PR's Tumblrdome
Sweet Seals For You, Always
trying on a metaphor
Cosimo Galluzzi
dirt enthusiast
Kaledo Art
oozey mess
Three Goblin Art
★
almost home
Andulka
Not today Justin
sheepfilms
Sade Olutola
shark vs the universe
h
styofa doing anything
pixel skylines
"I'm Dorothy Gale from Kansas"
seen from United States
seen from Bosnia & Herzegovina
seen from Singapore
seen from United States
seen from United States
seen from United States
seen from France
seen from Australia
seen from Türkiye
seen from Poland
seen from United States
seen from Germany
seen from Germany
seen from Singapore
seen from Australia
seen from Japan
seen from United States
seen from South Korea
seen from Philippines
seen from Singapore
@seccon-blog
Maybe I’ll start doing an ‘Infographic Friday’ to go along with Lori’s F5 Friday. This one comes to us from Rasmussen College’s School of Technology and Design Cyber Security Program and shows the online risks and offers some good tips on how to better protect your computer and avoid being a victim of cybercrime.
Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
A Computer Infection that Can Never Be Cured
A hacker demonstrates that code can be hidden inside a new computer to put it forever under remote control, even after upgrades to the hard drive or operating system.
Read more
By no means bulletproof, but these steps are a start (hence, “basic”)… What else do you do to protect your computer and information online?
Tässä hyödyllinen lista perustoimenpiteistä tietokoneen suojaamiseksi verkossa.
In the computer industry, there are several myths that have been around for many years. Two of the most popular concern Apple computers. The first myth is that Apple computers cannot get viruses, and the second myth is that Apple computers cannot be hacked. These myths have been around so long...
Much ado was made when security experts found Stuxnet wreaking havoc, but it’s looking as though the malware was just a prelude to a much more elaborate attack that’s plaguing the Middle East. Flame, a backdoor Windows trojan, doesn’t just sniff and steal nearby network traffic info — it...
Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
DDoS Attacks on Financial Services Firms Explode
Somebody is going after the Web infrastructure of financial services firms in a big way. Distributed denial of service (DDoS) attacks aimed at such companies serviced by Prolexic increased threefold in the first quarter of 2012, the security firm said Wednesday.
Prolexic, which specializes in DDoS protection services, said it “mitigated more attack traffic” in the first three months of this year than it had in all of 2011. In addition to the massive spike in attacks aimed at financial services clients from the final quarter of last year, Prolexic said it had seen a 3,000 percent sequential increase in malicious packet traffic.
The security firm, which released its Quarterly Global DDoS Attack Report this week, said the first quarter had seen a 25 percent increase in the total number of DDoS attacks from the same period a year ago and a 25 percent year-over-year increase in application layer attacks.
“This quarter was characterized by extremely high volumes of malicious traffic directed at our financial services clients,” Neal Quinn, Prolexic’s vice president of operations, said in a statement. “We expect other verticals beyond financial services, gaming, and gambling to be on the receiving end of these massive attack volumes as the year progresses.”
The raw numbers: In the first quarter of 2011, Prolexic identified and mitigated 168 trillion bits of data and 14 billion packets of malicious traffic targeting its financial services clients, but saw those numbers explode in the first three months of 2012 to 5.7 quadrillion bits of data and 1.1 trillion malicious packets.
The security firm said attacks on financial clients were generally shorter in the more recent quarter, going from an average of 65 hours in the 2011 period to 28.5 hours in the first quarter of 2012. Prolexic also identified a switch in tactics by attackers from UDP floods to GET and SYN floods.
The main source country for DDoS attacks remained China, according to the security firm, but the U.S. and Russia have “moved up in the rankings.”
Prolexic predicted that DDoS attacks would continue to rise and that the trends it was seeing would continue to play out. That means that we should expect shorter attack durations with higher traffic volumes, the company said, and that DDoS attacks targeting Layer 7 will continue to rise (although Prolexic stressed that “[i]nfrastructure layer attacks targeting Layer 3 and Layer 4 continue to be the choice of attackers”).
The security firm also advised relevant parties to be on the lookout for SYN Floods, which have emerged at “the go-to attack type” for DDoS perpetrators.
Saab Systems – Anticipating Tomorrow
Saab Systems is a Finnish system supplier specialising in innovative and integrated data-centric defence and security solutions. The company’s solutions enable accurate detection, comprehensive situation awareness and efficient response and protection capabilities for ensuring the security and safety of society and its members in all global common spaces – land, sea, air and the cyberspace.
Our mission is to create advanced solutions that solve tomorrow’s needs. We take our role in society very seriously. Our vision is that everybody should be able to feel safe and we seek ways to envision what the future may bring. Looking ahead and being prepared can help eliminate problems and reduce emerging new threats.
This is Apple’s third software update to Java in nine days ; however, this latest update release is the first one actually designed to detect and remove the Flashback trojan from Mac laptop devices, as well as patch up the Java vulnerabilities of which the trojan took advantage....
Apple on korjannut Maceissä esiintyneen Flashback-troijalaisen päivityksessä, joka tunnistaa ja poistaa tämän kyseisen malware-ohjelmiston. Mac-troijalaisten määrä tulee luultavasti kasvamaan tulevaisuudessa OS X-pohjaisten tietokoneiden ja iOS-laitteiden määrän kasvaessa.
Symantec honey stick -projketissa testattiin mitä "kadonneille" älypuhelimille tapahtuu. Suurimmissa osissa tapauksista puhelimessa olevaa sensistiivistä henkilökohtaista dataa yritettiin hyödyntää urkinnassa. Raportti saatavissa PDF-muodossa.
From the executive summary:
“The Symantec Smartphone Honey Stick Project is an experiment involving 50 “lost” smartphones. Before the smartphones were intentionally lost, a collection of simulated corporate and personal data was placed on them, along with the capability to remotely monitor what happened to them once they were found. Chief among the findings is that there is a very high likelihood attempts to access both sensitive personal- and business-related information will be made if a lost and unprotected smartphone is found by a stranger. Secondarily, the owner of a lost smartphone should not assume the finder of their device will attempt to make contact with them. Even when contact is made, the owner of the device should not assume their personal- or business-related information has not been violated.”
Älä vähättele kyberuhkaa
Antti Larsio, Microsoftin tietoturvajohtaja, kirjoittaa Tietoviikon blogissa kyberuhkista ja Suomen valmistautumisesta kyberpuolustukseen. Tässä oiva kirjoitus kaikille kyberturvallisuudesta kiinnostuneille:
Tietoviikko: Älä vähättele kyberuhkaa
Monet pitävät kyberuhkita suojautumista palomuurin ja virustorjunnan päivittämisenä, mutta totuus nykymaailmassa on toinen. Sähköinen identiteetti ja informaation, järjestelmien ja kommunikaation konvergoituminen sähköisille alustoille tulee muuttamaan myös käsityksemme kyberturvallisuudesta. Yhä useammat laitteet, sovellukset ja järjestelmät ovat yhteydessä internetiin sekä muihin erillisiin verkkoihin aina kotona löytyvistä kodinohjausjärjestelmistä suurempiin kokonaisuuksiin, kuten SmartGridiin. Kyberavaruuden rooli puolustuksen ja turvallisuuden kannalta tulee väistämättä kasvamaan tulevina vuosikymmeninä - oikea aika aloittaa strategian luominen on siis nyt.
Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
Verizon on julkaissut oman raporttinsa vuoden 2012 merkittävimmistä tietoturvamurroista. Raportti on erittäin kattava ja tarjoaa monipuolisen näkemyksen ajankohtaisiin tietomurtoihin mm. haktivistien toimesta. Suosittelemme luettavaksi!
Mainline cybercriminals continued to automate and streamline their method du jour of high-volume, low-risk attacks against weaker targets. Much less frequent, but arguably more damaging, were continued attacks targeting trade secrets, classified information, and other intellectual property. We certainly encountered many faces, varied tactics, and diverse motives in the past year, and in many ways, the 2012 Data Breach Investigations Report (DBIR) is a recounting of the many facets of corporate data theft.
855 incidents, 174 million compromised records.
This year our DBIR includes more incidents, derived from more contributors, and represents a broader and more diverse geographical scope. The number of compromised records across these incidents skyrocketed back up to 174 million after reaching an all-time low (or high, depending on your point of view) in last year’s report of four million. In fact, 2011 boasts the second-highest data loss total since we started keeping track in 2004.
The Pentagon left no room for argument last year when it declared cyber attacks a potential act of war. “If you shut down our power grid, maybe we will put a missile down one of your smokestacks,” a military official reportedly remarked. Yikes. Before we start bombing chimneys, however,...
USA:n puolustusministeriö valmistelee suuntaviivoja sille, kuinka kyberhyökkäyksissä ja kybersodassa voidaan toimia.
Malware-ohjelmistojen luomat takaportit mahdollistavat pääsyn järjestelmiin vaihtoehtosia reittejä pitkin ja erilaiset hakkerointikeinot taas antavat hyökkääjälle mahdollisuuden kiertää tunnistautumismekanismit. Nämä menetelmät ovat säilyttäneet suosionsa kyberrikollisten keskuudessa.
Mielenkiintoinen artikkeli tietoturvahyökkäyksistä - mukana myös kodissa toimivat SCADA-tyyppiset automaatioärjestelmät, joiden tietoturva on usein puutteellista.
SCADA at home
The popularity of home automation systems is exploding but the technology lacks security. Potential hacks could impact a range of wireless technologies from physical locks on buildings to energy smart meters, and it has Ullrich concerned.
Mielenkiintoinen raportti, joka käsittelee mobiililaitteisiin kohdistuvia tietoturvauhkia. Malware-ohjelmistot ovat yleistyneet etenkin Googlen Android -alustalla ja sovelluskaupat mahdollistavat helpon jakelumekanismin.
There is more mobile malware than ever before.
In 2011, there was a record number of mobile malware attacks –particularly on the Google Android platform. The combination of Google Android’s dominant market share and the lack of control over the applications appearing in the various Android application stores created a perfect storm,giving malware developers the means and incentive to focus on the platform.
Mobile malware has gotten smarter. Malicious actors continue to hone their craft by finding new ways to exploit vulnerabilities and human behavior for profit across all mobile platforms and devices. In addition, the growing focus on security by researchers demonstrates the maturation of mobile security as an issue of concern for the business community as a whole
There is a low barrier to entry. Applications are turning out to be the “killer app” for hackers — and application stores are fast becoming the prime delivery mechanism for infected applications. Mobile users are downloading applications more than ever before. As we have seen a boom in the number of application developers, we have also seen a flood in the number of attackers. Juniper MTC data shows an evolution from more sophisticated, complex and deep attacks to attacks that are lightweight, fast, and application-based.
Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
