ICT Security-Sécurité PC et Internet

US high-tech firms have teamed with German research institute Fraunhofer FOKUS to open a cybersecurity research center in Berlin.

The Cybersecurity Demonstration Center will be used to simulate attacks on IT infrastructure to develop new cyberattack defenses for the security industry.

US firms participating in the center are CSC, HP, EMC/RSA, McAfee, and Sourcefire.

Read more...

Botnets pose a serious threat to your network, your business, your partners and your customers. Botnets rival the power of today’s most powerful cloud computing platforms, but these “dark” clouds are controlled by cybercriminals.

Edward Pearson, aka G-Zero, has been jailed for 26 months at Southwark Crown Court for “making an article for use in fraud and two counts of possession of an article for use in fraud.”...

Hackers have increased their firepower by 30% when they go after websites, according to Imperva’s second Web Application Attack Report (WAAR).

The City College of San Francisco shut down its computer lab after discovering viruses operating for a decade that have harvested personal data on students, faculty, and administrators.

The world is entering a “new and terribly dangerous era” in which cyberwar and information proliferation are converging to threaten critical infrastructure and personal privacy, warns Roger Thompson, chief emerging threat researcher at ICSA Labs.

The US public is more concerned about cybersecurity than terrorism, according to a survey by IT firm Unisys.

Read more...

A study by Aspect Security and Sonatype has found the widespread use of vulnerable open source components to build mission-critical systems at large organizations.

In its latest Hacker Intelligence Initiative report, Imperva analyzes remote and local file inclusion (RFI/LFI) attacks as favored by LulzSec.

===> Imperva suggests a number of ways to mitigate against RFI/LFI attacks. These include finding your own vulnerabilities using the same methods as the hackers: dorking (otherwise known as ‘Google hacking’, which uses the search engines to find hints of possible vulnerabilities); and the use of both commercial and free vulnerability scanners. <===

Also useful would be a web application firewall (WAF) and blacklisting known attacks IPs. The report also notes that the application code can be written to exclude RFI attacks, so detailed code review is advisable.

The Federal Trade Commission (FTC) has issued a detailed report that calls on Congress to consider enacting consumer privacy legislation and on businesses to adopt best practices to protect consumer privacy.

January 28 is the US is Data Privacy Day (it’s also the European Data Protection Day). To mark the event, a new report on users’ attitudes toward and understanding of mobile security issues has been published.

Former US national security officials from the Clinton, Bush, and Obama administrations are pushing the Senate for passage of comprehensive cybersecurity legislation.

Ramnit is not a new worm, as it was first reported back in April 2010. Last summer it evolved into financial malware. Now its developers are specifically targeting Facebook users.