In January 2010, inspectors with the International Atomic Energy Agency visiting the Natanz uranium enrichment plant in Iran noticed that centrifuges used to enrich uranium gas were failing at an unprecedented rate. The cause was a complete mystery. Five months later a seemingly unrelated event occurred. A computer security firm in Belarus was called in to troubleshoot a series of computers in Iran that were crashing and rebooting repeatedly. Again, the cause of the problem was a mystery. That is, until the researchers found a handful of malicious files on one of the systems and discovered the world The link for this article located at Wired is no longer available. . Exploring the implications of Stuxnet on Iran's nuclear ambitions via groundbreaking cyber tactics.. Stuxnet, Nuclear Disruption, Cybersecurity Threats. . LinuxSecurity.com Team
A computer hacker who calls himself "The Jester" claimed responsibility for the cyber attack which took down the WikiLeaks site Sunday, shortly before it started posting hundreds of thousands of classified U.S. diplomatic cables. . The Jester, who describes himself as a "hacktivist for good," said he took the controversial site down "for attempting to endanger the lives of our troops, 'other assets' & foreign relations." He normally attacks Islamist websites, announcing "TANGO DOWN" on his Twitter account when claiming to have attacked a site. "Tango Down" is Special Forces jargon for having eliminated a terrorist. The link for this article located at CNN is no longer available. . The Trickster, branding himself a 'digital warrior for justice,' announced he was behind the assassination of the cyber operations linked to WikiLeaks.. Hacktivism, Cyber Attack, Online Activism. . LinuxSecurity.com Team
Ira Winkler prognosticates on the possibility of a catastrophic online international event. Interesting? For 15 years now, I have been publicly lambasting all of those people who have made their careers, or at least made fleeting news headlines, based on their declaration of an imminent Electronic Pearl Harbor. My disdain is based on several factors, but predominantly the lack of accountability for such statements. . One industry analyst, for example, stated that there will be such an event by the end of 2003. Six years later, I didn't see anyone revisit the utter lack of such an event. However, I now see things developing to the point where there can be a strategic attack on computer infrastructures. The key word is Strategic. Another major issue I have with the people who stake their fame in information warfare is the lack of apparent understanding in the concept of military and geopolitical issues. Specifically, strategy implies long term impacts, generally at least 3-6 months. Tactical attacks have short term impacts. Yes, we have had many tactical attacks against different infrastructures. However, comparing these attacks to Pearl Harbor is insulting. Pearl Harbor was a preemptive strike against the US Pacific Fleet. It significantly degraded the US Naval capability for several years. If the aircraft carriers were in Pearl Harbor as the Japanese expected, it could have been a complete knockout blow. So the question becomes, what can make a computer attack strategic? The link for this article located at CSO Online is no longer available. . Investigating the potential threat of a Digital Pearl Harbor in the realm of cybersecurity through coordinated attacks and international ramifications.. Electronic Pearl Harbor,Cyber Threats,Strategic Warfare,Online Security Risks. . LinuxSecurity.com Team
Don't tools like this already exist on the Internet and through open source that enable script kiddies to launch an attack? The U.S. military is putting together a suite of hacking tools that could one day make breaking into networks as easy for the average grunt as kicking down a door. That. In recent years, Defense Department officials have thumped their chests, hard, about how good the Pentagon is at hacking enemy networks. But discussing specific online attacks The link for this article located at Wired is no longer available. . In recent years, Defense Department officials have thumped their chests, hard, about how good the Pe. don't, tools, already, exist, internet, through, source, enable, script, kiddi. . Anthony Pell
China is fielding information warfare units and developing anti-satellite capabilities aimed at countering U.S. military technology, according to a U.S. congressional commission. China. China is enhancing its advanced command, control, communications, computers, intelligence, surveillance and reconnaissance capabilities in response to U.S. progress. China now has mobile command and control centers that use wireless and satellite communications to relay battlefield information. The link for this article located at Federal Computer Week is no longer available. . China is advancing its military strategies to bolster its information warfare tactics and develop counter-satellite systems aimed at U.S. technological dominance.. China Cyber Threats, Military Technologies, Anti-Satellite Systems. . Brittany Day
Security company Symbiot is about to launch a product that can hit back at hackers and DDoS attacks by lashing out with its own arsenal of tricks, but experts say it may just be a bit too trigger-happy. Symbiot, a Texas-based security firm, is preparing to launch a corporate defence system at the end of March that can fight back against distributed denial-of-service (DDoS) and hacker attacks by launching a counter-strike. . . .. Security company Symbiot is about to launch a product that can hit back at hackers and DDoS attacks by lashing out with its own arsenal of tricks, but experts say it may just be a bit too trigger-happy Symbiot, a Texas-based security firm, is preparing to launch a corporate defence system at the end of March that can fight back against distributed denial-of-service (DDoS) and hacker attacks by launching a counter-strike. In advance of the product launch, Symbiot's president, Mike Erwin, and its chief scientist, Paco Nathan, have outlined a set of "rules of engagement for information warfare", which they say should be part of corporate security policy to help companies determine their exact response to an incoming attack. "Until today, security solutions have been totally passive in nature. Merely erecting defensive walls around the perimeter of an enterprise network is not an adequate deterrent," said Erwin, who argues that to have a complete defence in place, offensive tactics must be employed. The company said it bases its theory on the military doctrine of "necessity and proportionality", which means the response to an attack is proportionate to the attack's ferocity. According to the company, a response could range from "profiling and blacklisting upstream providers" or it could be escalated to launch a "distributed denial of service counter-strike". Security experts expressed alarm at the company's plans. Graham Titterington, principal analyst at Ovum, said "such a counterattack would not be regarded as self-defence and would therefore be an attack. It would be illegal in thosejurisdictions where an anti-hacking law is in place." He added that because many hacking and DDoS attacks are launched from hijacked computers, the system would be unlikely to find its real target: "Attacks are often launched from a site that has been hijacked, making it an unwitting and innocent -- although possibly slightly negligent -- party." Richard Starnes, director of incident response at Cable and Wireless Managed Security Services, said he would not employ an "active defence technique" because there are legal and ethical issues involved. Also, he would not be happy about any product "specifically designed to launch attacks" being put into commercial production. Starnes said it would be easy to hit the wrong target and even if it was the right target, there could be collateral damage: "You may be taking out grandma's computer in Birmingham that has got a 100-year-old cookie recipe that has not been backed up. The attack could also knock over a Point of Presence (PoP), so you are not only attacking the target, but also the feeds before them -- this means taking out ISPs, businesses and home users." Jay Heiser, chief analyst at IT risk management company TruSecure, said that he expects the product to have "emotional appeal" to companies that have been targets, but "that is a very bad criterion for choosing risk-reduction measures." The link for this article located at ZDNet is no longer available. . Security company Symbiot is about to launch a product that can hitback at hackers and DDoS attacks b. security, company, symbiot, about, launch, product, hackers, attacks. . Anthony Pell
Imagine Saddam Hussein sitting in one of his palaces, tapping on his laptop, maybe shopping at Uranium Online. Which actually exists, by the way. Tag line: "The nuclear fuel e-commerce solution." . . .. Imagine Saddam Hussein sitting in one of his palaces, tapping on his laptop, maybe shopping at Uranium Online. Which actually exists, by the way. Tag line: "The nuclear fuel e-commerce solution." All of a sudden, Saddam's computer explodes with e-mail. It's all spam, made in America -- thousands of offers. Consolidate your debt. Earn money working at home. Enlarge your breasts. It would be like Internet carpet bombing. He'd surrender within days. In reality, the U.S. military is developing cyberwarfare weapons. Details of the program are top secret. OK, it probably doesn't involve unleashing spammers on Iraq, but you never know. The link for this article located at USA Today is no longer available. . Imagine Saddam Hussein sitting in one of his palaces, tapping on his laptop, maybe shopping at Urani. imagine, saddam, hussein, sitting, palaces, tapping, laptop, maybe, shopping, urani. . Anthony Pell
U.S. defense secretary Donald Rumsfeld this week directed the armed service to strip military Web sites of information that could benefit adversaries, citing a terrorist training manual and a year-long review of the Department of Defense's 700-gigabyte Web presence. . .. U.S. defense secretary Donald Rumsfeld this week directed the armed service to strip military Web sites of information that could benefit adversaries, citing a terrorist training manual and a year-long review of the Department of Defense's 700-gigabyte Web presence . "An al Qaeda training manual recovered in Afghanistan states: 'Using public sources openly and without resorting to illegal means, it is possible to gather at least 80% of information about the enemy,'" Rumsfeld wrote in a memo electronically circulated throughout the armed services. "One must conclude our enemies access DoD Web sites on a regular basis." The Pentagon has long enjoyed an uneasy relationship with the Web, beginning in 1998 when then-deputy defense secretary John Hamre issued a directive that greatly restricted the type of unclassified information defense sites can put online (classified data is not allowed on the Internet). Following the September 11 terrorist attacks, the Defense Department pulled or pared thousands of additional pages, and established still stricter policies on Web publication. The link for this article located at SecurityFocus is no longer available. . The U.S. Secretary of Defense, Rumsfeld, mandates the elimination of information from military locations to prevent rivals from gaining insights, highlighting issues of national security.. Military Information Security,Cybersecurity Directive,Defense Department Policy. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.