[ISN] Washington’s Secret Weapon Against Chinese Hackers

______________________________________________ Attend #HITB2013AMS April 8th – 11th in Amsterdam. Featuring over 42 international speakers and keynotes by Bob Lord and Edward Schwartz http://conference.hitb.org




Facebooktwittergoogle_plusredditpinterestlinkedinmail

[ISN] U.S. Air Force designates six cyber tools as weapons

http://news.cnet.com/8301-1009_3-57578567-83/u.s-air-force-designates-six-cyber-tools-as-weapons/ By Steven Musil CNET News April 8, 2013 Six cyber tools have been designated as weapons by the U.S. Air Force, allowing the programs to better compete for increasingly scarce Pentagon funding, an Air Force official said on Monday. Lt. Gen. John Hyten, vice commander of Air Force Space Command, told a cyber conference held in conjunction with the National Space Symposium that the new designations would boost the profile of the military’s cyber operations as countries grapple with attacks originating from the Internet. “This means that the game-changing capability that cyber is going to get more attention and the recognition that it deserves,” Hyten told conference attendees, according to a Reuters account of the speech. “It’s very, very hard to compete for resources … You have to be able to make that case.” Hyten, who said the Air Force was working to integrate cyber capabilities with other weapons, offered no details on the new cyber weapons. […] ______________________________________________ Attend #HITB2013AMS April 8th – 11th in Amsterdam. Featuring over 42 international speakers and keynotes by Bob Lord and Edward Schwartz http://conference.hitb.org


Facebooktwittergoogle_plusredditpinterestlinkedinmail

[ISN] SQL injection flaws easy to find and exploit, Veracode report finds

http://news.techworld.com/security/3440950/sql-injection-flaws-easy-find-exploit-veracode-report-finds/ By John E Dunn Techworld 08 April 2013 The software industry’s inability to reduce the number of security flaws in its code is fuelling an age of the ‘everyday hacker’, criminals who can exploit vulnerabilities with a minimum of technical skills, Security testing firm Vercode’s latest State of Software Security (SoSS) report (reg required) has suggested. Of the 22,430 applications submitted to the firm’s code analysis service in the three 18 months to June 2012, only 13 percent of web applications were able to pass the generic OWASP Top 10 list of security problems. When it came to standalone applications, only 31 percent complied with the separate CWE/SANS Top 25, a significant decrease on the compliance rate in the previous SoSS report caused, Veracode suggested, by a broader sample of companies using the service. Nevertheless, the percentage of applications containing common but serious flaws such as SQL injection remained static at 32 percent, with cross-site scripting also stubbornly entrenched at 67 percent. […] ______________________________________________ Attend #HITB2013AMS April 8th – 11th in Amsterdam. Featuring over 42 international speakers and keynotes by Bob Lord and Edward Schwartz http://conference.hitb.org


Facebooktwittergoogle_plusredditpinterestlinkedinmail