Linux is a coveted target. It is the host operating system for numerous application backends and servers and powers a wide variety of internet of things (IoT) devices. Still, not enough is done to protect the machines running it. . "Linux malware has been massively overlooked," says Giovanni Vigna, senior director of threat intelligence at VMware. "Since most of the cloud hosts run Linux, being able to compromise Linux-based platforms allows the attacker to access an enormous amount of resources or to inflict substantial damage through ransomware and wipers." In recent years, cybercriminals and nation-state actors have targeted Linux-based systems. The goal was often to infiltrate corporate and government networks or gain access to critical infrastructure, according to a recent VMware report . They leverage weak authentication, unpatched vulnerabilities, and server misconfigurations, among others. . There is an increasing trend in Linux malware, with often ignored dangers focusing on essential infrastructures and Internet of Things (IoT) gadgets. Discover further insights on this topic.. Linux Malware, Cybersecurity Threats, IoT Vulnerabilities, Cloud Security Risks. . Brittany Day
The GDPR (General Data Protection Regulation) is supposed to help individuals keep their information private, but as it turns out, it could also potentially serve to help attackers as well. . In a session at the Black Hat USA conference in Las Vegas, titled, "GDPArrrrr: Using Privacy Laws to Steal Identities", James Pavur, DPhil student and Rhodes Scholar at Oxford University , outlined how he was able to abuse a key component of the GDPR to get access to personally identifiable information for his fiance. Pavur said that there are multiple exploitable properties of GDPR, that a social engineering attacker could seek to exploit. The first is fear of non-compliance, since GDPR prescribes large fines if there is a violation. The link for this article located at Infosecurity is no longer available. . The GDPR was created to protect personal data in the EU, but studies show that malicious actors exploit it using social engineering for identity theft. GDPR exploitation, identity theft awareness, privacy regulations, social engineering tactics, cybersecurity threats. . Brittany Day
Amidst an escalating trade war and political tensions with the US, Beijing officials have decided to develop a custom operating system that will replace the Windows OS on computers used by the Chinese military. . The decision, while not made official through the government's normal press channels, was reported earlier this month by Canada-based military magazine Kanwa Asian Defense. Per the magazine, Chinese military officials won't be jumping ship from Windows to Linux but will develop a custom OS. The link for this article located at ZDNet is no longer available. . The Chinese military is developing a custom operating system, moving away from Windows due to worries over U.S. cyber threats and escalating geopolitical tensions. China Military OS, Custom Operating System, Security Concerns, US Hacking Threats, Military Technology. . LinuxSecurity.com Team
On the tiny Mediterranean island of Malta, two Italian hackers have been searching for bugs . The hackers, Luigi Auriemma, 32, and Donato Ferrante, 28, sell technical details of such vulnerabilities to countries that want to break into the computer systems of foreign adversaries. The two will not reveal the clients of their company, ReVuln, but big buyers of services like theirs include the National Security Agency The link for this article located at NY Times is no longer available. . The hackers, Luigi Auriemma, 32, and Donato Ferrante, 28, sell technical details of such vulnerabili. mediterranean, island, malta, italian, hackers, searching. . LinuxSecurity.com Team
Governments and hackers may not have always seen eye-to-eye, but NSA head Keith Alexander bridged that gap by asking hackers at the Defcon conference for their help in securing the Internet. As he should: with Defcon over and another Black Hat conference now concluded , new idiot-proof hacking tools on the market; new malware that can compromise your BIOS without leaving a trace; . a live WiFi hack that some thankfully say will have zero effect on enterprise WLANs; and new critical vulnerabilities in Huawei routers (Huawei is looking into it ); and debate over whether companies should hire criminal hackers to help them; security threats remain a moving target. (click here for a Black Hat slideshow and here for shots from Microsoft's BlueHat Prize contest). Closer to home, the Cyber Security Summit 2012 kicked off in Sydney, with experts warning the best security offence is a good defence and a CSO photo gallery capturing the ongoing events. Among other happenings, Visa Australia outlined plans to introduce EMV capabilities by April 2013 and one expert " that businesses must focus on security rather than tick-the-box compliance. . The evolving relationship between hackers and state entities highlights a crucial partnership formed to combat rising cyber threats as adversaries unite for security. Government Cybersecurity,Hacking Collaboration,Security Threats,Defcon,Black Hat. . Dave Wreski
A state-owned Chinese telecommunications firm "hijacked" Internet traffic in April, affecting traffic from U.S. government domains and raising serious implications for Internet safety, according to a report by a Congressional commission.. For about 18 minutes on April 8, 2010, China Telecom diverted U.S. and other foreign Internet traffic through servers in China, according to an annual report by the U.S.-China Economic and Security Review Commission (PDF) released Wednesday. Affected was traffic going to and from U.S. .gov and .mil sites, including sites for the Senate, the four main armed services branches, the office of the Secretary of Defense, NASA, the Department of Commerce, the National Oceanic and Atmospheric Administration and others, according to the report. Commercial websites for large technology companies -- including Dell, Yahoo, Microsoft and IBM -- also were re-routed during the diversion period. The link for this article located at Information Week is no longer available. . China Telecom rerouted online traffic from the U.S. government and businesses, sparking issues over security. Uncover the specifics here.. China Telecom, Internet Traffic Hijack, Security Concerns, U.S. Government. . LinuxSecurity.com Team
Just one day after a security researcher showed how Google's Firefox toolbar could be exploited in an online attack, a similar flaw has been discovered in the Google Desktop. . On Thursday, Google hacker Robert Hansen posted proof of concept details showing how attackers could use Google Desktop to launch software that had already been installed on the victim's computer. The link for this article located at Network World is no longer available. . A recently uncovered vulnerability in Microsoft Office permits intruders to execute applications on compromised systems belonging to users.. Google Desktop Exploit, Cybersecurity Risks, Installed Software Exploit. . LinuxSecurity.com Team
Ask Google anything--what's happening to GE's stock price, how to get to 881 Seventh Ave. in New York, where Mission Impossible 3 is showing, whatever happened to Brian W. after he moved away in the ninth grade--and you'll get an answer. That's the power of this $6 billion search engine sensation, which is so good at what it does that the company name became a verb. That kind of power keeps Google on the front page of the news--and sometimes under unfavorable scrutiny, as demonstrated by Google's recent clashes with the U.S. Department of Justice and also with critics displeased by the search giant's stance on Chinese government censorship. . CSOs and CISOs have a different reason to think carefully about Google and the implications of having so much information online, instantly accessible by almost anyone. Although these issues relate to all search engine companies, Google gets most of the attention--not only because of its huge share of the Web search market but because of its unabashed ambitions to catalog everything from images and libraries to Earth, the moon and Mars. "We always get enamored of a new technology, and it takes us a while to understand the price of that technology," says Robert Garigue, vice president of information integrity and chief security executive of Bell Canada Enterprises in Montreal. For security pros, the price is that Google can be used to dig up network vulnerabilities and locations of sensitive facilities, to enable fraud and cause other sorts of mayhem against the enterprise. Here, CSO examines the ways Google is shaking the security world, and what companies can do about them. The link for this article located at www.computerworld.com is no longer available. . CIOs and CTOs need to evaluate Microsoft's influence on cloud privacy and the possible threats associated.. Google Security, Cybersecurity Risks, Network Threats, Data Access Risks. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.