New Web of Fear, Same Secret Agent
521276
"24" repeats many plot twists and red herrings, but the fourth season still holds some surprises.
676721
This time, Russia's counterterrorist resolve is being tested as never before.
12644
An Internet posting that proclaimed the  creation of an al Qaeda branch in Britain is viewed by  intelligence officials as typical militant "background noise,"  a security source said on Wednesday.
181199
Interesting tidbit that was Slashdotted earlier - Netcraft has released an anti-phishing toolbar that leverages the enormous database of web sites the organization manages.
285429
Is the soon-to-debut site wikileaks.org a bold new forum for exposing corruption or a front for some intelligence agency? Conspiracy theorists want to know.
236212
(InfoWorld) - A planned cyberattack against U.S. financial institutions by Islamic jihadists has so far failed to materialize, Internet security observers said Friday. The U.S. Department of Homeland Security (DHS)Â warned of the possible attack Thursday, apparently prompted by discussions earlier in the week in a jihadist discussion forum, said Adam Raisman an analyst with the SITE (Search for International Terrorist Entities) institute, which tracks terrorists. The attack, dubbed "the Electronic Battle of Guantanamo" by jihadists, had been scheduled to start Friday and last until the end of the month, Raisman said. It was planned in retaliation for the U.S.'s holding of suspected terrorists at the Guantanamo Bay, Cuba, prison camp, he said. Both Raisman and Jose Nazario of Arbor Networks Inc.'s Security Engineering and Response Team said they saw no evidence of an attack coming Friday. Arbor, which monitors the Internet backbone for distributed denial-of-service attacks, saw no new attempts to create large attacks, Nazario said. The threat, which DHS attributed to the al-Qaeda terrorist group, seems out of step with the group's past efforts to focus on physical damage instead of cyberdamage, Nazario said. "We think there's a low chance that this is ready to go," he added. Earlier Friday, DHS spokeswoman Joanna Gonzalez downplayed the possible attack, saying her organization had "no information to corroborate the threat," and was sending out the alert "out of an abundance of caution." Over the past few months, jihadists had threatened similar attacks against the Vatican and Royal Air Maroc Web sites, Raisman said. By Friday afternoon, Internet research firm Netcraft Inc. had seen no downtime on the U.S. financial Web sites that it monitors, according to Rich Miller, an analyst with the company. Even if an attack were launched, it would require a certain degree of technical sophistication to succeed against major financial institutions, which are generally pretty well defended, he said. "We're talking about sites that have put a lot of security in place," he said. The U.S. Congress has required financial institutions to take strong measures to protect customer privacy since 1999, when the Gramm-Leach-Bliley Act passed, added Pam Johnston, a lawyer with the Foley & Lardner LLP law firm and former federal prosecutor focused on bank fraud. "Banks have been at the forefront of sophistication" in protecting online data, she said. While neither the Vatican nor Royal Air Maroc threats resulted in successful attacks, there have been widespread denial of service attacks in the past. In January, about 800 Danish Web sites were hacked in response to the furor over a Danish newspaper's publication of cartoons depicting the prophet Mohammed. Cybersecurity experts disagreed about whether the latest DHS warning was useful. Banks have taken several measures since the Sept. 11. 2001, terrorist attacks on the U.S. to secure their data, said Vivek Mehra, chief enterprise architect for global financial services at Keane Inc., an IT consulting firm. "The threat is overstated," Mehra added. "[The warning] is almost meaningless. It doesn't really change anything." But Johnston and Arbor's Nazario said DHS did the right thing by alerting financial institutions of the threat. "It gives companies a chance to ask their IT guys, 'Are we buttoned down?'" Johnston said. Â
254380
As Chris Shiflett mentions today, there's a new web development security aggregation site that's been launched - Planet-Websecurity.org [feed]. Christian Matthies has headed up the project:   Those of you who have spoken to me recently may already be aware of this project, but for those who don't, I am pleased to announce the launch of Planet Websecurity, founded with the intention to bring together similarly themed news and rants related to Web security and to display them in one place.   Included in the list of blogs/sites aggregated are the blogs of: Chris Shiflett, Robert Hansen, Sid Karunaratne and Christian himself.
71991
Military researchers are working to uncover and harness a "human fear" scent. The pheromone could lead to smell-based terrorist sensors and new means to harness "contagious" stress.
189651
Grafting media manipulation onto techno-terror, the latest âDie Hardâ expertly captures a current fear: What if weâre disconnected from our information overload?
293828
New browser security technology is in the works and due for display at RSA in February.
101028
The new model of the British secret agent is neither suave nor funny. But he has his charms
79963
Web gateway filtering specialist Finjan is reporting a new toolkit that uses randomized JavaScript to stay hidden from virus crawlers and deliver its payload via compromised Web sites.Dubbed by Finjan's Malicious Code Research Center (MCRC) as the "Random JS Toolkit," the malware development package is allowing attackers to create threats that only attempt to victimize an individual computer in the same manner a single time to protect against discovery by anti-virus systems and researchers' automated "crawlers."By dynamically changing the JavaScript employed to deliver each variant of attack being created, and by using random file names that are only delivered to the same machine or IP address once, Finjan researchers said the malware authoring package is meant to avoid the programs used by AV researchers to find new threats emerging on the Web.Typically when automated crawler programs come across new attack samples, they return to the threats' source URLs to verify their names and characteristics and to create signature files that allow their products to block the programs -- or they enter the sites onto so-called blacklists of compromised domains.However, once a machine has been infected with an attack made using the Random JS Toolkit, the threat will recognize that the machine has already been targeted and won't attempt to download it again, thereby thwarting efforts to identify or track the exploits, Finjan experts contend.During the month of December 2007, Finjan estimates that more than 10,000 individual sites were compromised with attacks built using the Random JS Toolkit. Most of the URLs serving as distribution points for the attacks were legitimate sites that had been hijacked, the company said.Among the infected sites were some that would qualify as well-known, highly trusted domains, said Yuval Ben-Itzhak, chief technology officer of Finjan.Ben-Itzhak said the toolkit serves as a prime example of the types of tactics he expects leading-edge malware authors to utilize more frequently in the coming year."We've found the initial 10,000 sites, but we're sure that there are many more that have already been infected. When we can find this number of exploits, it is clear that this must be a very significant attack that has affected a lot of people," he said. "Using the combination of techniques available in this toolkit, the threats that are being created can become very powerful and stay alive to infect people for longer periods of time."Among the types of malware infections being served up using the toolkit, Finjan has observed everything from Trojan viruses and keystroke loggers to botnet recruiting programs, he said.For its part, Finjan's real-time code inspection technology can defend against such threats because it eschews the use of traditional virus signatures or blacklists in favor of constant monitoring for any malware activity coming across a network armed with one of its devices, Ben-Itzhak maintains.Rival AV vendors, including Symantec, contend that features such as the market leader's recently developed "generic exploit prevention," based on behavioral cues, should also be able to isolate and defend against such emerging attacks.Unlike the widespread iFrame attacks that proliferated across the Web during 2007, threats created using the Random JS Toolkit will also be much harder for security researchers to track down because they do not lead back to central sites where the actual malware code itself is hosted, Finjan maintains.Since the involved malware code is loaded directly on a site, and it won't attempt infect the same computer or IP address twice, traditional URL blacklisting and signature-based techniques will likely prove futile against the attack, the company said.However, from what the security appliance vendor can deduce, Ben-Itzhak said the firm believes there is only one malware group currently using the toolkit."From what we can tell, all the information flowing back from the compromised sites is heading to the same server," he said. "This indicates that there is probably only one group controlling this malware code thus far, and that they are probably being very successful; this is just another step forward for the criminals involved to continue to improve their attack methods and remain undetected."Ben-Itzhak said that the involved server is not one that matches any of the company's lists of machines controlled by well-known malware authoring groups such as the Russian Business Network. The server the company is tracking was originally located in Europe, but has recently been moved to China -- and likely will continue to be moved around to avoid detection, according to the expert.Most of the data the security company has seen being sent to the server has been related to online banking username and password data, he said.As part of its investigation, Finjan discovered that one of the Web properties infected with the randomized JavaScript attacks was an online advertising network that serves up as many as 14 million online banner ads per week. The security device maker reported that unnamed company was informed and is currently working to clean out its systems.
745860
By Penman & Sommerlad  COCKROACHES. Shysters. Spam scum. Shares expert Cromwell Coulson has no shortage of names for the conmen behind a global investment scam.
379355
The images coming out of the latest hostage crisis in Iraq - capped by dramatic video of British captive Kenneth Bigley begging for his life - have transfixed Britons, left governments looking helpless, and revived a classic dilemma about whether to negotiate with terrorists.    But the plight of the British construction worker and his two murdered American colleagues has also raised new concerns about terrorists' tremendous ability to set agendas in an Internet age that makes their messages - even in the form of shocking beheading videos - all but impossible to stop...
762344
The agency tries to protect its operatives from betrayal by its political overlords. But in doing so, it may instead have imperiled them
586135
Sept 13 issue - One measure of how seriously the Feds are pursuing an investigation into whether a Pentagon analyst leaked secret information to a pro-Israel lobbying group is the fact that FBI agents showed up unannounced at the offices of the American
345023
Plan to target websites that 'groom' terrorists