Unisys probed for Homeland Security breach: report
548537
The FBI is investigating allegations  that Unisys Corp  failed to detect a Chinese Web site's  cyber break-ins on computers at the U.S. Department of Homeland  Security and then tried to cover up its shortcomings, The  Washington Post reported on Monday.
555867
OCTOBER 25, 2004 (IDG NEWS SERVICE) - IBM today introduced a security service that offers a concise, monthly global-network threat report designed to help organizations assess security needs and vulnerabilities from a business perspective.
71513
Security company Internet Security Systems Inc. (ISS) is warning its customers about a critical security hole in a commonly used technology from the Mozilla Foundation called the Netscape Network Security Services (NSS) library that could make Web servers vulnerable to remote attack.
330680
By Tony Henshaw  Unisys Corp, a worldwide technology services and solutions provider, surveyed more than 200 IT executives recently, trying to find out how large organizations are restructuring end-user services to meet insatiable end-users, proliferating devices and soaring complexity.
732951
Weaknesses in the Energy Departmentâs cybersecurity allowed hackers to successfully penetrate its systems 199 times last year in intrusions that affected 3,531 systems, the departmentâs inspector general said.
139875
Company says breach last week by hackers likely had no impact on customers, but it continues to investigate the incident.
383252
Unisys announced new servers and a suite of infrastructure management software Tuesday that are aimed at giving it a bigger role to play in customers' datacenters, where it will compete more directly with Hewlett-Packard and Sun Microsystems.
690068
Lawmakers grill U.S. Department of Homeland Security CIO after an audit found that a vital database lacks security controls.
259113
U.S. congressional subcommittee investigating cybersecurity at the DHS attacked the agency's CIO for lack of leadership.
458740
(InfoWorld) - The homes of several serving members of Japan's Maritime Self Defense Force (JMSDF) and a destroyer were raided as part of an investigation into a leak of sensitive military data from a computer, Japan's Kyodo News reported Tuesday. Officers from the Kanagawa prefectural police force and the JMSDF's own criminal investigations unit are investigating the leak of information related to the Aegis missile defense system, the sea-based Standard Missile-3 interceptor system and the reconnaissance satellite data exchange Link 16 system. The Aegis leak first came to light in March this year when police were conducting an immigration-related investigation into the Chinese wife of a JMSDF officer. During the search they came across the data, which included the radar and transmission frequencies of the Aegis system. The officer wasn't authorized to be in possession of the data so the investigation was begun. He apparently came into possession of the data while swapping pornography with another JMSDF officer, according to a previous report in the Yomiuri Shimbun newspaper. The issue has proved embarrassing for Japan, which is a close ally of the U.S. Japan's Defense Minister apologized to his U.S. counterpart during a visit to Washington, D.C., earlier this year and in June during a speech in Tokyo Lieutenant General Bruce Wright, commander of U.S. Forces Japan, called the leak "a very serious security problem." It's also come at a bad time. Japan is pushing Washington to allow it access to technical details of the F22A Raptor, one of the most technically advanced jets in the U.S. fleet, as part of its evaluation of the jet ahead of a possible purchase. The U.S. has to date not accepted the request. Data security at Japanese military and government institutions has been in the spotlight in the last year. The rapid spread of viruses on file sharing networks has served to highlight that many employees and service personnel run file sharing software on official computers. The viruses have caused sensitive documents to be published and shared with data inevitably ending up on the Web. Â
737452
The unpatched security hole could be used by a remote attacker to compromise a vulnerable Mac, advisories say.
690591
By Bruce V. Bigelow, The San Diego Union-Tribune  Sep. 14--The Department of Homeland Security said yesterday it will  provide as much as $1.35 billion to three companies, including San Diego's  SAIC, to develop a new type of technology for detecting radioactive bombs.
224100
The director of cyber security for the Homeland Security Department, Amit Yoran, has resigned his post. The issue of whether cybersecurity was receiving sufficient attention at DHS created
92308
US federal and state officials are investigating the hacking of a University of California, Berkeley, computer containing Social Security numbers and other personal data for more than 1 million state residents.
637030
(InfoWorld) - The U.S. Department of Homeland Security's (DHS)Â CIO was on the hot seat Wednesday on Capitol Hill after an independent audit found that a database that screens U.S. visitors lacked security controls. The chairman of the U.S. House of Representatives Homeland Security Committee called on DHS CIO Scott Charbo to explain why he should keep his job after persistent cybersecurity problems at the agency. "What happened to leadership?" Representative Bennie Thompson, the committee chairman and a Mississippi Democrat, said during a hearing of the Subcommittee on Emerging Threats, Cybersecurity, and Science, and Technology. "What happened to accountability?" Lawmakers also said they were concerned that the agency reported 844 cybersecurity incidents in 2005 and 2006. "Although we still have a ways to go, we've made measurable improvements in the management of information security at the department," Charbo said. "Certainly, we need to increase our vigilance to ensure that such incidents do not happen again." Many of the 844 incidents were minor, and the agency has taken major steps to fix past cybersecurity issues, Charbo said. Many of the reported cybersecurity incidents related to problems like lost laptops that did not result in data breaches, he added. The subcommittee did not have a breakdown of the incidents Wednesday. Asked about reports of bots installed on DHS computers that could send information out to hackers, Charbo said he had "no evidence" that the bots caused a breach. Thompson's comments came as the U.S. Government Accountability Office (GAO) issued a report saying DHS continues to have "significant weaknesses in computer security controls that threaten the confidentiality, integrity, and availability of key ... systems." GAO investigators found no security controls on the US-VISIT database, the system that screens people who want to visit the U.S. for potential terrorists and criminals. Lawmakers are concerned whether terrorists could get into the database "and change or alter their names to allow them access to this country, and we wouldn't even know that they're doing it," said Representative Bob Etheridge, a North Carolina Democrat. A contractor provides IT security for US-VISIT, but DHS has its own security controls in place to protect the database, Charbo said. He didn't disclose specific security measures. The GAO doesn't have evidence that the US-VISIT database was breached, said Keith Rhodes, chief technologist and director of the GAO's Center for Technology and Engineering. "I did not see controls in place that would prevent it," Rhodes said. "I did not see defensive perimeters, and I did not see detection systems in place whether it had or had not [been breached]." GAO started a cybersecurity review of DHS a year ago but curtailed its efforts because it kept finding "more and more" problems, Rhodes said. "If we had continued to this day, I would argue we'd still be finding things," he said. "The problems were pervasive. The problems were systemic." Charbo outlined recent measures DHS has taken to improve cybersecurity there. The agency is collapsing multiple legacy WANs into a single WAN, and it is standardizing all e-mail and directory services onto a single platform, he said. The agency had 13 separate e-mail systems when it was formed out of 22 U.S. agencies in 2002, he said. DHS also is combining multiple data centers into a shared center, he said. Thompson asked how DHS officials can preach cybersecurity practices to other agencies and private companies while continuing to have its own problems. Among the incidents DHS reported were employees sending out classified documents on unclassified networks and contractors attaching unauthorized laptops to the DHS network, he said. "How can the Department of Homeland Security be a real advocate of sound cybersecurity practices without following some of its own advice?" he said. "What the department is doing on its own network speaks so loud that the message isn't getting across to anyone else."
717918
Microsoft said Sunday it&#39;s looking into reports of a security screw-up in Windows Internet Name Service (WINS), a component of its most popular server software, including Windows NT 4.0 Server, Windows 2000 Server, and Windows Server 2003.
65120
Microsoft is investigating a security flaw in the Windows Internet Name Service that could allow an attacker to gain control over systems running the software.