News, analysis and context on enterprise technology for the CTO
Editor's note: the post below by Anup Ghosh first appeared on the Invincea blog and is republished here with the author's permission. bg Prediction 2012: Hackers Will Find New Fertile Ground to Pharm Posted by Anup Ghosh on November 29, 2011 Invincea is on record that the year 2011 will go down as the year the fundamental underpinnings of Internet security fell. In fact, it is the bloodiest year on record for Internet security. Not only did we … [Read more...]
2011 was a watershed year for cybersecurity, but it was evolutionary rather than revolutionary. Political hacking, industrial skullduggery, drones gone wild, and mobile malware all made 2011 a year, to borrow CrucialPoint amigo Matt Devost's phrase (since I'm already borrowing his image for the post graphic, why not?), to live cyberdangerously. The Rise of the Political Hacker Anonymous was, in many ways, the biggest cybersecurity story of 2011. … [Read more...]
A very interesting (OK, it was pretty cool) vulnerability in the TCP stack of Windows Vista and above (including 32-bit and 64-bit versions and Windows Server 2008) was recently announced and patched. This vulnerability is of particular note not just because of the wide range of products that it affected, but because of how the vulnerability worked. Microsoft published this in its advisory on the vulnerability: "A remote code execution vulnerability … [Read more...]
Everything that you need to know about Duqu: Duqu was reported to antivirus vendors around the 14th of October, 2011, but it has been in the wild since November of 2010. Since then there have been varients (updated copies with additional features or upgrades to code) released. It has been billed as the next Stuxnet, the son of Stuxnet, or a Stuxnet clone. In reality, Duqu is actually more like a payload of Stuxnet rather than the entire attack … [Read more...]
As of yet, there is no definitive narrative of the virus that hit the U.S. drone fleet at Creech Air Force Base in Nevada this September. Original reports stated that drone cockpits had been infected with a keylogger virus and, while there was no indication that classified information had been stolen or that missions had been compromised, the virus has proven tenacious, resisting efforts to disinfect machines and forcing the Air Force to wipe … [Read more...]
Most of what we see in day-to-day cybersecurity is not cyberwar, or the perennial threat of the 'digital Pearl Harbor.' Crime, espionage, political vandalism, and military "long-range cyber-reconaissance"--rather than kinetic targeting that kills, damages, or disables--are more mundane, day-to-day concerns. National Defense University's Samuel Liles does make a persuasive case that much of cyberwar exists mainly on the "low-intensity warfare" aspect … [Read more...]
The following article by renowned security capability developer Dr. Anup Ghosh was was originally posted at the Invincea blog and is reposted here with the author's permission. ============= Question: what is the most significant cyber event of 2010? Answer: Stuxnet. While security analysts continue to marvel over Stuxnet’s capabilities, one disturbing aspect to Stuxnet is current defenses would not defend against the next Stuxnet type threat. … [Read more...]