LATEST FBI CERT VULNERABILITIES
NATIONAL CYBER ALERT SYSTEM BULLETINS
CYBER SECURITY ALERTS
NEW THREATS
US-CERT Recently Published Vulnerability Notes:
VU#280613: Apache mod_isapi module library unload results in orphaned callback pointers
VU#744549: Microsoft Internet Explorer iepeers.dll use-after-free vulnerability
VU#154421: Energizer DUO USB battery charger software allows unauthorized remote system access
BLOG
Debunking the Growing Use of Misleading Claims and False Truisms in Cybersecurity: Wind River and Google Android Examples (Release)
Cyber Secure Institute Calls Wired Magazine’s “2009 Smart List” Idea “Forget Medical Privacy” Profoundly Stupid (Release)
Cyber Secure Institute Releases Preliminary Analysis of the National Institute of Standards and Technology’s Newly Announced Recommended Security Controls for Federal Information Systems and Organizations
CSI WHITEPAPERS
2/17/10
Cybersecurity: The Challenge of Political and Corporate Will
by Hon. C. Thomas McMillen
2nd in the series, Provoking Cybersecurity Change.
2/1/10
Cyberwar and Cyberterrorism
by Gen. Eugene Habiger
Today, the Cyber Secure Institute published a whitepaper, entitled “Cyberwar and Cyberterrorism: The Need for a New U.S. Strategic Approach,” written by Gen. Eugene Habiger USAF (ret.), who formerly served as Commander in Chief of United States Strategic Command. He also served as the Department of Energy's “Security Czar.”
General Habiger’s whitepaper draws a number of important conclusions, including these five points:
1. America is routinely the victim of nation-state driven cyber intrusions that can be seen as low-grade cyber-border conflicts.
2. Some of these attacks have crossed a critical line: they have compromised critical systems supporting our troops engaged in combat.
3. Our failure to proactively address these threats risks a digital Pearl Harbor or 9-11.
4. Deterrence by retribution and preemption, our nation’s core national security strategies, are of limited value against cyberwar and cyberterror threats—“these rotary-phone-era strategies are not well suited for today’s digital world.”
5. A new approach based upon deterrence by denial is needed, which will require nothing short of a total paradigm shift from both government and the private sector.
PRIVACY
CONTENT TO COME