MITRE Malicious Insiders

MITRE Malicious Insiders:



Malicious insiders, who have legitimate access to an organization's network, pose a serious threat to an organization.

HIMSS Security Survey | Privacy & Security | HIMSS

... the greatest "security threat motivator" they encounter is that of healthcare workers potentially snooping into the electronic health information of friends, neighbors, spouses or co-workers.

http://www.himss.org/ResourceLibrary/genResourceDetailPDF.aspx?ItemNumber=28270

SecureScan: Free Cloud-based Vulnerability Scanner | Tripwire

More connected devices mean more opportunity for compromise. Tripwire® SecureScan makes it easy for smaller organizations to know exactly which devices are on their networks.

http://www.tripwire.com/securescan/

Schneier on Security: Regin Malware

https://www.schneier.com/blog/archives/2014/12/corporate_abuse.html

"...We want, and need, our antivirus companies to tell us everything they can about these threats as soon as they know them, and not wait until the release of a political story makes it impossible for them to remain silent."

Links Found between NSA, Regin Spy tool and QWERTY Keylogger in NSA

"Regin" is a highly advanced, sophisticated piece of malware the researchers believe was developed by nation state ...

http://www.wikileaks-forum.com/nsa/332/links-found-between-nsa-regin-spy-tool-and-qwerty-keylogger/33070/

From My iPhone

check-and-secure | powered by cyscon GmbH!

check-and-secure | powered by cyscon GmbH!: This web service is a free online tool provided by cyscon GmbH and Vodafone. Based on the results we lead you through a variety of checks step by step.

Spam Uses Default Passwords to Hack Routers — Krebs on Security

If successful, the attacker's script would modify the domain name system (DNS) settings on the victim's router, adding the attacker's own DNS server as the primary server while leaving the secondary setting as-is. 

http://krebsonsecurity.com/2015/02/spam-uses-default-passwords-to-hack-routers/

Transpacific Airline Settlement > mainpage > Claim Form

Transpacific Airline Settlement > mainpage > Claim Form:



if you bought a ticket for air travel from one of the Defendants or Co-Conspirators; the ticket included at least one flight segment between the U.S. and Asia or the U.S. and Oceania (Australia, New Zealand or the Pacific Islands); your purchase was made between January 1, 2000 and the Effective Date*, and you were not reimbursed for your purchase by someone else.

Everyday Risk Assessment

Everyday Risk Assessment: This 30-minute lesson is designed to introduce you to risk management concepts and practices at the U.S. Customs Service.

USATODAY.com - Schwarzenegger took sexual harassment course

USATODAY.com - Schwarzenegger took sexual harassment course: Gov. Arnold Schwarzenegger, whose campaign was dogged by allegations of sexual misconduct, volunteered to take a two-hour course about preventing sexual harassment earlier this year.

Calif. woman sues Lenovo and Superfish - SC Magazine

Calif. woman sues Lenovo and Superfish - SC Magazine: "A California woman is suing both Lenovo and Superfish, after the PC maker was found shipping laptops to consumers with Superfish adware pre-installed."



'via Blog this'

Internet of things starter kit unveiled by ARM and IBM - BBC News

These two components fit together and can be attached to the net via an ethernet cable and to other computer equipment via a USB link.

http://m.bbc.com/news/technology-31584546

Bing Ads Revenue and Conversion Tracking? : Magento

Bing Ads Revenue and Conversion Tracking? : Magento: "that is the code that goes on every page."



'via Blog this'

“SSL hijacker” behind Superfish debacle imperils large number of users | Ars Technica

“SSL hijacker” behind Superfish debacle imperils large number of users | Ars Technica: "In fairness to Komodia and Superfish, many applications—some provided by Microsoft or trusted security companies—install custom root certificates on end user machines."



'via Blog this'

Our passports don’t define us: Taiye Selasi live at TEDGlobal 2014 | TED Blog

"History is real, and cultures are real, but countries are invented."

Taiye Selasi

http://blog.ted.com/2014/10/07/our-passports-dont-define-us-taiye-selasi-live-at-tedglobal-2014/

From My iPhone

Businesses Need Rapid Incident Detection & Response- Why Obama’s Cybersecurity Proposal Misses the Mark | InfoSec Insights

Businesses Need Rapid Incident Detection & Response- Why Obama’s Cybersecurity Proposal Misses the Mark | InfoSec Insights: "the 30-day window is nothing more than rhetoric trying to mask the underlying problem- lack of proper investment in Intel-Detection-Response (IDR) capabilities."



'via Blog this'

A Hacker Personality Quadrant - The Security Skeptic

A Hacker Personality Quadrant - The Security Skeptic: ""Hacking is a late-modern transgressive craft.""



'via Blog this'

Anthem Hackers Tried To Breach System As Early As December

Anthem Hackers Tried To Breach System As Early As December: "Investigators now believe the hackers somehow compromised the credentials of five different tech workers, possibly through some kind of "phishing" scheme that could have tricked a worker into unknowingly revealing a password or downloading malicious software."



'via Blog this'

Superfish Uninstall Instructions - Lenovo Support (US)

Superfish Uninstall Instructions - Lenovo Support (US): "Please download and run the Automatic Removal tool executable to ensure complete removal of Superfish and Certificates for all major browsers."



'via Blog this'

LastPass - LastPass Superfish Checker

LastPass - LastPass Superfish Checker: News broke on Wednesday, February 18th that Lenovo devices had shipped with adware that may compromise secure connections to websites and leave sensitive consumer information exposed

Check if you trust the Superfish CA

Check if you trust the Superfish CA: Check below. If you see an image with "YES" written on it,
you have a problem. Do the test with all browsers installed.

Un experto afirma que los ataques de los hackers precisan de control

Un experto afirma que los ataques de los hackers precisan de control / Sputnik Mundo: Los ataques de los hackers contra las infraestructuras de defensa estatal, incluyendo las instituciones militares, se han tornado tan efectivos, que los programas da�inos han de ser controlados en modo especial, al mismo nivel que las armas de exterminio en masa, declar�Arti�m Bar�nov, analista de virus de ESET Russia.

Hacker Says He Was Hit With 44 Felonies After He Declined to Work With FBI

"Fundamentally this represents the FBI trying to recruit by indictment."

http://www.slate.com/blogs/future_tense/2015/02/19/hacker_says_he_was_hit_with_44_felonies_after_he_declined_to_work_with_fbi.html


From My iPhone

U.S. Terrorism Agency to Tap a Vast Database of Citizens - WSJ

U.S. Terrorism Agency to Tap a Vast Database of Citizens - WSJ:



December 13, 2012:



"Now, NCTC can copy entire government databases—flight records, casino-employee lists, the names of Americans hosting foreign-exchange students and many others. The agency has new authority to keep data about innocent U.S. citizens for up to five years, and to analyze it for suspicious patterns of behavior. Previously, both were prohibited. Data about Americans "reasonably believed to constitute terrorism information" may be permanently retained."

Russian national accused in largest-ever hacking scheme due in federal court today | NJ.com

Nice!

http://www.nj.com/news/index.ssf/2015/02/russian_national_accused_in_largest-ever_hacking_s.html


From My iPhone

Ringleader in $5 million ATM "skimming" scheme pleads guilty | NJ.com

Vintila and his conspirators developed card-reader devices capable of reading bank account information from the cards of customers while they were making transactions

http://www.nj.com/news/index.ssf/2015/01/ringleader_in_5_million_atm_skimming_scheme_pleads.html#incart_related_stories


From My iPhone

contagio: Equation samples - from the Kaspersky Report and additional

contagio: Equation samples - from the Kaspersky Report and additional: "Here are a few samples from the report by Kaspersky Lab "Equation: The Death Star of Malware Galaxy" and additional samples of the same family. The full list is below"



'via Blog this'

Cybersecurity Sharing: The Latest Fad or a Real Security Breakthrough?

Cybersecurity Sharing: The Latest Fad or a Real Security Breakthrough?:



"Unless the stated goal is to identify bad actors more swiftly, and sanction them with greater precision and immediacy, we’re not going to deter the kind of attacks that provoked this new initiative."



'via Blog this'

Report Connects Elite Hacking Group to NSA-Linked Cyberweapons | SecurityWeek.Com

Report Connects Elite Hacking Group to NSA-Linked Cyberweapons | SecurityWeek.Com: "the Equation Group has infected thousands, “even tens of thousands,” of victims, in more than 30 countries worldwide, "



'via Blog this'

9 Confessions From A Former Enterprise Rental Salesman – Consumerist

9 Confessions From A Former Enterprise Rental Salesman – Consumerist: 9 tips, 5 pages of insider info about how the car rental game really works.

Cyber-security experts judge '$1bn bank hack' report - BBC News

But security experts are split over the severity of the alleged breaches, and on how much cash was stolen.

http://m.bbc.com/news/technology-31487258


From My iPhone

Maikel Zweerink / WhatsSpy-Public | GitLab

Maikel Zweerink / WhatsSpy-Public | GitLab: "WhatsSpy Public (not to confuse with WhatsSpy) is an web-oriented application that tracks every move of whoever you like to follow. This application is setup as an Proof of Concept that WhatsApp is broken in terms of privacy."



'via Blog this'

WhatDaHell, WhatsApp? Student claims 'stalker' tool shows security flaws • The Register

WhatDaHell, WhatsApp? Student claims 'stalker' tool shows security flaws • The Register: "A newly discovered security flaw in WhatsApp allows anyone to track a user’s status, regardless of their privacy settings, a student claims."



'via Blog this'

How to Protect Your Business Against Fraud | Inc.com

How to Protect Your Business Against Fraud | Inc.com: three-fourths of the crimes against businesses in the U.S. were carried out by insiders.

Security services capable of bypassing encryption, draft code reveals | UK news | The Guardian

Security services capable of bypassing encryption, draft code reveals | UK news | The Guardian: "The publication of the draft code follows David Cameron’s speech last month in which he pledged to break into encryption and ensure there was no “safe space” for terrorists or serious criminals which could not be monitored online by the security services with a ministerial warrant, effectively spelling out how it might be done."



'via Blog this'

Forbes, Jason Hope Point to Big Data Mistake in Industrial IoT

Forbes, Jason Hope Point to Big Data Mistake in Industrial IoT: ""The key will be to gain access to this older data, so predictive apps and devices can have a full range of data with which to make predictions.""



'via Blog this'

LexisNexis, Retail Workers Get Nod For $2.38M Settlement - Law360

LexisNexis, Retail Workers Get Nod For $2.38M Settlement - Law360: "A Pennsylvania federal judge has given preliminary approval to a $2.38 million settlement in a proposed class action claiming LexisNexis Risk Solutions Inc. illegally distributed damaging information about retail workers to current and potential employers.
Under the settlement, LexisNexis has suspended its Esteem database"



'via Blog this'

Jamie Bartlett: The coming online privacy revolution - Index on Censorship | Index on Censorship

Jamie Bartlett: The coming online privacy revolution - Index on Censorship | Index on Censorship: "This trend towards decentralised, encrypted systems has become an important aspect of the current crypto-wars."



'via Blog this'

How the NSA is improving security for everyone | Network World

NSA is also expected to secure and protect sensitive information, and as part of that role NSA security experts have launched a program to integrate more commercial off-the-shelf products.

http://www.networkworld.com/article/2880477/security0/how-the-nsa-is-improving-security-for-everyone.html


From My iPhone

Groove Armada - Wikipedia, the free encyclopedia

Groove Armada are an electronic music duo from London, England

Edge Hill

http://en.m.wikipedia.org/wiki/Groove_Armada

Jeremy Dean's Dare Not Walk Alone at the Dikeou Collection

Jeremy Dean's Dare Not Walk Alone at the Dikeou Collection:



Five years in the making, DNWA offers an insight into the artist's engagement with the various socioeconomic and political challenges that have been at the crux of his visual art practice over the last decade.

David B. Smith Gallery | Contemporary Art Gallery in Denver | Constructed Histories

David B. Smith Gallery | Contemporary Art Gallery in Denver | Constructed Histories: Constructed Histories

Press Release

Opening reception on Friday, February 13, 7-9pm

Common Sense Guide to Mitigating Insider Threats, 4th Edition

Common Sense Guide to Mitigating Insider Threats, 4th Edition: This fourth edition of the Common Sense Guide to Mitigating Insider Threats provides the most current recommendations of the CERT� Program (part of Carnegie Mellon University's Software Engineering Institute), based on an expanded database of more than 700 insider threat cases and continued research and analysis. 144 pages

Personal weather stations can expose your Wi-Fi network | ITworld

Personal weather stations can expose your Wi-Fi network | ITworld:



In the latest Internet of Things security blunder, personal weather station devices made by Netatmo were found sending users’ Wi-Fi passwords back to the company over unencrypted connections.

Executive Order -- Promoting Private Sector Cybersecurity Information Sharing | The White House

Executive Order -- Promoting Private Sector Cybersecurity Information Sharing | The White House:



"The purpose of this order is to encourage the voluntary formation of such organizations, to establish mechanisms to continually improve the capabilities and functions of these organizations, and to better allow these organizations to partner with the Federal Government on a voluntary basis.



 Such information sharing must be conducted in a manner that protects the privacy and civil liberties of individuals, that preserves business confidentiality, that safeguards the information being shared, and that protects the ability of the Government to detect, investigate, prevent, and respond to cyber threats to the public health and safety, national security, and economic security of the United States."



'via Blog this'

Critical Fixes for the Computer Fraud and Abuse Act | Electronic Frontier Foundation

Critical Fixes for the Computer Fraud and Abuse Act | Electronic Frontier Foundation: Violations of contractual obligations like a website's terms of service must not be the basis for criminal charges.

ESET Security Day London | ESET Security Days 2015 | Live the Experience

ESET Security Day London | ESET Security Days 2015 | Live the Experience: The first ESET Security Day of 2015 is taking place in London at Millbank Tower, overlooking the stunning views of the Thames river and Westminster.

Decorated former San Francisco police officer accused of corporate espionage | abc7news.com

Local!

http://abc7news.com/news/former-sfpd-officer-accused-of-corporate-espionage/514023/


From My iPhone

Facebook launches collaborative threat-detection framework — Tech News and Analysis

Facebook launches collaborative threat-detection framework — Tech News and Analysis: "a new collaborative threat-detection framework by Facebook called ThreatExchange."



'via Blog this'

5 Cybersecurity Resolutions for 2015 – CSC Blogs

5 Cybersecurity Resolutions for 2015 – CSC Blogs: "To say last year was an interesting year in enterprise information security would be an understatement. "



'via Blog this'

Work Starts on National Breach Notification Law - HDM Top Stories Article | Health Data Management

Work Starts on National Breach Notification Law - HDM Top Stories Article | Health Data Management: “When a breach is discovered, one of the first things a company must do is to conduct a risk assessment to determine the type of data that has been accessed and the risk that potential fraudulent use of the data could entail,” testified Elizabeth Hyman, an executive vice president of public advocacy at CompTIA. “This risk assessment is a vital component to a company’s data breach response, and, depending upon the seriousness of the breach, may take some time to complete. We therefore ask that a federal standard ‘starts the clock’ on a notification requirement only after the risk assessment has been completed.”

Health Data Experts Praise Nod to Cybersecurity in SOTU Speech - iHealthBeat

Health Data Experts Praise Nod to Cybersecurity in SOTU Speech - iHealthBeat: Lisa Gallagher, vice president of technology solutions at the Healthcare Information and Management Systems Society, said Obama's State of the Union address was a signal to lawmakers that the federal government believes cybersecurity is a sector that requires further action. She said, "It's the administration coming out saying, 'We recognize the threat.'"

Dear Lawmakers, Your New Breach Notice Laws Should Address These Issues | Data Privacy Monitor

Dear Lawmakers, Your New Breach Notice Laws Should Address These Issues | Data Privacy Monitor: If a national law is enacted, below are practical issues companies face when they attempt to comply with breach notification laws that should be addressed.

The Challenge of Health Care Fraud - The NHCAA

The Challenge of Health Care Fraud - The NHCAA: n 2011, $2.27 trillion was spent on health care and more than four billion health insurance claims were processed in the United States. It is an undisputed reality that some of these health insurance claims are fraudulent. Although they constitute only a small fraction, those fraudulent claims carry a very high price tag.

The National Health Care Anti-Fraud Association (NHCAA) estimates that the financial losses due to health care fraud are in the tens of billions of dollars each year.

Proving Your Identity At The Doctor’s Office

Proving Your Identity At The Doctor’s Office: the move to EMR does leave sensitive medical information at a higher risk for identity theft and data breaches. This could mean more criminals using your health insurance for themselves or worse, using sensitive health information about you to inflict other types of damage.

What's behind the dramatic rise in medical identity theft? - Fortune

What's behind the dramatic rise in medical identity theft? - Fortune: A decentralized U.S. health system, increasing digitization of records, and demand in the black market are fueling a surge in thefts.

Most Organizations Don't Properly Secure Sensitive Data, Report Finds

Most Organizations Don't Properly Secure Sensitive Data, Report Finds: According to the report, 63 percent of organizations today do not have a fully mature method to control and track sensitive data.

Protected Trust | How HIPAA may be affected by Obama's cybersecurity proposal - Protected Trust

Protected Trust | How HIPAA may be affected by Obama's cybersecurity proposal - Protected Trust: Brian Evans, senior managing consultant at IBM Security Services, told the source that he has never seen an instance when shared information has prevented a breach. This means that some believe the proposal wouldn’t help protect health records from being breached, but would still reveal personal information to the government.

43% of companies had a data breach in the past year

43% of companies had a data breach in the past year: A staggering 43% of companies have experienced a data breach in the past year, an annual study on data breach preparedness finds.

JISSec — Journal of Information System Security

JISSec — Journal of Information System Security: The Journal of Information System Security (JISSec) is a scholarly publication and an outlet for research in information system security.

The Rising Cost Of Medical Identity Theft And Data Breaches | ID Experts

The Rising Cost Of Medical Identity Theft And Data Breaches | ID Experts: article from Government Healthcare IT, ID Experts examines the $234 billion world of medical ID theft.

Researcher Releases 10 Million Usernames And Passwords In Fight Against Obama's War On Hackers - Forbes

Hmmmm

http://www.forbes.com/sites/thomasbrewster/2015/02/10/10-million-passwords-published-fight-against-obama-war-on-hackers/

The Sami of Northern Europe – one people, four countries

Human rights.. .

http://www.unric.org/en/indigenous-people/27307-the-sami-of-northern-europe--one-people-four-countries

JAMA Network | JAMA Internal Medicine | Medical Cannabis Laws and Opioid Analgesic Overdose Mortality in the United States, 1999-2010Medical Cannabis Laws and Opioid MortalityMedical Cannabis Laws and Opioid Mortality

Send this out...

http://archinte.jamanetwork.com/Mobile/article.aspx?articleid=1898878

From My iPhone

New Retail Fraud Survey reports shrink up by 22.2% - Retail Knowledge | Retail Knowledge

New Retail Fraud Survey reports shrink up by 22.2% - Retail Knowledge | Retail Knowledge: "Launched this month at the Retail Fraud Show, the UK Retail Fraud Survey sponsored by Kount has reported that shrink levels have increased by over 22.2% in 2014, rising from 0.9% of sales last year to 1.1% this year. Other figures show that the major area of online loss remains, overwhelmingly, from the fraudulent use of credit cards (43%), followed again by third party fraud payment (15%)."



'via Blog this'

LexisNexis, Retail Workers Get Nod For $2.38M Settlement - Law360

LexisNexis, Retail Workers Get Nod For $2.38M Settlement - Law360: "A Pennsylvania federal judge has given preliminary approval to a $2.38 million settlement in a proposed class action claiming LexisNexis Risk Solutions Inc. illegally distributed damaging information about retail workers to current and potential employers.
Under the settlement, LexisNexis has suspended its Esteem database"



'via Blog this'

LexisNexis Settles Esteem Retail Theft Database Class Action Lawsuit

LexisNexis Settles Esteem Retail Theft Database Class Action Lawsuit: "LexisNexis Risk Solutions Inc. has agreed to settle a class action lawsuit alleging its Esteem “retail theft contributory database” wrongfully labels job seekers as criminals even if they have not been convicted of a crime. "



'via Blog this'

Obama’s proposed changes to the computer hacking statute: A deep dive - The Washington Post

Obama’s proposed changes to the computer hacking statute: A deep dive - The Washington Post:



Orin Kerr: My views are somewhat mixed, but on the whole I’m skeptical of the Administration’s proposal. On the downside, the proposal would make some punishments too severe, and it could expand liability in some undesirable ways. On the upside, there are some notable compromises in the Administration’s position.

The government's cyberterrorism 'concerns' are a pretext for their own hacking operations | Jeremy Hammond | Comment is free | The Guardian

"If the US truly wanted to stop the proliferation of nation-state hacking, they would push for UN conferences to establish guidelines defining and prohibiting "cyber-warfare". "

http://www.theguardian.com/commentisfree/2015/feb/04/government-cyberterrorism-concerns-pretext-their-own-hacking


From My iPhone

Common Sense for Drug Policy: Excerpts from Cato Institute Analysis:

"The government is waging an aggressive, intemperate, unjustified war on pain doctors."

http://www.csdp.org/publicservice/catolibby1.htm

U.S. retail workers lead the world in theft from employers - Fortune

U.S. retail workers lead the world in theft from employers - Fortune: Light-fingered employees cost American stores (and consumers) more than shoplifters do.

New Smartphone Accessory Detects HIV in 15 Minutes : Tech : Chinatopix

Researchers say that after testing performed by Rwanda healthcare workers, the device accurately pinpointed the antibodies and produced a sensitivity score of 92 to 100 percent.

http://www.chinatopix.com/articles/35909/20150206/smartphone-accessory-detects-hiv-in-15-minutes.htm


From My iPhone

SC Congress Call for Speakers 2015 - SC Magazine

SC Congress Call for Speakers 2015 - SC Magazine: "2015 SC Congress Toronto will again feature cutting-edge sessions and dialogue coming from Canada's top industry professionals - with an audience consisting of up to 1,000 primarily senior information security and technology professionals in both the public and private sectors."



'via Blog this'

eCrime 2015 | APWG

eCrime 2015 | APWG: For 2015 APWG will combine it's Spring and Fall meetings into one four day event that will bridge the gaps between cybersecurity operations, research and consumer messaging.

Cost of retail crime skyrockets nearly 30 percent | CSO Online

Cost of retail crime skyrockets nearly 30 percent | CSO Online: ""Dishonest and fraudulent employees were responsible for $18.01 billion by value of shrinkage," said the report."



'via Blog this'

Graph of U.S. Measles Cases | History of Vaccines - Mobile

Check stats...

http://m.historyofvaccines.org/content/graph-us-measles-cases

BBC News - Cybersecurity: Defending 'unpreventable' cyber attacks

This is where I would find fault with Sony - not in the breach itself, but in not detecting it quickly, and failing to prevent the exfiltration of large amounts of data," says Rick Holland, a security and risk management analyst at Forrester Research.

http://www.bbc.com/news/business-31048811

TEN TANGERINE DREAM ALBUMS TO BLOW YOUR MIND | The Echoes Blog

"These are the signature Dream albums, the blueprint for every retro-space artist out there, the sound that influenced ambient, techno, and more."

https://echoesblog.wordpress.com/2010/02/17/ten-tangerine-dream-albums-to-blow-your-mind/

doggerland

Myth and legend

http://www.greenfudge.org/wp-content/uploads/2014/05/doggerland2.jpg

FBI Busts Russian Spies — War Is Boring — Medium

On Jan. 26, the FBI arrested Evgeny Buryakov, an official at Vnesheconombank, and charged him with passing information to Russia's Foreign Intelligence Service.

https://medium.com/war-is-boring/fbi-busts-russian-spies-31051ac3f7b5


From My iPhone

What time is the 2015 Super Bowl kickoff? | Sports | Charlotte Observer

NBC is offering a live stream, but it may be limited to customers of certain cable providers.

Read more here: http://www.charlotteobserver.com/2015/02/01/5486845/what-time-is-the-2015-super-bowl.html#storylink=cpy

http://www.charlotteobserver.com/2015/02/01/5486845/what-time-is-the-2015-super-bowl.html

From My iPhone