It was another bustling week for hactivists aggressive a online targets of their ire. This time, hackers underneath a ensign AntiSec seemed to have hacked a website of OnGuardOnline.gov, a U.S. government’s online security website, in criticism conflicting a much-railed-against legislation Stop Online Piracy Act (SOPA) as good as other bills per egghead protection. Similarly, a organisation Anonymous is believed to be behind a distributed denial-of-service conflict on Thursday that brought down a European Parliament’s website in what is suspicion to be plea for European support for a shutdown of a Megaupload file-sharing site a week before. Anonymous also opposes a covenant being validated in Europe now called a Anti-Counterfeiting Trade Agreement. That deals with transgression of egghead skill rights.
Last week, certainty organisation Symantec was also publicly discussing a consequences of a information crack it believes occurred in 2006 in that some comparison source code, including that of pcAnywhere, was seized by attackers. Symantec now says business regulating comparison versions of pcAnywhere face heightened risk and that they should ascent to pcAnywhere 12.5. Plus, they should request a new patch that Symantec expelled Monday, Jan. 23. In addition, Symantec pronounced in a matter that “it will continue to recover updates to a product that are critical to request immediately.”
MORE: Hot certainty upstarts
A QUICK LOOK: The Megaupload Kim Dotcom hullabaloo
Symantec also said, “Second, it’s critical that business run pcAnywhere on a secure, and stable network (i.e. behind a association firewall or around a practical private network).” It also suggested business to make certain that all of a machines that they’re communicating with around pcAnywhere have endpoint protection.
Any patron of pcAnywhere incompetent to follow this recommendation should tell Symantec. Symantec says this is a initial time it’s ever had to emanate an advisory like this about a products since of a information crack associated to stolen source code. It’s protected to consider we might not have listened a final about all this, that has to count as one of a many unlucky chapters in Symantec’s history.
Saturday, Jan. 28, is National Data Privacy Day
This is removing a small harder to applaud each year, a approach things are going. In her glorious piece, “15 misfortune Internet remoteness scandals of All time,” Carolyn Duffy Marsan reminds us because that is, with her well-chosen list of remoteness outrages and debacles that operation from a Sony CD disaster to a Google Street View failure and most more.
In other news
In a authorised filing, Microsoft named a Russian man as a purported creator of a Kelihos botnet, that abused a company’s Hotmail use until it was tighten down in Sep 2011. Microsoft identified a male as Andrey N. Sabelnikov of St. Petersburg, Russia, observant he freelances for a module growth association and before worked as a module operative for a mechanism certainty module firm. The firm, Returnil, that sells a Virtual System Pro program, told Computerworld contributor Gregg Keizer that Andrey Sabelnikov had worked in a St. Petersburg bureau until Dec. 21, 2011, quoting Michael Wood, Returnil’s clamp boss of product government as saying, “We are intensely unhappy and hurt that someone who was a member of a group could be concerned in this form of activity.” Woods told Keizer that Sabelnikov was a “general module engineer” who worked on a “small malware research side project.” Sabelnikov also had before practice during Russian antivirus organisation Agnitum.
Can cloud-based collaborative data-sharing be secure adequate for invulnerability systems?
Though warning about a viewed miss of certainty in cloud-based services is mostly voiced, there are some situations where a conflicting is a case. Defense and aerospace manufacturers, including Boeing, BAE Systems and Lockheed Martin, are collaborating around SharePoint in a cloud hosted by use provider Exostar. The clever security built into a service is because it has gained a certainty of those pity supportive pattern information.
6 certainty companies to watch … and more
Six security startups get a tighten demeanour from author Tim Greene, who profiles Emerging Threats Pro, CloudFlare, Agari, CO3, Fixmo and Universal Secure Registry. Also, we should note here that another new startup, Dasient, that grown a cloud-based anti-malware service, was acquired final week by Twitter.
Can Sourcefire bust into a anti-malware marketplace successfully? This week it came out with Windows-based FireAMP, a particular form of malware-detection software, in a hopes of creation inroads into what’s a swarming marketplace. Time will tell.
RSA Conference 2012: Look for a hacking attempt hidden smartphone crypto keys around radio waves
Encryption keys on smartphones can be stolen around a technique regulating radio waves, says one of a world’s inaugural crypto experts, Paul Kocher, whose organisation Cryptography Research will denote a hacking attempt with several forms of smartphones during a arriving RSA Conference in San Francisco in late February. Kocher says a idea of a proof is not to calumniate smartphone makers though to indicate out a approach that crypto is used on inclination can be improved.
Ellen Messmer is comparison editor during Network World, an IDG announcement and website, where she covers news and record trends associated to information security.
Read some-more about far-reaching area network in Network World’s Wide Area Network section.
Article source: http://feeds.pcworld.com/click.phdo?i=f1a946bd5f23dc5ea44209c7c2b00600
