Obama Nominates DHS Intelligence Chief

President Barack Obama has nominated Caryn Wagner to be the Homeland Security Department s intelligence chief, a position that oversees information technology systems designed to share information with federal, state and local officials. If confirmed by the Senate, Wagner would direct DHS Office ...

Real World Security – Bob Maley Interview

In the first installment of a new regular series, Dennis Fisher talks with Bob Maley, the CSO of the Commonwealth of Pennsylvania, about the challenges of running an information security program in a government agency, the effects of the economy on his efforts and the ways in which user education...

Four of the General government, CMS management system vulnerability-vulnerability warning-the black bar safety net

This article has been published in the hack Defense 2 0 0 9. 5 period of,reproduced be sure to keep this information QQ friends of small building to listen to rain to say their school site is using the four through the government grid is set, let me check its safety. Just the hands on work done,...

Experts Call for Change in Thinking on Federal Cybersecurity

The powers that be in Washington are not known for getting things done quickly, and the current power vacuum in information security in the capital is a painful case in point. The well-documented failure to find a coordinator to oversee security for the country is only one piece of the puzzle, an...

Swiss Coder Publicises Government Spy Trojan

A software engineer who created Trojans for the Swiss authorities to intercept Voice-over-IP VoIP phone calls has published the source code to his programs in order to draw attention to the surveillance threat posed by such software. Read the full story idg.no...

Cutting Through The Twitter DDoS Hype

There are a lot of theories flying around about why Twitter and other social media services got knocked offline yesterday. I’ve heard rumors about it being linked to political tension between Georgia and Russia. Others blame Iran for the outages. I’m not a political commentator, therefore I canno...

Threatpost News Wrap #5: Microsoft Vulnerabilities, DDoS Attacks

Threatpost editors Dennis Fisher and Ryan Naraine discuss the recent vulnerabilities in ActiveX controls, Microsoft’s slow response to the video control flaw and the slew of DDoS attacks against U.S. government and commercial sites. Download SHOW NOTES: MyDoom DDoS Attacks Likely Work of...

MyDoom DDoS Attacks Likely Work of Unsophisticated Attackers

The ongoing DDoS attacks that have been targeting a series of U.S. government sites as well as some commercial sites is likely not the work of any government organization and is being executed by an old piece of malware that is designed to ruin files on infected PCs rather than steal data, expert...

DDoS Attacks Cripple U.S. and Korean Sites

From The New York Times Choe Sang-Hun Cyberattacks that have crippled the Web sites of several major American and South Korean government agencies since the July 4th holiday weekend appear to have been launched by a hostile group or government, South Korea’s main government spy agency said on...

DDoS Attacks Ongoing Against FTC, Other Sites

It looks like the distributed denial-of-service attack, once the favorite tactic of script kiddies and professional hackers alike, is coming back into favor. Attackers have been conducting an ongoing DDoS attack against the Federal Trade Commission’s main site, as well as some other government...

Green Dam 3.17 (URL) Remote Buffer Overflow Exploit (xp/sp2)

Exploit for windows platform in category remote exploits ============================================================ Green Dam 3.17 URL Remote Buffer Overflow Exploit xp/sp2 ============================================================ Green Dam remote buffer overflow exploit "Green Dam" is a...

Green Dam 3.17 (Windows XP SP2) - URL Remote Buffer Overflow

Green Dam 3.17 Windows XP SP2 - URL Remote Buffer Overflow Green Dam remote buffer overflow exploit "Green Dam" is a software used for monitoring and anti-pornography, popularizing by Chinese goverment. After July 1st, it will be forced to install on all new Chinese PCs. Now it already has 50...

A cynic's take on cyber czars and 60-day reports

On July 17, 2008, then Senator Barack Obama held a town hall meeting on national security at Purdue University. He and his panel covered issues of nuclear, biological and cyber security. I blogged about the event here and here. As part of his remarks at the event, Senator Obama stated: Every...

30,000 legit websites hit by malware infection

From The Register Dan Goodin A nasty infection that attempts to install a potent malware cocktail on the machines of end users has spread to about 30,000 websites run by businesses, government agencies and other organizations, researchers warned Friday websense.com. The infection sneaks malicious...

Private sector relations should be job one for cyber security czar

Whoever is brave enough to fill the soon-to-be-created cybersecurity czar position will find a rather large pile of challenges waiting. Among them will be dealing with a confused and argumentative Congress, doing a full-scale assessment of the country’s critical infrastructure and reaching out to...

Unfixed XSS vulnerability at www.careersingovernment.com

Security researcher Rohit Bansal, has submitted on 18/05/2009 a cross-site-scripting XSS vulnerability affecting www.careersingovernment.com, which at the time of submission ranked 1960899 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Counterpoint: The need for a cybersecurity czar is real

As everyone prepares to examine the results of the Obama Administration’s cyber-security review, one of the largest issues in play remains to what extent the White House will embrace recommendations to create a Cabinet-level position to address the matter or some role superior to today’s “cyber...

Do we really need a cybersecurity czar?

The back-and-forth in Washington over who should run the cybersecurity program for the federal government has reached a fever pitch, as lawmakers, federal agencies and other interested parties jockey for position and budget dollars in the run-up to the release of the results of the Obama...

Cybercriminals in the cloud

From Forbes Charlotte Dunlap Security breaches continue to plague organizations, causing CIOs to question whether their traditional network security solutions are adequate for protecting against increasingly sophisticated cybercriminals. Recently, it was reported that foreign hackers broke into t...

Audit finds 700 high-risk flaws in air traffic systems

From Computerworld Jaikumar Vijayan A government audit has found more than 760 high-risk vulnerabilities in Web applications used to support Air Traffic Control ATC operations around the country. The flaws, which were discovered in 70 Web applications tied to ATC operations, give attackers a way ...