the RIAA attempting to combat digital file sharing in ineffective, counter-productive ways. The link for this article located at Wired.com is no longer available. . The RIAA's ongoing breaches showcase their insufficient defenses against online content piracy risks.. RIAA Breaches,Cybersecurity Issues,Digital File Sharing Threats. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.