Important SCADA systems secured using weak logins, researchers find
18 Jan 2013
Thousands of critical SCADA systems reachable from the Internet are secured by dangerously weak default passwords, a survey carried out with the help of the US Department of Homeland Security has found. They used scripts run through the Shodan search engine (Google for hackers) to identify 7,200 vulnerable logins.
UK complacent over military cyber-attack risk, MPs warn
18 Jan 2013
UK forces are at risk of an attack on their information technology because of government complacency, MPs have said. The Defence Select Committee said the threat that cyber-attackers posed could evolve at almost unimaginable speed and called for rapid action to protect national security. The committee said the British military's reliance on IT could leave it fatally compromised. The Ministry of Defence said it had a range of contingency plans in place.
European Cybercrime Centre (EC3) opens on 11 January
11 Jan 2013
As from 11 January the new European Cybercrime Centre (EC3) will be up and running to help protect European citizens and businesses from cyber-crime. The EC3 will focus on illegal online activities carried out by organised crime groups, child sexual exploitation and those crimes that affect the critical infrastructure and information systems in the EU.
Nearly two-dozen bugs easily found in critical infrastructure software
10 Jan 2013
A researcher found nearly two-dozen vulnerabilities in software used in industrial control systems found in power plants, airports and manufacturing facilities. All of the bugs were previously unknown security holes.
Hackmageddon publishes the 2012 Cyber Attacks Timeline Master Index
09 Jan 2013
Hackmageddon released the master index that collects all the Cyber Attacks Timeline blog posts for 2012 on a single table, with a brief description, an infographic of the timeline and the link to the original article containing references and hyperlinks.
New report on top trends in the first Cyber Threat Landscape by ENISA
08 Jan 2013
The EU’s cyber security agency ENISA has published the first and most comprehensive Cyber Threat Landscape analysis of 2012, summarising over 120 threat reports. The report identifies and lists the top threats and their trends, and concludes that drive-by exploits have become the top web threat.
Critical Infrastructure Malware Infections that targeted America in 2012
3 Jan 2013
The Department of Homeland Security's Cyber Emergency Response Team for Industrial Control Systems (ICS-CERT) published a report covering common and sophisticated malware discovered in the ICS environment that targeted America's critical infrastructure in 2012.
Hackmageddon makes an analysis of the thoughts of many security vendors about their 2013 security predictions. This analysis consider the most relevant subjects and makes a comparison table with the conclusions obtained.
Critical Infrastructure Protection Resources from USA
27 Dec 2012
The USA Department of Homeland Security announced the availability of a new website and a Critical Infrastructure Toolkit that provides useful information on critical infrastrutures protection, different kind of exercises planning, videos, faqs and resources.