Hacktivists have added a new tactic to their arsenal: redirecting all of the traffic from a target company's website.. According to a blog written by security expert Lars Harvey of IID, politically motivated attackers are now using DNS hijacks, which redirect all the traffic from a victim's legitimate website (and often all the email and back-end transactions, too) to a destination of the attacker's choosing. The link for this article located at Dark Reading is no longer available. . Hacktivism is transforming as activists use DNS hijacking to divert users from legitimate sites, critiquing corporate practices and social issues while exploiting vulnerabilities.. DNS Hijacking, Hacktivism Techniques, Attack Strategies. . LinuxSecurity.com Team
The RSA president sees the security industry finally moving from defending the perimeter of a network to actually locking down the data within, he said in an interview. It is a message he has been repeating for years at the RSA Conference, but this year, he expects to see evidence of a response. . Coviello's words matter. Not only because he's spotted a shift that's important in a world where data breaches make headlines almost every day. His company, taken over last year by storage giant EMC, also exemplifies the ongoing consolidation and maturation of the security industry. But not all of Coviello's predictions come true. He used to hope for a mass market for devices like its key fobs, which generate one-time passwords. Coviello still believes such passwords will go mainstream, but not necessarily through tokens. . Coviello's observations emphasize a transition towards protecting information in light of increasing incursions within the security arena.. Data Protection, Cybersecurity Trends, Network Security Strategies. . Bill Locke
The period of time between the announcement of a vulnerability and the release of an associated exploit continues to shrink, making it increasingly likely that we will see a so-called "zero-day" threat. A zero-day blended threat (i.e., one that uses multiple methods and techniques to spread) could target a vulnerability before that vulnerability is announced and a patch made available. . . .. Although Symantec's Internet Security Threat Report confirms a significant increase in 2003 of malicious code that exposes confidential data, enterprise security is evolving to meet the challenge of these cyber attacks. A firewall is no longer just a firewall as newer software includes VPN tunneling and antivirus capabilities. Security point products are being integrated into multi-function security appliances for comprehensive protection. Early warning solutions have emerged that provide `heads-up' notification of vulnerabilities and precursor threat activity with actionable guidance prior to full-fledged attacks. And more and more companies are choosing to co-source their security device monitoring and management to trusted security providers. However, the challenge still looms as threats continue to grow in sophistication and intensity. Over 60,000 computer viruses have been identified in the wild with more than 1,700 new Win32 viruses being documented in the second half of 2003. There were more than 2,600 vulnerabilities discovered in 2003--an average of seven per day. And not only are threats to the security of the Internet increasing, but they're also speeding across the Net faster than ever, making it increasingly difficult to defend against them. Information Security's Challenge The period of time between the announcement of a vulnerability and the release of an associated exploit continues to shrink, making it increasingly likely that we will see a so-called "zero-day" threat. A zero-day blended threat (i.e., one that uses multiple methods and techniques to spread) could target a vulnerability before thatvulnerability is announced and a patch made available. Until the worm outbreaks of August 2003, exploits generally didn't emerge until months (or even years) after a vulnerability had been publicly disclosed. That window is now shrinking -- fast. In fact, last year's Blaster worm used a well-known Microsoft security flaw that had been announced only 26 days earlier. The recent Sasser worm, which began spreading widely on May 1, exploited a hole in a component of the Windows operating system for which Microsoft issued a patch on April 13. The link for this article located at ebcvg.com is no longer available. . The emergence of undisclosed exploits is transforming cybersecurity measures as malware incidents and weaknesses escalate.. Zero-Day Threats, Cybersecurity Practices, Malware Analysis, Security Challenges, Threat Response. . Anthony Pell
Small and medium-size companies last year spent more money on hardware-based firewall appliances than on software-based systems, helping WatchGuard Technologies Inc. remain in the No. 1 position in the most competitive segment of the firewall market, according to a new analyst . . . . Small and medium-size companies last year spent more money on hardware-based firewall appliances than on software-based systems, helping WatchGuard Technologies Inc. remain in the No. 1 position in the most competitive segment of the firewall market, according to a new analyst report. The study by IDC, "Return of the Black Box: Firewall/VPN Security Appliances Unleashed," concludes that for the first time, firewall appliance revenue last year surpassed software-based firewall revenue, coming in at $942.8 million. Framingham, Mass.-based IDC is a subsidiary of International Data Group, which publishes Computerworld. In addition, Seattle-based WatchGuard won the top slot in the $1,000-to-$5,000 firewall appliance market -- the "sweet spot" in the market, according to IDC -- for the second year in a row. The company captured a 23% market share and earned $60.7 million in worldwide revenue. The link for this article located at ComputerWorld is no longer available. . Small and medium-size companies last year spent more money on hardware-based firewall appliances tha. small, medium-size, companies, spent, money, hardware-based, firewall, appliances. . Anthony Pell
A useful resource in this area is Attrition.org's Web site. Hackers notify this group when they deface a site, and Attrition.org makes a mirror copy of it as a record. This means it has accurate data reflecting trends in this area. . . . . A useful resource in this area is Attrition.org's Web site. Hackers notify this group when they deface a site, and Attrition.org makes a mirror copy of it as a record. This means it has accurate data reflecting trends in this area. And the current trend isn't good. Attrition.org's Web site is seeing about 30 defacements per day, an increase from 13 per day a year ago and two per day two years ago. And it doesn't look like this will improve anytime soon. To supplement this data from the outside world, we also regularly examine data from our systems to ensure that our defense is properly focused. We have an intrusion-detection sensor outside the firewall that logs many attacks, and we also log a great deal at our firewalls. As an exercise, we recently analyzed a week's worth of data down to the last packet and noticed some remarkable trends. I hadn't looked at this data in detail for some time, and I was startled by what we found. The link for this article located at ComputerWorld is no longer available. . The surge in web defacements highlights a unique blend of cyber protest and vandalism, prompting Attrition.org to track these incidents, revealing trends and motivations.. Web Defacement Trends, Cybersecurity Insights, Attrition.org Data. . LinuxSecurity.com Team
This News.com section details the recent DDoS attacks including a more in-depth overview of the events, and information on what the FBI is currently doing. . . .. This News.com section details the recent DDoS attacks including a more in-depth overview of the events, and information on what the FBI is currently doing. The link for this article located at News.com is no longer available. . DDoS attacks are becoming increasingly sophisticated, exploiting new vulnerabilities. The FBI is enhancing collaboration with cybersecurity and private sectors to tackle these threats. DDoS Attacks, Cybersecurity Trends, Cyberattack Insights, FBI Cybersecurity Response. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.