Security's archives

Security

Stuxnet’s Finnish-Chinese Connection

December 16th 2010 | Posted by admin

I recently wrote a white paper entitled “Dragons, Tigers, Pearls, and Yellowcake” in which I proposed four alternative scenarios for the Stuxnet worm other than the commonly held assumption that it was Israel or the U.S. targeting Iran’s Bushehr or Natanz facilities. During the course of my research for that paper, I uncovered a connection [...]

READ THE FULL ARTICLE >>

Security

The Real Lessons Of Gawker’s Security Mess

December 14th 2010 | Posted by admin

Image by Getty Images North America via @daylife

Gossip site Gawker has experienced a large data breach whose scale fully came to light Sunday. The group that calls itself Gnosis claimed and provided evidence of responsibility, motivated in their words by Gawker’s arrogance in its previous dealings with members of the Internet board 4chan.
While Gawker has [...]

READ THE FULL ARTICLE >>

Security

Should You Pay Hackers To Check Your Security Systems For Flaws?

December 10th 2010 | Posted by admin

Image via Wikipedia

Written by Anthony Haywood
German mail service Deutsche Post recently launched a contest called Security Cup in which teams of hackers compete for money to find the company’s security flaws. Deutsche Post has sifted through applications from “ethical” hackers to select the teams. The contest rules say the teams are not allowed to touch [...]

READ THE FULL ARTICLE >>

Security

Huawei: Cybersecurity Threat Or Cybersecurity Provider?

December 8th 2010 | Posted by admin

Image via Wikipedia

The story of Huawei’s attempts to crack U.S., India, and UK markets–and its repeated failure due to security concerns regarding the Chinese government-linked company–has become even more bizarre with the announcement that Huawei has built a Cyber Security Evaluation Centre (CSEC) in Banbury, UK, apparently with the blessing of John Suffolk, UK Government [...]

READ THE FULL ARTICLE >>

Security

A Call To Arms For Enterprise Mobile Security

November 24th 2010 | Posted by admin

Image via Wikipedia

Mobile devices are, without question, here to stay. Yet because mobile devices are so ubiquitous, we think of them primarily in terms of convenience, ignoring that an unauthorized user on a mobile device can be as dangerous as a prowler sneaking into corporate headquarters after hours.
More than half of mobile device users tap [...]

READ THE FULL ARTICLE >>

Security

Dragons, Tigers, Pearls, and Yellowcake: 4 Stuxnet Targeting Scenarios

November 24th 2010 | Posted by admin

In all of the thousands of words that have been printed about Stuxnet, and the many interviews given, there’s been almost no discussion of alternative targeting scenarios for the Stuxnet worm. In fact, apart from my own work in this area, there’s been essentially two options discussed:  1 – the target was Natanz and/or Bushehr, [...]

READ THE FULL ARTICLE >>

Security

Three Things That Every CEO Should Know About Cyber Security Spending

November 13th 2010 | Posted by admin

Most C-level executives are inundated with far more material then they could ever read, so this post will be short and to the point. If you’re a CEO, CIO, or other C-level executive, here are three things that you need to know to avoid over-spending on cyber security:
ONE: If your enterprise isn’t in energy, defense, [...]

READ THE FULL ARTICLE >>

Security

Time To Rethink Cyber Defense

November 13th 2010 | Posted by admin

“Success depends on sound deductions from a mass of intelligence” -Winston Churchill

New threats and new measures to counter them call for a reorganization of IT security teams so that they can focus on defending the organization from targeted attacks.
It is only ten years since most enterprises established separate security teams to address vulnerabilities and deploy [...]

READ THE FULL ARTICLE >>

Security

British Nuclear Power Plant Goes Dark. Stuxnet Worm To Blame?

November 2nd 2010 | Posted by admin

British Energy, owned by France’s EDF Energy PLC, has reported an “unplanned outage” at its Heysham 1 nuclear power plant yesterday. A company spokesperson told the Associated Press that repairs to one of the reactors are ongoing but didn’t say when the plant was expected to resume operations.
According to Siemens’ website, EDF Energy is a [...]

READ THE FULL ARTICLE >>

Security

You Never Hear The Cyber Bullet That Kills You

October 30th 2010 | Posted by admin

The predictable uproar that occurs when a cyber-related incident is made public (Stuxnet being the latest example) reminds me of the old line about how you shouldn’t worry about the bullets that you hear. It’s the one that you don’t hear that kills you.
Now before I get an outraged response from a handgun or armorer [...]

READ THE FULL ARTICLE >>