Despite the fact that so many aspects of a modern society rely on the proper and uninterrupted operations of critical infrastructure, security flaws across many industrial control systems (ICSs) are largely vulnerable to cyber-attacks.. An attack on industrial organizations' networks could result in major disruptions, yet a new research report from Positive Technologies found that configuration flaws can allow an attacker to gain control over servers with relative ease. The link for this article located at InfoSecurity is no longer available. . A breach in the digital frameworks of manufacturing entities may lead to significant interruptions, even with the present vulnerabilities identified.. Industrial Control System Risks, Network Security Flaws, Cyber Attack Vulnerabilities. . Brittany Day
In a press release today, Redspin, an independent auditing firm based in Carpinteria, CA, suggests that the recent mandated upgrades of ATMs to support triple DES encryption of PINs has introduced new vulnerabilities into the ATM network environment - because of other changes that were typically made concurrently with the triple DES upgrades. . The link for this article located at Payments News is no longer available. . The link for this article located at Payments News is no longer available. . press, release, today, redspin, independent, auditing, based, carpinteria, suggests. . LinuxSecurity.com Team
They have their networks locked tight, their data hidden behind firewalls and their e-mail scanned by virus protection software. But too many IT managers and security officers overlook a crucial security risk: the telephone system. As voice over IP (VoIP) setups . . . . They have their networks locked tight, their data hidden behind firewalls and their e-mail scanned by virus protection software. But too many IT managers and security officers overlook a crucial security risk: the telephone system. As voice over IP (VoIP) setups become more common within enterprises, the risk of compromise of phone services is on the rise. "When it comes to telephone systems, we're so comfortable that when a security breach occurs, it's like being punched by someone you love -- you're just not expecting it," Jim Puchbauer, director of marketing at AltiGen Communications, told the E-Commerce Times. The link for this article located at eCommerceTimes is no longer available. . Explore the concealed security risks present in VoIP frameworks relied upon by contemporary businesses, along with strategies to safeguard against these threats.. VoIP Security, Telephone Systems, Network Protection, Communication Risks. . Anthony Pell
A vulnerability in the most widely used FTP server program for Linux has left numerous sites open to online attackers, a situation worsened when Red Hat mistakenly released information on the flaw early, leaving other Linux companies scrambling to get a fix out.. . .. A vulnerability in the most widely used FTP server program for Linux has left numerous sites open to online attackers, a situation worsened when Red Hat mistakenly released information on the flaw early, leaving other Linux companies scrambling to get a fix out. "Other vendors didn't have a patch," said Alfred Huger, vice president of engineering for network security information provider SecurityFocus. The company has been working with vendors to fix the vulnerability after computer security company Core Security Technologies alerted them to the problem Nov. 14. "The fix is not rocket science," Huger said. "But we weren't working at a breakneck pace to get a patch out, because everyone was working together." The link for this article located at ZDNet is no longer available. . A critical vulnerability in a popular FTP daemon for Unix systems exposes numerous servers to potential cyber threats.. Linux FTP Security, Online Threats, Red Hat Risks. . LinuxSecurity.com Team
Yesterday, dsniff 2.3 was released. Why is this important, you ask? dsniff 2.3 allows you to exploit several fundamental flaws in two extremely popular encryption protocols, SSL and SSH. SSL and SSH are used to protect a large amount . . . . Yesterday, dsniff 2.3 was released. Why is this important, you ask? dsniff 2.3 allows you to exploit several fundamental flaws in two extremely popular encryption protocols, SSL and SSH. SSL and SSH are used to protect a large amount of network traffic, from financial transactions with online banks and stock trading sites to network administrator access to secured hosts holding extremely sensitive data. Could this singal the end of SSH or SSL? The link for this article located at SecurityPortal is no longer available. . Dsniff version 2.3 reveals significant vulnerabilities in both SSL and SSH communications, endangering overall cybersecurity. Delve into the consequences!. Encryption Protocols,Dsniff 2.3,SSL Security,Network Risks. . LinuxSecurity.com Team
Employees are the biggest threat to network security - and they don't even know it. Unauthorised equipment attached to a company network can, according to Robin Dahlberg, UK MD of Internet Security Systems, compromise the best efforts of a network manager . . . . Employees are the biggest threat to network security - and they don't even know it. Unauthorised equipment attached to a company network can, according to Robin Dahlberg, UK MD of Internet Security Systems, compromise the best efforts of a network manager to secure the system by creating a "backdoor" into the network. Protecting a company from external attacks from "recreational hackers" was almost irrelevant if a system was not properly secured internally, he says. "It is like locking all your doors but leaving the windows open." The link for this article located at The Register is no longer available. The link for this article located at The Register is no longer available. . Workers inadvertently threaten cyber defenses by linking unapproved gadgets, establishing possible access points.. Employee Threats, Unauthorized Devices, Cybersecurity Awareness, Network Security Risks. . Anthony Pell
Former CIA director R. James Woolsey, speaking on a panel here Wednesday, warned that international spies and terrorists would soon wield a more purposeful and dangerous breed of computer virus than ever seen before. Unlike Melissa, CIH or the recent . . .. Former CIA director R. James Woolsey, speaking on a panel here Wednesday, warned that international spies and terrorists would soon wield a more purposeful and dangerous breed of computer virus than ever seen before. Unlike Melissa, CIH or the recent ILOVEYOU virus, these viruses would not be destructive, but "instructive," Woolsey said. As described by Woolsey, an "instructive" virus would spread covertly and use minimal system and network resources as it instructs computers to perform certain functions undetected, like stealing particular secrets from specific targets. Woolsey gave a law firm with a sensitive case as an example victim. "They get a virus into the local area network that says, 'transfer at midnight, Sunday night, all files on such-and-such a case to this particular outside computer,'" Woolsey explained. "If you've got an instructive virus in your system that is reading out your files to one of your competitors, that may have been going on for some time." The link for this article located at SecurityFocus --Â Â is no longer available. . Ex-CIA chief R. James Woolsey alerts us to emerging stealthy malware capable of pilfering sensitive information without notice.. Spy Malware, Cyber Threats, Instructive Viruses, Information Security, James Woolsey. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.