IT-Sentinel

> Hackers Hit US Weather Agency in Mystery Attack

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2014-11-13 11:58]

NOAA accused of cover-up as cause of incursion remains unknown.

> Stuxnet Was First Aimed at Five Iranian Industrial Firms

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2014-11-13 10:55]

New revelations claim contractor for the Natanz facility was ‘patient zero.’

[SOURCE] SecurID (Novaclic) [LANGUAGE: FR] [DATE: 2014-10-20 06:45]

Le précédent article consacré à shellshock introduisait le sujet et en donnait l’essentiel à savoir.. Ce second article examine les impacts sur les SI industriels en posant la question de la présence de la faille shellshock pour chaque type d’équipement. [...] Lire la suite

> Company Director Fined Just £500 After Illegal Data Access

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2014-11-13 09:52]

He pretended to be Orange security staff member to get log-ins for customer database.

> Hong Kong Sites Hit by 111% Rise in DDoS Attacks

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2014-11-12 10:28]

Massive October spike coincides with pro-democracy protests

> Shellshock : introduction

[SOURCE] SecurID (Novaclic) [LANGUAGE: FR] [DATE: 2014-10-14 07:18]

Au vu des analyses que l’on peut lire dans la presse, cette faille dépasserait en ampleur la précédente star des medias (Heartbleed dans OpenSSL), et menacerait internet de congestion en cas de ver qui comme Slammer [...] Lire la suite

> State-sponsored Hackers Gear Up for G20

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2014-11-10 14:01]

CrowdStrike warns Chinese attackers and hacktivists may be readying campaigns

> Russian Government ‘Condoned’ Cyber Attacks on West

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2014-11-10 12:54]

Mandiant boss says Kremlin and criminal elements have stepped up activity

> Speaker Lineup for THREADS ’14: Scaling Security

[SOURCE] Trail of Bits [LANGUAGE: EN] [DATE: 2014-10-02 12:00]

For every security engineer you train, there are 20 or more developers writing code with potential vulnerabilities. There’s no human way to keep up. We need to be more effective with less resources. It’s time to make security a fully integrated part of modern software development and operations. It’...

> Rotten Tomato: APT or Common Hack Attempt?

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2014-11-07 21:54]

The attackers are not only using the aging CVE-2012-0158 vulnerability, but the newer CVE-2014-1761 as well, exploiting these to download or drop a Zbot variant.

> Home Depot: Massive Breach Happened Via Third-Party Vendor Credentials

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2014-11-07 21:21]

Home Depot also said that 53 million email addresses were stolen along with the previously disclosed 56 million payment card details.

> (ISC)2 Gives US Veterans a Cyber-leg Up

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2014-11-07 19:19]

The foundation has announced the first round of recipients of the 2014/2015 U.S.A. Cyber Warrior Scholarship.

> Aussie Spies Warn G20 Delegates to Expect Cyber Attacks

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2014-11-07 11:46]

Signals Directorate releases best practice advice on how to stay safe online

> Facebook Reports Increased Law Enforcement Info Requests

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2014-11-06 21:46]

The latest transparency report shows the highest number of requests ever recorded for info on the social network's users.