Nearly three months after the US Office of Personnel Management (OPM) discovered its databases had been compromised by Chinese hackers, the government still hasn't notified the employees and contractors affected by the breach. On Tuesday, the OPM said it planned to start the process of informing victims "later this month," and that reaching everyone is expected to take several weeks.. The Department of Defense will send notifications directly to affected people by postal mail, the agency said. The link for this article located at The Register UK is no longer available. . Those impacted find themselves uninformed four months post the significant cyber incident, sparking worries about transparency.. US Government Breach, OPM Data Compromise, Employee Security Update. . Anthony Pell
A hacker group linked to the Syrian government was . The link for this article located at Washington Post is no longer available. . The link for this article located at Washington Post is no longer available.. hacker, group, linked, syrian, government, article, located, washington. . Alex
The Merit Network will hold an Class on SELinux Security, Jan. 19 & 26; this short course focuses on preventing malicious attack. Taught during two three-hour sessions, it is provided through Merit's Professional Learning program and will be held on January 19 and 26, 2011, beginning at 6:00 p.m. EST each day.. Registration is open to all. The course's instructor is Charles Antonelli, a research computing specialist at the University of Michigan who has taught classes on many aspects of computer security. The link for this article located at isgtw is no longer available. . Participate in the Cybersecurity Workshop on Feb. 14 & 21 to gain insights into defending against cyber threats thoroughly and efficiently.. SELinux Security, Online Learning, Cybersecurity, Merit Network, Preventing Attacks. . LinuxSecurity.com Team
Data breaches at U.S. companies attributed to malicious attacks and botnets doubled from 2008 to 2009 and cost substantially more than breaches caused by human negligence or system glitches, according to a new Ponemon survey to be released on Monday.. The incidence of malicious attacks rose from 12 percent in 2008 to 24 percent last year, according to the 2009 Annual Study: U.S. Cost of a Data Breach survey conducted by the Ponemon Institute and sponsored by PGP Corp. The cost per compromised record involving a criminal act averaged $215, about 40 percent higher than breaches from negligence and 30 percent higher than those from glitches, the survey found. For the first time, companies reported in the survey that data-stealing malware caused their breaches. The average organizational cost of a data breach increased nearly 2 percent to $6.75 million in 2009, while the average cost per compromised record per breach rose only $2 to $204. The most expensive breach in the survey was nearly $31 million and the least expensive was $750,000. Meanwhile, 42 percent of all cases reported in the survey involved mistakes made at third parties, such as outsourcers, and 36 percent of the cases involved lost or stolen laptops or other mobile devices. For the study, 45 U.S. companies from 15 different industries were surveyed. The figures include business costs including expenditures for detection, notification, and response, as well as the economic impact of lost or diminished customer trust and confidence as measured by customer turnover rates. The link for this article located at CNET is no longer available. . Cybersecurity incidents surged dramatically between 2010 and 2011, highlighting an escalating danger to businesses along with increased expenses stemming from security violations.. Data Breach Costs, Malicious Attacks Increase, Ponemon Study, Botnets Impact, Security Compromise. . LinuxSecurity.com Team
A publicly available document on how to use how the Internet Control Message Protocol (ICMP) to launch denial-of-service attacks has prompted Cisco Systems to issue an advisory outlining a variety of vulnerable products. . "A document that describes how the ICMP could be used to perform a number of denial-of-service attacks against the Transmission Control Protocol [TCP] has been made publicly available," the San Jose, Calif.-based networking giant said in the advisory. "This document has been published through the Internet Engineering Task Force Internet Draft process, and is entitled 'ICMP Attacks Against TCP.'" The link for this article located at SearchSecurity is no longer available. . Cisco alerts on harmful ICMP exploitation for service disruption, detailing impacted devices.. Cisco Security Advisory, ICMP Threat, Denial of Service Risk. . LinuxSecurity.com Team
A record number of malicious hacking attempts were made this month, and anti-American groups are responsible. So says Mi2g, the London-based security consultancy, which notes that US government on-line computers belonging to the House of Representatives, Department of Agriculture, Department . . . . A record number of malicious hacking attempts were made this month, and anti-American groups are responsible. So says Mi2g, the London-based security consultancy, which notes that US government on-line computers belonging to the House of Representatives, Department of Agriculture, Department of Education, National Park Service, NASA and the US Geological Survey were attacked in September. According to Mi2g, malicious hacker groups such as S4t4n1c_S0uls, USG, WFD, EgyptianHackers, Arab VieruZ, MHA, The Bugz and FBH, as responsible for many anti-Israeli and anti-Indian attacks, as well as the US targets. . A record number of malicious hacking attempts were made this month, and anti-American groups are res. record, number, malicious, hacking, attempts, month, anti-american, groups. . Anthony Pell
The increasing trend towards wireless networks may be opening up corporate networks to the risk of malicious hacking, say experts Corporations across the world are opening their doors to hackers when they set up wireless networks -- or when their . . . . The increasing trend towards wireless networks may be opening up corporate networks to the risk of malicious hacking, say experts Corporations across the world are opening their doors to hackers when they set up wireless networks -- or when their employees set them up behind their backs. "We came across a company with one of these networks. All their source code, everything was available," said Thubten Comberford of White Hat Technologies, a wireless security firm. "This network was beaconing, 'log onto me'...It basically had its Rolls-Royce parked in the driveway, engine running, with a sign saying 'steal me.'" If you think your company doesn't have to worry, you might want to double-check. According to Gartner Dataquest, about 30 percent of all companies with a computer network have some kind of wireless network, either official or rogue. Furthermore, if the business or cafe next door has a wireless network, you might be in trouble. The link for this article located at ZDNet UK is no longer available. . Experts in cybersecurity warn that unguarded wireless networks can inadvertently make corporate infrastructures vulnerable to threats from hackers.. Wireless Networks, Corporate Security, Hacking Risks, Data Protection, Data Breaches. . LinuxSecurity.com Team
Have you ever heard of a Linux vendor that tried to deny a security flaw in their open source product? "A number of Unix vendors have been alerted to a security flaw, but Sun Microsystems is refusing to acknowledge that any problem exists. Six vendors, including IBM, Hewlett-Packard and Sun, have been alerted to a vulnerability that ships with several Unix systems, which could allow a malicious attacker to take control of an affected system.. . .. Have you ever heard of a Linux vendor that tried to deny a security flaw in their open source product? "A number of Unix vendors have been alerted to a security flaw, but Sun Microsystems is refusing to acknowledge that any problem exists. Six vendors, including IBM, Hewlett-Packard and Sun, have been alerted to a vulnerability that ships with several Unix systems, which could allow a malicious attacker to take control of an affected system. Internet Security Systems (ISS) identified the Unix vulnerability about a month ago, and the company warned that the serious weakness could be found in six Unix vendors' systems. ISS and CERT (Computer Emergency Response Team) issued an advisory about the problem. While Caldera, Compaq and IBM said they had a patch for the problem, HP disagreed on the versions of its Unix flavour that needed the patch. The link for this article located at vnunet is no longer available. . Oracle Corporation refutes claims of a critical database vulnerability even after warnings from cybersecurity experts, prompting worries about the adequacy of incident management.. Unix Systems, Vendor Denial, Security Patch, Open Source Issues. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.