Core Facts
GSM call can be listened to by anyone with $500 and a laptop within six months 

At the recent Hacking at Random (HAR) conference, Karsten Nohl detailed plans for cracking standard GSM cell phone encryption, known as A5/1, and making the results available for anyone to use.

His presentation from the event is here - https://har2009.org/program/attachments/119_GSM.A51.Cracking.Nohl.pdf

The implications for businesses, individuals and the mobile industry are enormous:

  • Once complete it means anyone with a $500 radio card and a laptop will be able to listen in to GSM calls
  • It marks a lowering of the bar for criminals to be able to hack calls
Read more: All GSM Calls Under Threat from Hackers

San-Jose, Calif., 24th August, 2009 – Finjan Inc., a leader in secure web gateway products and the provider of a unified web security solution for the enterprise market,responded today to the latest initiative for public disclosure of cybercrime incidents. Corporate bank accounts are a popular target for cybercriminals. The soaring growth in cybercrime and attacks on businesses has dire implications. Dealing with the damage of a data breach is costly and time-consuming, and could even affect the survival of companies. To face the current wave of cybercrime, a lawsuit has been filed by Unspam Technologies, in Virginia under the CAN SPAM Act to obtain forensic information about bank breaches that will help tracing the perpetrators and bring them to justice. “Finjan supports more public disclosure of data breaches.

Read more: Finjan Welcomes Initiatives for Public Disclosure of Cybercrime Incidents Information

London UK, 24th August 2009 - Neil Stinchcombe, a blogger for Infosecurity Adviser, has asked the Crown Prosecution Service (CPS) - which approved the US extradition request for self-confessed UFO hacker Gary McKinnon - to revisit the case following the failure in the latest, and final stage of, Gary's legal appeal process.

In a comment on the case on the Infosecurity Adviser Web site, Stinchcombe says that Gary is "just a pawn in a political and legal game between the UK and the US," adding that the original gameplan was for the CPS to revisit its original approval the US government's extradition request.

 

"However, as Alan Johnson, the current Home Secretary, said when writing in the Sunday Times a few days after Gary's latest appeal through the courts stated: `It would be unlawful for the home secretary to intervene'."

Read more: Infosecurity Adviser blogger asks CPS to `take one for the team' in Gary McKinnon case

Misconception that DDoS attacks cannot be defended against   Allot’s ‘ServiceProtector’ behavioural threat detection system can protect against DDoS attacks, botnets and zero-day attacks   Woking, Surrey: 19th August 2009 - We’ve read about recent attacks on Twitter to get at the Georgian blogger Cyxymu, which also affected Facebook, LiveJournal and parts of Google. There has been much misguided comment about the risks to the Internet of distributed denial of service (DDoS) attacks and the difficulty of defending against such attacks. Much of the commentary has been about the “impossibility of the saervers to handle the traffic.”   While it isn’t possible to stop the credulity of users who are click-jacked into installing malicious code and becoming unwitting members of ‘botherds’, Ian Kilpatrick, chairman of security specialist Wick Hill Group, says that it is possible for web based organisations to defend themselves against DDoS.    He commented: “A lot of people, including some commentators in the national press, believe that you can’t protect against DDoS attacks.

Read more: Twitter Attack Could Have Been Defended Against

New Encryption and Key Management Approach Automates Manual Processes

Stoneham, MA – 18 August 2009: Thales, leader in information systems and communications security, announces that Follett Higher Education Group has selected its encryption and key management solutions. As a result Follett has eliminated time-consuming manual processes for managing encryption keys – a key requirement for compliance under the Payment Card Industry Data Security Standard (PCI DSS).

Follett Higher Education Group sells more than 23 million textbooks annually in stores and online, and operates more than 700 campus bookstores for colleges and universities across the United States. For every transaction the company protects its customers’ personal data from breaches, complying with PCI DSS. Prior to selecting the Thales solution Follett security administrators manually replaced or rotated old encryption keys by hand in order to fulfill one of the PCI DSS requirements.

Read more: Follett Higher Education Group Selects Thales HSMs to Assist with PCI DSS Compliance