Tuesday, November 25, 2008

Security News Feed Tuesday 11/25/08

Former Hunton Partner Gets 70 Months for Child Porn on Firm Laptop
http://www.law.com/jsp/article.jsp?id=1202426266809&rss=newswire

A former Hunton & Williams partner was sentenced Monday to 70 months in federal prison for using his firm's laptop to download and store videos of child pornography.

The lawyer, Emerson Briggs, who made partner at Hunton & Williams in 2003, pleaded guilty in September to one count of receiving child pornography. Judge Colleen Kollar-Kotelly of U.S. District Court for the District of Columbia also sentenced Briggs, 41, to 10 years of supervised release and ordered him to pay a $12,500 fine.

Briggs has been in custody since his plea hearing. Steptoe & Johnson partner Bruce Bishop, who represented Briggs, declined to comment. Briggs is "ashamed and remorseful about his past actions," his wife wrote in a letter to the judge. Briggs entered counseling after losing his job at Hunton & Williams.






TPM 1.2 specifications moves forward to become ISO/IEC standards






Lenovo Service Disables Laptops With Text Message Lenovo on Tuesday announced a service that allows users to remotely disable a PC by sending a text message.





Bug allowed free access to Sirius radio service





U.S. agency sees robots replacing humans in service jobs by 2025





Update: FTC asks Supreme Court to review Rambus antitrust case





Facebook wins $873M judgment in spam suit
Facebook won a case against a spammer who was ordered to pay the social-networking giant $837 million in damages.





Verizon cans workers who snooped Obama's cell phone, CNN reports
Any CIO knows you can't have staffers perusing records -- especially the president-elect's -- but this applies to all of us.





Holiday Travel: Ways to Keep Your Laptop, Privacy Safe





Microsoft's Ballmer ordered to testify in 'Vista Capable' suit





Hands-off hackers: Crooks opt for surgical strikes AP - Mon Nov 24, 7:16 AM ET
SAN JOSE, Calif. - Internet criminals have been getting more "professional" for years, trying to run their businesses like Big Business to get better and more profitable at selling stolen data online. Now the bad guys of the cyber-underworld are exhibiting other unexpected traits: remarkable patience and restraint in stalking their victims.





Pentagon bans computer flash drives AP - Fri Nov 21, 4:35 PM ET
WASHINGTON - The Pentagon has banned, at least temporarily, the use of external computer flash drives because of a virus threat officials detected on Defense Department networks.





Virus strikes some Pentagon computers: official AFP - Fri Nov 21, 1:13 PM ET
WASHINGTON (AFP) - Some Defense Department computer networks have been infected with a "global virus" and steps are being taken to mitigate it, the Pentagon said Friday.





Can Obama Keep His BlackBerry?
Analysis: Any responsible enterprise has security measures to handle mobile devices, so Obama should be able to take his BlackBerry into the West Wing with a little planning.





Tech Insight: Free Network Tool Shows The Bigger PictureNov 21,2008 A hands-on look at the new NetWitness Investigator network analysis tool and how it can team with Wireshark






Large quantity SQL Injection mitigation
As botnets and other automated tools are hammering at websites trying to exploit SQL injection vulnerabilities, site operators are trying hard at defending their websites. ASProx and other botnets were hitting hard at the ASP + MS SQL platform, millions of websites fell victims to the SQL injection vulnerabilities already. Although there has been a decline of wild SQL scanning by ASPRox type of botnet, we are still not in the clear yet. The unauthenticated portion of some sites might be secure, but the authenticated portion might be totally vulnerable. Since most scans only target what can be seen by Googlebots, there are still tons of web pages out there vulnerable waiting for exploitation.






Why Mass. 201 CMR 17 Deadline Was Extended
Companies that live or do business in Massachusetts have a few extra months to meet compliance deadlines for the state's tough 201 CMR 17 data protection law. The simple reason: Too few understand the law to meet the original January deadline (Part 1 in a series).
Read more





Two Weeks Out, Spam Volumes Still Way Down
Permalink
A full two weeks after a Web hosting firm identified by the computer security community as a major host of organizations engaged in spam activity was taken offline, the volume of spam sent globally each day has yet to bounce back.

The block graph over at e-mail security firm IronPort suggests that the company blocked around 35 billion spam messages on Monday. Prior to hosting provider McColo's shutdown, IronPort was flagging somewhere around 160 billion junk e-mails per day.

A quick glance at the volume flagged by Spamcop.net shows that they're still detecting well below half of the spam volumes they were just two weeks ago.





... the US National Telecommunications and Information Administration has gotten plenty of feedback on its call for comments on securing the root zone using DNSSEC. The comment period closed yesterday, and more than 30 network and security experts urged the NTIA to implement DNSSEC stat. There were a couple of dissenting voices and a couple of trolls.
Read More





Symantec is warning of a sharp jump in online attacks that appear to be targeting a recently patched bug in Microsoft's Windows operating system, an analysis that some other security companies disputed. Symantec raised its Threat Con security alert level from one to two because of the attacks, with two denoting 'increased alertness.' The attacks spotted by Symantec target a flaw in the Windows Server Service that Microsoft says could be exploited to create a self-copying worm attack.
Read More





Cybercriminals release Christmas themed web malware exploitation kit






From an unclassified DHS Report: Between 1993 and 2007, at least 16 confirmed ricin incidents involving domestic extremists have occurred; none resulted in any fatalities.

No comments: