Cyber Security, Cyber Threat News

Cyber Security, Cyber Threat News via Twitter:

Tweets about cyber security OR cyber threat

more news below (web link on mobile below)

Follow @zqure

ICANN Security Awareness Resource Locator

ICANN Security Awareness Resource Locator: "All stakeholders should learn how to protect themselves, their families, or their organizations against online threats. The resources on this page can help consumers, business or IT professionals avoid online threats or harm and make informed choices regarding (personal) data disclosure or protection. The links on this list are external to ICANN's web site. ICANN has no influence over and is not responsible for changes to links or to content on these sites." Resources - ICANN --excerpts (go to foregoing link for full list):

Child or Consumer Online Safety
Get Safe Online
https://www.getsafeonline.org/

Stay Safe Online
http://www.staysafeonline.org

Stop. Think. Connect.
http://stopthinkconnect.org

Kid's Health
http://kidshealth.org/parent/positive/family/net_safety.html

Malta's Be Smart Online!
http://besmartonline.org.mt/

Australia Stay Smart Online
http://www.staysmartonline.gov.au/

A Parent's Guide to Internet Safety
https://www.fbi.gov/resources/parents
Information aimed to help parents understand the threats of child exploitation or harm. Explains signs that may indicate that a child is at risk online and how to respond. Interpol's Crimes Against Children site and Europol's Child Sexual Exploitation fact sheet provide complementary information.

National Cyber Awareness System
http://www.us-cert.gov/ncas/
The US CERT National security awareness system provides information about common security issues, tips for non-technical computer users, and articles for home and business users.

Microsoft Family Safety Center
http://www.microsoft.com/security/family-safety/default.aspx

STH. End User Training
http://www.securingthehuman.org/enduser/

National Cyber Awareness System
http://www.us-cert.gov/government-users/
The US CERT National security awareness system provides information about common security issues government users are likely to encounter, including training and best practices.

Stay Safe Online
http://www.staysafeonline.org/business-safe-online/
The Keep My Business Safe section of this site includes tip sheets, security planning or training guides, and articles describing how to's (how to assess your risk, conduct security assessments, monitor threats, or report incidents).

Information Warfare Site
http://www.iwar.org.uk
IWS offers a security awareness toolbox and very good paper describing the key elements of a security awareness program.

Cisco Systems Security Education Program
http://www.cisco.com/web/about/security/cspo/awareness/index.html#~acc~panel-5

Microsoft Security Awareness Toolkit
http://www.microsoft.com/en-us/download/details.aspx?id=11428

Infragard Awareness Programs
https://www.infragardawareness.com/

National Institute of Health Information Security and Privacy Awareness Training
http://irtsectraining.nih.gov/publicUser.aspx

National Institute for Science and Technology
http://csrc.nist.gov

NIST 800-50: Security Awareness and Training Program provides guidelines for government agency security awareness and training programs. NIST 800-16: Information Technology Security Training Requirements is a comprehensive document that can be used for generally any organization's security awareness programs.

ENISA Information Security Awareness Materials
https://www.enisa.europa.eu/media/multimedia/material
ENISA has published a User's Guide, How to Raise Information Security Awareness, and offers training videos, posters, screen savers, and illustrations (cartoons) in several EU languages (French, English, German, Spanish).

CERT Moldova
http://cert.gov.md/ (in Romanian)

CERT Moldova provides security awareness and best practices tips for a wide range of audiences.
CERT Sri Lanka
http://www.cert.ik

CERT Sri Lanka offers a knowledge base with information security policy domains, FAQs, general online safety tips, social media best practices and security tools.
ICT GOZO Malta Cyber Awareness
http://www.ictgozomalta.eu/cyber-security-awareness.html

This site offers online safety resources for kids, teens, parents, educators, businesses (Work Force Training Videos, Resources for Small Business), and techies in all European Union languages.

more news below (web link on mobile below)

Follow @zqure

Security Awareness, Posters, Infographics, Presentations, Videos

Security Awareness Posters, Infographics, Presentations, Videos:

STH. Secure the Human
http://www.securingthehuman.org/resources/posters

Security Intelligence
http://securityintelligence.com/top-10-cyber-security-infographics/

End User Security Awareness Presentation, Cristian Mihai, PWC
http://www.slideshare.net/frostinel/end-user-security-awareness-presentation-presentation

How to Build a Winning Security Awareness Program, CommLab India
http://www.slideshare.net/CommLab/how-to-build-a-winning-security-awareness-program-25843930

Creating a Meaningful Security Awareness Program
http://www.slideshare.net/bwoelk/engage-creating-a-meaningful-security-awareness-program

eMail Security Awareness, Dale Rapp
http://www.slideshare.net/DaleRapp/email-security-awareness

Social Engineering Audit and Security Awareness, CBIZ Inc
http://www.slideshare.net/CBIZinc/social-engineering-audit-security-awareness

CyberSecurity Awareness for Students, Kandarp Shah
http://www.slideshare.net/skandarp/cyber-security-awareness-for-students

Google Security Awareness Videos
https://www.youtube.com/user/GoogleCyberSecurity

Raising information security awareness, TerraNova Training
http://www.slideshare.net/Terranovatraining/terranovatraining-isa

Security Awareness Videos at antispam.br (in Portuguese)
http://www.antispam.br/videos/

Oman CERT Security Awareness Video Channel (in Arabic)
https://www.youtube.com/profile?user=omancert

more news below (web link on mobile below)

Follow @zqure

Best Password Vault

Take it from Leo--

What's the best password vault? | The Tech Guy: "Carla is overwhelmed by a ton of passwords she has to remember. What can she uses for just one password to rule them all? Leo says to use a password vault that will generate a unique and strong password that's difficult to crack. The best passwords are long and random with a combination of upper and lower case, numbers, letters and punctuation. That's what a password vault generator will buy you. Leo advises using LastPass. You can download and use it for free, or pay $12 for some additional features including mobile use. Other options include DashLane for the Mac, One Password for the Mac. And to remember your one lastpass password, use a pneumonic, where you use the first letter of each word of a phrase with punctuation, and then toss in a phone number. It will look random, but easy to remember or at least reconstruct."

more news below (web link on mobile below)

Follow @zqure

Russian Anonymous Marketplace, RAMP, Dark Web Drugs

How a Russian Dark Web Drug Market Outlived the Silk Road (And Silk Road 2) | WIRED: "... For more than two and a half years, the Russian Anonymous Marketplace, or RAMP, has maintained a thriving business in the Dark Web drug trade, offering one of the Internet’s widest arrays of narcotics to its Russian-speaking clientele. That’s roughly as long a tenure online as the original Silk Road achieved before it was seized in an FBI bust in October of last year. And it’s far longer than the new generation of anonymous drug markets that followed the Silk Road, including more than a dozen sites taken down last week in a massive coordinated police action. The largest of those seized sites, Silk Road 2, lasted exactly one year to the day...." (read more at the link above)

more news below (web link on mobile below)

Follow @zqure

How to encrypt Carbonite data

Leo Laporte answers--

How do I encrypt my Carbonite data? | The Tech Guy: "Bob uses BitLocker to secure his data. And when he uses Carbonite, he sees that his data is unencrypted when restoring it. Leo says that as long as you're logged in, bitlocker has unencrypted the data. And when you log out, it encrypts it again. But the good news is that when you back up Carbonite, the backup is encrypted. And Carbonite allows you to make the data completely encrypted. It's in the settings. BTW using BitLocker requires certificates. So make sure they're backed up. If they get corrupted, you'll lose the ability to access your encrypted data even if you know the password. There's also a good program called SpiderOak. It works like DropBox but uses end to end encryption."


more news below (web link on mobile below)

Follow @zqure

Threat Intelligence Not So Intelligent, Global Financial System Vulnerable

Threat Intelligence firm mistakes research for nation-state attack | CSO Online: "If anything, this incident proves two things; Redpoint scans will be detected by a honeypot, and when it comes to threat intelligence - sometimes it's not all that smart." (read more at link above)

JPMorgan Chase Says More Than 76 Million Accounts Compromised in Cyberattack - NYTimes.com: "Hackers were able to burrow deep into JPMorgan’s computer systems, accessing the accounts of more than 90 servers — a breach that underscores just how vulnerable the global financial system is to cybercrime. Until now, most of the largest hack attacks on corporations have been confined to retailers like Target and Home Depot."

more news below (web link on mobile below)

Follow @zqure

Voice Hackers Will Be Talking Their Way Into Your Technology

Will Siri be indicted as a co-conspirator?

Voice Hackers Will Soon Be Talking Their Way Into Your Technology:  "... this scary reality is not as far away as it might seem, as security researchers have already managed to trick Siri into letting them bypass the lock screen on an iPhone and post Facebook messages, access call history, send text messages and fire off emails. “Microphones should be disabled immediately and our current recommendation is that the user switch off features [involving voice commands],” he said in a phone interview with Forbes. “At the moment, leaving biometric technology as it is today is like leaving a computer without a password and just allowing anyone to walk by, click and take an action. “We realized there is something very basic here that everyone seems to have forgotten: authentication. If you have a smart TV at home, for instance, it will respond to a synthesized voice as well as yours.”..."


more news below (web link on mobile below)

Follow @zqure

Eugene Kaspersky: How to Deal With the Threat of Cyber-Attacks (video)

How to Deal With the Threat of Cyber-Attacks: Video - Bloomberg:
(Allow video to load after clicking play or go to link above)

Kaspersky Lab Founder and CEO Eugene Kaspersky discusses the threat from cyber-attacks on “Bottom Line.” (Source: Bloomberg 9/15)

more news below (web link on mobile below)

Follow @zqure

Scam: Computer Hackers Claim to be Law Enforcement

And corrupt law enforcement who want bribes!--

Scam: Computer Hackers Claiming to be Law Enforcement: "The Newberry County Sheriff's Department is warning computer owners about a scam involving hackers posing as law enforcement. According to deputies, scammers are using a virus to encrypt computer owners data and take over their computer. The scammers are claiming to be with law enforcement or FBI and accusing owners of looking at child pornography. They ask for a sum of money to be sent to a location to unlock the computer and clean it of pornography. Deputies say the hackers threaten to keep the owners' computer data and arrest them if they do not comply...."


more news below (web link on mobile below)

Follow @zqure

Cyber attacks, Cybersecurity, Cyber insurance

Hack attacks spur calls for cyber insurance
The Hill
Cyber insurance legally protects companies after a data breach, covers ... “If I am a company and I buy cybersecurity insurance, if I have bad security ...

Prepare for the Attack of the Data-Sucking Cyber Zombies
Entrepreneur (blog)
Having trained professionals who understand cyber security and know what to look for is essential to an overall security strategy. Whether you employ ...

more news below (web link on mobile below)

Follow @zqure

Cyber Attacks, Cyber Crime, Business Loss

Cyber Crime Means Business- Potentially Yours
Forbes
How to Manage the Growing Risk of Cyber Attacks (Wiley, 2014) and THREAT! ... The loss of this information is a national economic security crisis.
Data Breach Specter: 3 Cyber Security Stocks to Benefit - Analyst Blog - NASDAQ
Cyber-CAT brochure - marsh.com

Experts warn banks of more cyber attacks
Financial Times
Cyber security experts have warned of a constant threat of organised cyber criminals on the financial sector after the US Federal Bureau of ...

Cyber Security Education: Remove The Limits
InformationWeek
Historically, there have been two perceived approaches to cyber security -- the vertical, technical approach and the more horizontal, strategic ...

HACKERS STRIKE: It's a huge problem affecting millions of Americans
Q13 FOX
“Cyber security, I think, is the biggest threat facing personal privacy, national security, and the national economy. It affects everyone,” U.S. Attorney ...

Why Breach Detection Is Your New Must-Have, Cyber SecurityTool
TechCrunch
Cyber attacks are all over the news, and it seems like no one is immune — Home Depot, Target, Adobe and eBay included. So why are CIOs still ...

more news below (web link on mobile below)

Follow @zqure

North Korea, Cyber Warfare, Data Breaches, National Cybersecurity Center

North Korea cyber warfare capabilities exposed
ZDNet
North Korea's cyber warfare capabilities are on the rise despite being ... training up the next generation of cybersecurity and cyber warfare experts.

Cyber security more of a priority after Highly publicized data breaches
KCRG
CEDAR RAPIDS — More data breaches, including stolen credit card numbers and hacked personal photos of celebrities, has both individuals and ...
Grassley Cyber Security Remarks at National Cyber Security Alliance Seminar - Senator Chuck Grassley

Virginia accelerator welcomes new cohort of cybersecurity companies
Washington Post
Maryland is home to the U.S. Cyber Command at Fort Meade and the soon-to-be-built National Cybersecurity Center of Excellence in Montgomery ...

more news below (web link on mobile below)

Follow @zqure

NATO, Cyber attack, mutual defense

NATO nations 'will respond to a Cyber attack on one as though it were on all'
Register
NATO is set to agree a new cyber defence policy that would mean any severe ... through diplomatic channels, according to one seasoned IT security pro. ... The Tallinn Manual on the International Law Applicable to Cyber Warfare, ...
NATO agrees cyber attack could trigger military response - Reuters UK
In case of cyber attack: NATO members ready to pledge mutual defense - Ars Technica

Wanted By DHS: Breakout Ideas On Domestic Cybersecurity
InformationWeek
Department of Homeland Security plans to fund cyber defense research efforts to develop pragmatic tools that can be deployed quickly, says Forrester ...

This Week in Tech: Lawmakers take on cybersecurity
The Hill
The event is a joint effort by retail and financial services industries that have often sparred in the past but are joining forces to press for stronger cyber ...
Let's pass cybersecurity legislation - The Hill
Security clearances, contractor oversight, NATO cyber and more - FCW.com
Cyber Innovation Center receives $5M Department of Homeland Security grant - KTBS

UK launches online course to promote security in cyber space
Out-Law.com
The free 'Massive Open Online Course' (MOOC) is backed by the UK's NationalCyber Security Programme, which is investing £860 million over five ...
Government supports UK's next generation of cyber security professionals - Gov.uk

more news below (web link on mobile below)

Follow @zqure

Cybersecurity, Passwords, Technology

Cybersecurity NEWS:

SFGate
Beyond passwords: taking cybersecurity to the next level
SFGate
The password has failed. That ubiquitous annoyance of the digital age - the computer password - has proved itself to be profoundly unsafe. People ...

People too trusting when it comes to their cybersecurity, experts say
Kansas.com
College jobs experts say cybersecurity students like Brewer will in the future make a great deal of money – six figures, some of them. “He's a great guy, ...

Cybersecurity a major priority in independent broker-dealers' 2015 tech budgets
InvestmentNews
Cybersecurity concerns are front and center for independent broker-dealers as they plan next year's technology budgets, according to an ...


Haaretz
Iran still Israel's biggest threat, PM says at cyber conference
Jerusalem Post
Prime Minister Binyamin Netanyahu addressed the fourth Annual InternationalCybersecurity Conference at Tel Aviv University on Sunday, pushing ...
PM speaks at cybersecurity conference - Jerusalem Post

Cleared Intelligence Contractors Readying for New Cybersecurity Reporting Requirements
The National Law Review
When it became law on July 7, 2014, the 2014 Intelligence Authorization Act (“IAA”) gave the Director of National Intelligence (“DNI”) 90 calendar days ...

more news below (web link on mobile below)
Follow @zqure

Protecting Trade Secrets in the Digital Age

Protecting Trade Secrets in the Digital Age Requires Extra Vigilance: "Technology allows businesses around the world to easily communicate and access data, increasing both business opportunities and worker productivity. However, this same technology also makes corporate data more vulnerable to theft and harder to protect. Lost or stolen data has significant financial repercussions; misplaced devices or server crashes are estimated to cost the average business $586,000 a year. Data theft was recently estimated to cost companies $250 billion a year, according to the National Crime Prevention Council. Intellectual property — customer lists, a secret recipe, proprietary product blueprints, financial data, merger and acquisition plans, etc. — faces a variety of threats as more businesses and employees take advantage of wireless and portable devices...." (read more at link above)

more news below (web link on mobile below)

Follow @zqure

Network-Based Steganography Threats

The Growing Threat Of Network-Based Steganography | MIT Technology Review: "... They point out that before a countermeasure that does do this can be built, researchers will need to come up with a new set of fundamental approaches to counter the newly evolving forms of steganography. One thing is for sure: the detection and prevention of network steganography is set to become increasingly challenging as the threat from malware such as Duqu spreads. Be warned!
Ref: arxiv.org/abs/1407.2029 : Hidden and Uncontrolled – On the Emergence of Network Steganographic Threats"

more news below (web link on mobile below)

Follow @zqure

Exploit Kits, The Scourge of Cyberspace

Dark Net reveals how hackers exploit vulnerabilities - SFGate: ".... Users think they are clicking legitimate links to legitimate websites, and they still get infected with malware that carries bad consequences. For example, a hacker can encrypt a users' files - documents, photographs or videos - in a "crypto locker" and not release the data until the victim pays ransom... Nearly 70 percent of exploit kits originate in Russia, where cybercrime laws are relatively weak, according to a report by research firm Solutionary. In recent years, a thriving, coordinated underground economy has emerged, a place where criminals swap cash to develop and update the kits, identify targets and rent the "weapons" for as little as $50 a day. "These black markets are growing in size and complexity," according to a report by Rand Corp., a Washington think tank. "The hacker market - once a varied landscape of discrete, ad hoc networks of individuals initially motivated by little more than ego and notoriety - has emerged as a playground of financially driven, highly organized and sophisticated groups.... " (read more at link above)

more news below (web link on mobile below)

Follow @zqure

Protecting Trade Secrets, Remote Worker Security, Mobile employees

Protecting Trade Secrets in the Digital Age Requires Extra Vigilance | WeComply, a Thomson Reuters business - JDSupra:

Remote Worker Security -- Mobile employees using portable devices increase the potential for data loss in a variety of ways:

• Transferring files from a work device to an unprotected home computer or personal device.
• Using personal communications that don't meet corporate IT security standards.
• Discussing sensitive company matters where others can hear the conversation.
• Failing to use a laptop privacy guard when working remotely in a public place.
• Failing to properly safeguard mobile devices against loss or theft.
• Using hotel or other public "hot spots" where potential cybercriminals can steal information or establish a rogue network to steal information.

(read more at link above)

more news below (web link on mobile below)

Follow @zqure

Andreessen Horowitz, Cyber Security Firm Tanium (video)

Why Andreessen Is Investing $90M in Tanium: Video - Bloomberg:
(Allow video to load after clicking play or go to link above)

Steven Sinofsky, a board partner at Andreessen Horowitz, discusses the company's investment in cyber security firm Tanium with Cory Johnson on "Bloomberg West." Bloomberg LP, the parent of Bloomberg News, is an investor in Andreessen Horowitz. (Source: Bloomberg, June 23)

more news below (web link on mobile below)

Follow @zqure