3924 matches found
Counterpoint: The need for a cybersecurity czar is real
As everyone prepares to examine the results of the Obama Administration’s cyber-security review, one of the largest issues in play remains to what extent the White House will embrace recommendations to create a Cabinet-level position to address the matter or some role superior to today’s “cyber...
Do we really need a cybersecurity czar?
The back-and-forth in Washington over who should run the cybersecurity program for the federal government has reached a fever pitch, as lawmakers, federal agencies and other interested parties jockey for position and budget dollars in the run-up to the release of the results of the Obama...
Cybercriminals in the cloud
From Forbes Charlotte Dunlap Security breaches continue to plague organizations, causing CIOs to question whether their traditional network security solutions are adequate for protecting against increasingly sophisticated cybercriminals. Recently, it was reported that foreign hackers broke into t...
Audit finds 700 high-risk flaws in air traffic systems
From Computerworld Jaikumar Vijayan A government audit has found more than 760 high-risk vulnerabilities in Web applications used to support Air Traffic Control ATC operations around the country. The flaws, which were discovered in 70 Web applications tied to ATC operations, give attackers a way ...
Feds should let private sector lead on cybersecurity
From SearchSecurity.com Eric Ogren The federal government has whipped itself into a frenzy on the issue of cybersecurity recently, as evidenced by the numerous competing bills in the House and Senate and the high-level wrangling over which agency should run cybersecurity. Washington certainly has...
Defense Industrial Base information-sharing program a good start
The recent flood of stories on attacks against the electrical grid, various government agencies and other portions of the critical infrastructure has renewed the calls for improvements in federal cybersecurity and, especially, information sharing between the government and the private sector on...
Microsoft develops secure Windows XP for military
Microsoft has developed an ultra-secure version of Windows XP, with many settings locked down by default. But the hardened OS isn’t for sale to the general public; it’s made specifically for the military. Microsoft built the secure version of XP a few years ago at the direction of the Air Force,...
Can someone be too connected?
There are those that would argue U.S. House Representative Pete Hoekstra is too connected. According to a recent article in a top security trade publication, Rep. Hoekstra sent tweets during his recent trip to Iraq. Some of the tweets included: “Just landed in Baghdad. I believe it may be first...
U.S. Should Play Larger Role in Securing Internet, Hathaway Says
In her much anticipated talk, acting senior director for cyberspace by President Obama, Melissa Hathaway generally reviewed what we already knew, and what has been previously reported when it comes to federal cyber security: The White House should coordinate IT security efforts; private sector...
Bad outweighs the good in Senate cybersecurity bill
The Senate bill introduced earlier this month that would make sweeping changes to the way that information security is practiced both in the federal government and the private sector has a number of good elements, but the flaws in the proposed legislation outweight the benefits, writes Steve...
Pentagon spent $100 million on cybersecurity fixes
From Cnet Elinor Mills The security of U.S. networks is in such disarray that the Pentagon has spent $100 million in the last six months alone to repair damage done by cyber attacks. That huge number presumably includes cleaning up after external attacks, viruses and internal problems. Experts sa...
Cybersecurity bill tries to standardize software security
From Educated Guesswork Eric Rescorla The received wisdom in the security industry is that trying to qualitatively assess the security of a given piece of software is an incredibly difficult task. Some of the sharpest minds in software security–Gary McGraw, Brian Chess and Michael Howard among...
JVN#33846134 Ichitaro series buffer overflow vulnerability
The "Ichitaro" series word processing software, from JustSystems Corporation, contains an issue in the reading of Rich Text Files resulting in a buffer overflow vulnerability. When a user opens a specially crafted file locally or through a website, arbitrary code may be executed with privleges of...
Cybersecurity should return to the White House
A bill introduced in the Senate on Wednesday would make major changes to the way that cybersecurity is handled both within the government and in the private sector, including giving the federal government more control over private networks. But the provision that is getting the most attention, an...
GhostNet shows extent of online spying
As a result of some tremendous work done by researchers at the University of Toronto, we now know that there is an enormous network of compromised machines in more than 100 countries around the world, many of them in government agencies, embassies and other sensitive locations. The network has it...
Google launching members-only security forum
internetnews.com’s Kenneth Corbin has the scoop on plans by Google to launch a members-only security forum for businesses, law enforcement, government agencies and others to combat malware and fraud on the Web. In addition to Google, the Internet Security Community will draw participation from...
CVE-2008-5988
SQL injection vulnerability in scripts/recruitdetails.php in Jadu CMS for Government allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in scripts/recruitdetails.php in Jadu CMS for Government allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5988
The connected documents confirm a concrete vulnerability: CVE-2008-5988 is an SQL injection in Jadu CMS for Government. The vulnerable component is scripts/recruit_details.php, exploitable via the id parameter to execute arbitrary SQL. The NVD entry lists a CVSS v2 base score of 7.5 ( HIGH ) with...
