Cyber Security News of the Week, May 27, 2011

Information at Risk

Small firms learn size doesn’t matter to hackers: Dr. Stahl is quoted in this story about the cyber security risks threatening small and medium sized businesses. The La Times, May 23, 2011

Bank of America data leak destroys trust: Andrew Goldstein has been a Bank of America customer for more than four decades. He’s grown up with the bank, trusted it, relied on it to be there for him through thick and thin. So it was with more than a little shock that Goldstein, 60, learned the other day that a BofA employee apparently leaked confidential information about his and hundreds of other customers’ accounts to scammers, resulting in more than $10 million in losses. The LA Times, May 24, 2011

LinkedIn site has security vulnerabilities-expert: (Reuters) – LinkedIn’s professional networking website has security flaws that makes users’ accounts vulnerable to attack by hackers who could break in without ever needing passwords, according to a security researcher who identified the problem. Reuters, May 23, 2011

Phishing Attacks Keep Proliferating: How to Recognize Them: In light of recent data breaches, compromised companies and security experts have warned users to be vigilant about phishing attacks as cyber-thieves try to trick users into giving up sensitive information, such as bank account numbers, log-in credentials and credit card numbers. eWeek, May 23, 2011

Insider data theft costs Bank of America $10 million: A Bank of America insider who sold customer data to criminals cost the bank at least US$10 million in losses. Computer World, May 25, 2011

Latest hack on PBS news site is the best hack ever: Check off the main news website for the Public Broadcasting System, PBS NewsHour, as the latest victim of a hacking attempt that has interrupted the site’s main activity. Media Beat, May 29, 2011

Internet Explorer Flaw Lets Hackers Into the Cookie Jar: Security researcher Rosario Valotta has apparently discovered a vulnerability in Microsoft’s Internet Explorer that could be used to install malware and forge clicks. The so-called cookiejacking attack involves figuring out the victim’s Windows username, knowing which version of Windows the victim is running and tricking the user into selecting the entire content of the stolen cookie. Tech News World, May 27, 2011

Data Breach at Security Firm Linked to Attack on Lockheed: Lockheed Martin, the nation’s largest military contractor, has battled disruptions in its computer networks this week that might be tied to a hacking attack on a vendor that supplies coded security tokens to millions of users, security officials said on Friday. New York Times, May 27, 2011

Computer hackers breach Honda customer databank: The personal information of hundreds of thousands of Honda and Acura customers may have been compromised by a security breach of the automaker’s computer systems. Ottawa Citizen, May 27, 2011

Securing the Future

Senate debates president’s power during cyber-attack: Senators squared off with Obama administration officials Monday about plans to give the president emergency powers to protect vital U.S. electronic networks from attacks by hackers, cyberterrorists and foreign governments. The Washington Times, May 23, 2011

‘Digital ants’ check networks for viruses: Wake Forest University professor Errin Fulp is training an army of ‘digital ants’ designed to patrol the power grid and protect it from viruses. TG Daily, May 30, 2011

The U.S. Draws a Line in the Silicon: In the days immediately after 9/11, the U.S. sent tanks to surround the Federal Reserve Bank of New York and protect it from potential threats. In its basement is the largest depository of gold in the world, worth some $300 billion, almost all owned by foreign governments. The Fed’s gold has only ever been stolen in the movies. The Wall Street Journal, May 23, 2011

Mobile Security

Russian Company Cracks IOS 4 Hardware Encryption: Having cracked Apple iPhone backups last year, Russian security company ElcomSoft appears to have found a reliable way to beat the layered encryption system used to secure data held on the smartphone itself. PC World, May 25, 2011

Google moves fast to plug Android Wi-Fi data leaks: Google today confirmed that it’s starting to roll out a server-side patch for a security vulnerability in most Android phones that could let hackers snatch important credentials at public Wi-Fi hotspots. Mac Video, May 24, 2011