|
NET.2971 - Swiss Cheese News 2012
|
|
|
Connecting your digital data to a public network considered harmful. |
|
|
|
THIS PAGE IS DISCONTINUED An uncountable number of hacks and privacy breaches occur each day. Its impossible to track them all. 17 Feb 2012 - Opnieuw storing bij ING ING kampte vandaag opnieuw met een storing waardoor klanten beperkt konden internetbankieren. Ook iDEAL bleek verstoord. Een slecht functionerende applicatieserver was de oorzaak. In januari maar ook februari stapelden de storingen zich op. Regelmatig konden klanten niet bij hun rekeningen komen. Ook de app en iDeal lagen er toen regelmatig uit. Ook waren er problemen met het bereiken van spaar- en beleggingsrekeningen. Bron: Sebastiaan Bareman - WebWereld Opnieuw storing bij ING - Update 17 Feb 2012 - Google is tracking your iPhone For a company already fighting a negative image as a privacy shark, the news today that Google has tracked iPhones users' Web-browsing habits certainly isn't going to to do the Google any good. Source: Alexander Abad-Santos - The Atlantic Wire. 1] How Google Tracked Your iPhone 2] Google's iPhone Tracking 3] Twitter stores user iPhone address books for 18 months after scan 14 Feb 2012 - Nortel was penetrated by hackers for decade Bankrupt Canadian telecom company Nortel was penetrated for at least a decade by hackers believed to have been operating from China. The hackers, using seven passwords stolen from top executives, including the company's CEO, downloaded technical papers, research and development reports, employee emails and other documents. It took the company years to figure out the extent of the problem. Source: PhysOrg. Nortel was penetrated by hackers for decade: report 10 Feb 2012 - Germany refuses to sign ACTA In a potentially fatal blow to the Anti-Counterfeit Trade Agreement (ACTA), Germany’s Foreign Office announced today that it will not sign the contentious treaty as protests heat up in 200 cities across Europe. Source: Andrew Couts - Digital Trends, via Yahoo! news. 1] ACTA bombshell: Germany refuses to sign anti-piracy treaty amid protests 2] Czech, Slovak governments backing away from ACTA, too 3] ACTA on the edge in Europe? Poland suspends ratification, Greece gets hacked 09 Feb 2012 - TomTom Tracks U.K. Drivers Dutch GPS provider TomTom said Wednesday that it has teamed with the U.K.'s Motaquote on an insurance initiative that will track a driver's vehicle and assess insurance premiums depending on his or her driving habits. Drivers who sign up for the service will be able to install a TomTom PRO 3100 navigation device, which includes Active Driver Feedback and LIVE Services, into their car. Source: Mark Hachman - PCmagazine. TomTom Tracks U.K. Drivers for Insurance Purposes 07 Feb 2012 - Ingebroken op server KPN (update Jan 10, 2012) In januari is ingebroken op een server van KPN. De hacker had toegang tot één serverdomein binnen het KPN-netwerk. Op de server stonden klantgegevens, maar die zouden niet zijn gestolen. Bron: Martin Bruining - WebWereld. 1] Hacker kraakt server met klantgegevens KPN 2] KPN lekt persoonsgegevens 500 klanten 07 Feb 2012 - Opnieuw storing bij ING (update Jan 8, 2012) Door een storing bij het internetbankieren van de ING Bank is het niet mogelijk om geld van een spaarrekening op te nemen of te storten. Ook geld storten op een beleggingsrekening kan niet. De oorzaak is nog niet bekend. In januari lag het internetbankieren dagenlang plat door een niet goed functionerende database. Bron: Loek Essers - WebWereld. Storing bij ING, spaarrekingen onbereikbaar 06 Feb 2012 - How to govern cyberspace The Belgium-based think-tank Security & Defence Agenda (SDA) has produced a large-scale flagship report based on 80 interviews with senior specialists and 250 experts from around the world and attempts to answer the unanswerable: how to govern cyberspace. Source: Tazeen Ahmad - NBC News 1] Defending virtual borders in age of cyber war 2] New SDA report: "Cyber-security: The vexed question of global rules" (PDF) 3] Security & Defence Agenda - Home 04 Feb 2012 - Hackers Attack! Hackers have taken over the websites of several law enforcement agencies worldwide in attacks attributed to the collective called Anonymous. Source: Brian Skoloff and Denise Lavoie - Associated Press, via Yahoo! News. 1] Hackers take over law enforcement websites 2] Hackers attack Greek Justice Ministry website 3] Hackers attack Brazil's largest state-run bank 4] European parliament website under cyber attack 5] 'Anonymous' hackers attack Polish state website 6] 'Anonymous' hackers briefly hijack French Elysee website 7] Hackers launch fresh attacks on Israeli websites 8] Israeli hackers attack Iranian sites 9] Komen Foundation Controversy Spurs Website Hack 03 Feb 2012 - Poland freezes anti-piracy pact ratification Poland's prime minister said Friday that Warsaw would put on ice plans to ratify a controversial international online anti-piracy accord (ACTA) after massive off-and-online protests in his country. Source: PhysOrg. Poland freezes anti-piracy pact ratification 03 Feb 2012 - Concerns over EU data retention law Digital rights groups in Europe have called for a ban on blanket data retention after a leaked internal memo from the European Commission admitted that there are significant problems with the current E.U. Data Retention Directive. Source: Jennifer Baker - IDG News Service, via NetworkWord. Leaked EU memo highlights concerns over data retention law 03 Feb 2012 - EU regulators want Google to halt new privacy policy (update) A group of European regulators has written to Google Inc calling on it to halt the introduction of its new privacy policy, saying it needs to investigate whether the proposals sufficiently protect users' personal data. Source: Claire Davenport - Reuters, via Yahoo! News. 1] EU regulators want Google to halt new privacy policy 2] EU missive to Google (PDF) 3] How Google's New Privacy Policy Could Affect You 4] Google won't delay new privacy policy despite EU concerns 02 Feb 2012 - MitB attack Criminal hackers have found a way round the latest generation of online banking security devices given out by banks. Called a Man in the Browser (MitB) attack, the malware lives in the web browser and can get between the user and the website, altering what is seen and changing details of what is being entered. Source: BBC News. Hackers outwit online banking identity security systems 02 Feb 2012 - Companies mum about hacks (update Feb 3, 2012) Top U.S. cybersecurity officials believe corporate hacking is widespread, and the SEC (Securities and Exchange Commission) issued a lengthy 'guidance' document on October 13 outlining how and when publicly traded companies should report hacking incidents and cybersecurity risk. But with one full quarter having elapsed since the SEC request, some major companies that are known to have had significant digital security breaches have said nothing about the incidents in their regulatory filings. Source: Joseph Menn - Reuters, via Yahoo! News. 1] Exclusive: Hacked companies still not telling investors 2] VeriSign hacked several times, won't reveal the details 27 Jan 2012 - Twitter begins censoring content Twitter said today that it will begin censoring tweets, if required by law, on a country-by-country basis. Europeans and Americans, however, will most likely be affected. Source: Zack Whittaker - ZDNet. 1] Twitter begins censoring content: How this will affect you 2] Twitter cosies up to governments with country-level filters 25 Jan 2012 - FBI to monitor social networks The US Federal Bureau of Investigation has quietly released details of plans to continuously monitor the global output of Facebook, Twitter and other social networks. Source: Jim Giles - New Scientist. 1] FBI releases plans to monitor social networks 2] FBI Looking for a Good Facebook-Snooping App 25 Jan 2012 - O2 data breach UK mobile operator O2 sends your phone number to every website you visit. O2 may also be unwittingly assisting spammers, allowing them to match email addresses with phone numbers. Source: Matt Brian - TheNextWeb. UK mobile operator O2 sends your phone number to every website you visit. 25 Jan 2012 - EC-voorstel databescherming De Europese Commissie presenteert uitgebreide nieuwe voorstellen voor privacy- en databescherming. De strenge regels gelden alleen niet voor overheden, politie en justitie. Bron: Andreas Udo de Haes - WebWereld. 1] Kritiek op 'verwaterd' EC-voorstel databescherming 2] European Commission 'in denial' over Patriot Act loophole 25 Jan 2012 - EU data-protection law The European Commission proposed new online data privacy rules on Wednesday, putting more responsibility on companies to protect users' information, and said those who breach the code could be fined up to two percent of annual turnover. Source: Claire Davenport - Reuters, via Yahoo! News. 1] Breach of new EU online data rules to carry high fines 2] Proposed EU data protection rules include right to be forgotten 3] European draft data law announced: What you need to know 4] How the new European data law will affect U.S. companies 25 Jan 2012 - Facebook Forces Timeline on Users Facebook forces users to switch to Timeline, making their pasts more visible. Source: AP via ABC news. Facebook Forces Timeline; Tips to Hide Users' Past 25 Jan 2012 - Google will track all your activities (update Jan 27, 2011) Google said Tuesday it will require users to allow the company to follow their activities across e-mail, search, YouTube and other services. The information will enable Google to develop a fuller picture of how people use its growing empire of Web tools. Consumers will have no choice but to accept the changes. Source: Adam Clark Estes - Atlantic Wire. 1] Whether You Like It or Not, Google Will Track Your Email 2] Google announces privacy changes across products; users can’t opt out 3] Google to combine users' data across its services 4] Big Brother? Google’s new privacy policy creates one massive database of your most private info 5] Ophef over privacy-'consolidatie' Google 6] Use Google? Time to Get Real About Protecting Your Digital Self 25 Jan 2012 - Encrypted hard drives not protected A US federal judge has ruled that the Fifth Amendment privilege against self-incrimination does not shield a defendant from being forced to disclose the contents of her encrypted laptop. Source: Ars Technica. Judge: Fifth Amendment doesn't protect encrypted hard drives 24 Jan 2012 - Internetbankieren ING offline (update Jan 25, 2012) Klanten van ING kunnen niet inloggen op de portal mijn.ing.nl. De bank kampt voor de derde dag op rij met een storing. Diverse Twitteraars zijn het helemaal zat en dreigen hun geld weg te halen bij de bank. Bron: Martin Bruining - WebWereld. 1] Internetbankieren ING opnieuw offline - update 2] 'ING-storingen kosten webwinkels miljoenen' 3] 'Grove inschattingsfout van ING' 23 Jan 2012 - The price of cyberattacks is rising If your company were hit with a cyberattack today, would it be able to foot the bill? The entire bill, including costs from regulatory fines, potential lawsuits, damage to your organizations' brand, and hardware and software repair, recovery and protection? Source: Mary K. Pratt - Computerworld. Do you need a cyberumbrella? 22 Jan 2012 - EU data-protection rules for corporations The European Union will propose tough new rules in the coming days on how corporations handle Internet users' personal data, a long-awaited move that could have far-reaching implications for Web giants such as Google Inc and Facebook. Source: Georgina Prodhan and Leila Abboud - Reuters, via Yahoo! News. Europe to issue tough new data-protection rules soon 16 Jan 2012 - Security in Education The ENISA (European Network and information Security Agency) is publishing today the consolidated report on Network Information Security in Education. The report provides young digital citizens and stakeholders with an overview and highlights of good practices on how to become educated to feel and behave safer online. Source: ENISA. New consolidated report on Network Information Security in Education 16 Jan 2012 - Zappos hacked, reputation damaged Zappos, the Amazon-owned fashion retailer, warns its 24 million customers their information may have been exposed by a cyber-attack. Zappos chief executive Tony Hsieh: "We've spent over 12 years building our reputation, brand, and trust with our customers. It's painful to see us take so many steps back due to a single incident." Source: BBC News. Amazon-owned Zappos warns users after cyber-attack 15 Jan 2012 - Harmful websites aimed at kids A nasty trend of Trojans and other drive-by downloads popping up on children's online-game websites, first noticed last fall on Chinese-language sites, has spread to the West. Source: Paul Wagenseil - MSNBC. Harmful websites aimed at kids spreading to Western markets 11 Jan 2012 - Spanish bank hugs Google (update Jan 27, 2012) Banco Bilbao Vizcaya Argentaria (BBVA) is adopting Google Apps for email and collaboration and expects to have its about 110,000 employees worldwide using the suite by the end of this year. Source: Juan Carlos Perez - IDG News Service, via InfoWorld. 1] Spanish bank to move 100,000+ employees to Google Apps 2] Google persuades Spanish bank BBVA to use the cloud 3] Google emails Virgin Media subscribers ... about privacy 10 Jan 2012 - Bewaarplicht dreigt ook voor sociale media Sociale netwerken krijgen mogelijk een bewaarplicht, zodat opsporingsdiensten toegang kunnen krijgen tot data die in het verleden via die netwerken is uitgewisseld. Bron: René Schoemaker - WebWereld. Bewaarplicht dreigt ook voor sociale media 07 Jan 2012 - RIM, Nokia, Apple backdoors In exchange for mobile presence in India, RIM, Nokia and Apple have allegedly provided backdoor access for the Indian intelligence to spy on communication. Source: Manan Kakkar - ZDNet. Have RIM, Nokia & Apple provided Indian Military with backdoor access to cellular comm? 06 Jan 2012 - Ramnit Worm Ramnit, the bank-thieving worm, is at it again, this time scoffing up Facebook accounts. The worrisome nature of Ramnit is compounded by the fact that users tend to use the same password for a number of web-based services, which may include not only Facebook but their mail, a VPN, and others. Source: PhysOrg. 1] Ramnit's heist bags 45,000 Facebook passwords 2] Ramnit worm switches focus from financial to Facebook, steals 45K logins 30 Dec 2011 - China Telecom in Europe China Telecommunications Corp., the nation’s largest fixed-line phone company, plans to expand into more European markets after starting its first overseas wireless service in the U.K. Source: Bloomberg. 1] China Telecom May Expand to France, Germany After U.K. 2] China Telecom enters British mobile market 30 Dec 2011 - The Stuxnet Modular Weapon The Stuxnet cyber weapon is just one of five weapons engineered in the same lab, and three have not been released yet. These weapons work as modules, in that they are designed to fit together with each having different functions. Source: Nancy Owano - PhysOrg. Kaspersky team reveals Stuxnet family of weapons 30 Dec 2011 - Telecoms wiretapping A federal appeals court has ruled as constitutional a law giving telecommunications companies legal immunity for helping the government with its email and telephone eavesdropping program. Source: Jason Dearen - Associated Press via PhysOrg. Court OKs immunity for telecoms in wiretap case 28 Dec 2011 - 2011 was the year of the hack A year ago, few people were aware of the power that groups of hackers could wield. The Arab Spring, the HB Gary Hack, the Sony Takedown(s), the Occupy Movement, the Stratfor Attack. Source: Adam Clark Estes - The Atlantic Wire. The Hacks That Mattered in the Year of the Hack 28 Dec 2011 - David Cameron's Tablet Britain's government says experts are considering developing a bespoke iPad app that would deliver key data straight to Prime Minister David Cameron's tablet computer. Source: PhysOrg. 1] Running a country? There's an app for that, almost 2] Forbidden fruit? Forget Apple iPad - the Pope prefers the Tablet of Sony 3] Security minefield: 'Bring your own device' will bedevil IT security in 2012 27 Dec 2011 - UK e-health system canceled Computer Sciences Corp. might have to write off the US$1.5 billion investment it has made in developing and deploying a failed e-patient records system in the U.K., which the government canceled in September. Source: Nancy Weil - IDG News Service, Via NetworkWorld. UK e-health system could cost CSC US$1.5B writeoff 25 Dec 2011 - Intelligence Service Stratfor hacked (update) Anonymous disclosed that not only has it hacked the Stratfor website, but has also obtained the full client list of over 4000 individuals and corporations, including their credit cards, as well as over 200 GB of email correspondence. The leaked client list is the who is who of intelligence, and capital management, including such names as Goldman Sachs, the Rockefeller Foundation and MF Global. Source: Tyler Durden, Zero Hedge - Business Insider. 1] Intelligence Service Stratfor Suffered A Devastating Hacking Attack Last Night 2] Chinese bestseller slams Goldman for crisis 3] MF Global Collapse Spotlights Practice That Heightens Systemic Financial Risk 23 Dec 2011 - Facebook sells your timeline to advertisers Facebook designed the Timeline not for you to tell your life story better but for advertisers to inject their brand messaging more aggressively into your life story for all your friends to see. Source: BetaBeat. 1] It's Zuck's World We're Just Living In It 2] Source Reveals Facebook Is Swimming In Cash 23 Dec 2011 - Millions of Chinese web users compromised The accounts of millions of Chinese web users have been compromised in a series of hacking attacks on several gaming websites, with account information leaking online. Data was stolen from gaming site Duowan, with over eight millions users affected. Website 7k7k also reportedly lost data for around twenty million users, and a further ten million accounts were hacked from 178.com. Source: Hana Stewart-Smith - ZDNet. Chinese gaming sites hacked: Millions of users affected 19 Dec 2011 - Industrial Control Systems Security The European Network and information Security Agency has issued the results of a new study on Industrial Control Systems (ICS) security. The report describes the current situation on ICS security and proposes seven recommendations for improving it. Source: ENISA. Industrial Control Systems Security: Recommendations for Europe & Member States 17 Dec 2011 - Changing your name Legally changing your name means you can leave your online identity behind. Many students are hiding their profiles, changing their searchable email addresses, and tightening up their privacy settings. A recent Microsoft survey found that 70 percent of recruiters and hiring managers in the United States have rejected an applicant based on information they found online. Source: Charlie Osborne - ZDNet. Take a tip from 'Mark Zuckerberg': Change your name 16 Dec 2011 - Inaccurate Databases The business of background checks is booming. But it is a system weakened by the conversion to digital files and compromised by the welter of private companies that profit by amassing public records and selling them to employers. These flaws have devastating consequences. Source: Jordan Robertson - AP, via Yahoo! news. AP IMPACT: When your criminal past isn't yours 12 Dec 2011 - Facebook does massive surveillance Richard Stallman: "Facebook does massive surveillance. If there is a Like button in a page, Facebook knows who visited that page. And it can get IP address of the computer visiting the page even if the person is not a Facebook user." Source: Emil Protalinski - ZDNet. 1] Richard Stallman: Facebook does massive surveillance 2] WikiLeaks' Assange Calls Facebook 'Most Appalling Spying Machine Ever' 3] Germany's War with Facebook and Google Over Privacy 12 Dec 2011 - Zorgverzekeraars willen elektronisch patiëntendossier (EPD) inzien. (update Dec 19, 2011) Zorgverzekeraars mogen geen kijkje nemen in de medische gegevens van patiënten. Minister Edith Schippers (Volksgezondheid) benadrukte vandaag in de Tweede Kamer dat alleen hulpverleners toegang hebben tot in de computer opgeslagen medische gegevens. De zorgverzekeraars hebben duidelijk gemaakt dat ze alleen contracten zullen afsluiten met hulpverleners die de medische gegevens elektronisch opslaan en kunnen uitwisselen. Bron: ANP via Trouw. 1] Zorgverzekeraar mag niet in medische gegevens 2] Verzekeraars gaan aan de haal met EPD 3] Verzekeraars dwingen artsen tot deelname aan EPD 12 Dec 2011 - Attacks on IT systems oil production Hackers are bombarding the world's computer controlled energy sector, conducting industrial espionage and threatening potential global havoc through oil supply disruption. Source: Daniel Fineren | Reuters, via Yahoo! News. Cyber attacks could wreck world oil supply 12 Dec 2011 - KLPD gebruikt afluister-software Het Korps Landelijke Politiediensten (KLPD) gebruikt software die op afstand kan worden geïnstalleerd op de computer van verdachten. Bron: NRC. KLPD gebruikt 'afluister-software' op computers verdachten 09 Dec 2011 - Google+ Find My Face Google dove into the realm of facial recognition on Thursday, unveiling a tagging suggestion feature for its Google+ social network. Source: Sharon Gaudin, Computerworld, via NetworkWorld. Google unveils 'Find My Face' tool for Google+ 05 Dec 2011 - NHS patient data shared with private companies? David Cameron (UK) has outlined plans to share NHS (National Health Service) patient data with private companies as part of government efforts to boost the medical research industry. Source: The Huffington Post. Cameron: NHS Patient Data Could Be Shared With Private Companies 05 Dec 2011 - Protecting the electric grid from cyber attacks (update Dec 6, 2011) Protecting the nation's electric grid from cyber attacks is imperative, but a lack of standards and a designated federal agency to handle the issue could hamper progress, according to a new study. Cybersecurity has not been a high priority - until recently - in designing grid components, researchers concluded. Source: Chloe Albanesius - PC Magazine. 1] Power Grid Needs Protection From Cyber Attack, But How? 2] MIT - The Future of the Electric Grid 3] Should Homeland Security control the electrical grid? Maybe 4] Siemens buys eMeter's smart grid 'big data' software 5] Slimme meter is gevaar voor de privacy (opinie) 03 Dec 2011 - Spy Files Wikileaks has released documents which lift the lid on the shady world of the international surveillance industry - with a new project called Spy Files. Source: Matthew Finnegan - TechEYE. 1] Wikileaks cables shows the world it's being watched - always 2] Wikileaks docs reveal that governments use malware for surveillance 3] Wikileaks exposes surveillance deals in Spy Files 4] WikiLeaks - The SpyFiles 02 Dec 2011 - UmeNow is following FTC rulings As part of its Occupy Privacy campaign, UmeNow is following FTC rulings that protect American consumers from deceptive practices by social networks that profit by sharing the private information of users, without their consent. UmeNow.com is a private social network supported by member subscriptions. It has banned all tracking, third party apps and games. Source: PRWeb, via Yahoo! News. 1] Occupy Privacy: UmeNow Supports 8 Counts Against Facebook by FTC 2] UmeNow - Home 02 Dec 2011 - Stuxnet linked to Conficker A cyber warfare expert claims he has linked the Stuxnet computer virus that attacked Iran's nuclear program in 2010 to Conficker, a mysterious 'worm' that surfaced in late 2008 and infected millions of PCs. Source: Jim Finkle - Reuters. Insight: Did Conficker help sabotage Iran's nuke program? 02 Dec 2011 - EU Google antitrust case The European Union will serve Google with a 400-page Statement of Objections in its antitrust investigation early next year. That's the next step in a legal action that could end with Google being fined up to 10% of its annual revenue. Source: Matt Rosoff - Business Insider, Evelina Kurgonaite - Financial Times. The EC to slam Google with 400+ page SO |
|
|