News Briefs

Cyber Threats Accelerate: 94% of Web Browser Exploits Occur Within 24 Hours of Disclosure

Today X-Force, IBM's security research and development arm, released its 2008 Midyear Trend Statistics report that indicates cyber-criminals are adopting new automation techniques and strategies that allow them to exploit vulnerabilities much faster than ever before. The new tools are being implemented on the Internet by organized criminal elements, and at the same time public exploit code published by researchers are putting more systems, databases and ultimately, people at risk of compromise. more

Microsoft Data Suggests 1 Out of Every 14 Downloads is Malware

Microsoft Program Manager, Jeb Haber, reports in a blog post that from browser data collected on user downloads, 1 out of every 14 programs downloaded is later confirmed as malware. Haber says: "Consumers need information to make better decisions. That said, IE9 adds another layer of defense against socially engineered attacks that now looks at the application being downloaded -- this is in addition to the URL-based protection described above. This new layer of protection is called SmartScreen Application Reputation." more

U.S. Slammed as Major Host for Cybercrime

While Russia and Ukraine are generally regarded as today's main cybercrime hubs, "a lot of their infrastructure is housed in the west, in the United States to be precise," writes Vincent Hanna of Spamhaus Project. "Without exception, all of the major security organizations on the Internet we know of agree that the 'Home' of cybercrime in the western world is a place known as Atrivo/Intercage. We ourselves have not come to this conclusion lightly but from many years of dealing with criminal operations hosted by Atrivo/Intercage, gangs of cybercriminals -- mostly Russian and East European but with several US online crime gangs as well -- whose activities always lead back to servers run by Atrivo/Intercage..." more

Study Finds Spain Most Bot-Infected Country, Sweden Among Least Infected

According to a recent security report, Spain and the United States are the leading countries when comes to bot-infected computers. Based on data compiled from October by PandaLabs, the research arm of Panda Security, an alarming 44.49% of computers in Spain are infected with bots and United States -- a long way behind -- at 14.41%, followed by Mexico 9.37% and Brazil 4.81%. Countries least infected include Peru, the Netherlands and Sweden, all with ratios under 1 percent. more

Harvard’s Berkman Center to Study ICANN’s Accountability and Transparency Review Process

The Berkman Center for Internet & Society at Harvard University announced today that it "will conduct an independent, exploratory study analyzing ICANN's decision-making processes and communications with stakeholders." The study is aimed at developing a framework and recommendations for understanding and improving ICANN's accountability and transparency. "The Berkman Center's final report will be made publicly available after ICANN's Accountability and Transparency Review Team has had the opportunity to utilize its findings in recommendations to the ICANN board." more

Amazon Web Services to Charge for IPv4 Addresses Amidst Rising Costs and Scarcity; Urges Shift to IPv6

Amazon Web Services (AWS) will charge customers for public IPv4 addresses effective February 1, 2024. The charge will be $0.005 per IP per hour for all public IPv4 addresses, irrespective of whether they're attached to a service. more

Two Years Later the Conficker Worm Not Entirely Disappeared

In a SecurityWeek article today, Ram Mohan writes: "Just over two years ago, the Internet held its breath. The high-profile, widely proliferated Conficker worm had been in the wild from October 2008; its largest mutation was revealed in February 2009, with a widely publicized activation date of April 1, 2009. ... What we do know: Conficker could have proved much more damaging than it ultimately did, and the threat has not entirely disappeared." more

Internet 2008 in Numbers

In a blog post today, Royal Pingdom has posted a variety of statistical answers to questions for 2008 such as: How many websites were added? (A: 31.5 million) How many emails were sent? (A: 210 billion per day) How many blog posts were published? (A: 329 million) Other numbers include total number of Internet users in the world which, according to June 2008 data, is recorded at 1,463,632,361 with Asia having the highest percentage of users (39.5%) followed by Europe as the second largest (26.3%) and North America as the third (17%). Numbers have been gathered using a wide variety of sources from around the Web. more

UPDATEDSecurity Researchers Uncover Cyber Espionage Network Invloving 103 Countries

A report released over the weekend by Information Warfare Monitor along with an exclusive story by the New York Times, revealed a 10-month investigation of a suspected cyber espionage network (dubbed GhostNet) of over 1,295 infected computers in 103 countries. 30% of the infected computers are labeled as high-value targets, including ministries of foreign affairs, embassies, international organizations, news media, and NGOs. Greg Walton, editor of Information Warfare Monitor and a member of the Toronto academic research team that is reporting on the spying operation, writes... more

Schneier: “Someone Is Learning How to Take down the Internet”

"Over the past year or two, someone has been probing the defenses of the companies that run critical pieces of the Internet," wrote renowned security expert, Bruce Schneier, in a piece published in Lawfare. more

EU and US Carry Out First Joint Cyber Security Exercise

The first joint cyber security exercise between the EU and US is being held today in Brussels, with the support of the EU's cyber security Agency ENISA and the US Department of Homeland Security. The day-long table-top exercise, named "Cyber Atlantic 2011", is using simulated cyber-crisis scenarios to explore how the EU and US would engage each other and cooperate in the event of cyber-attacks on their critical information infrastructures. more

FCC Introduces Broadband Labels

The Federal Communications Commission has introduced new broadband labels in order to provide consumers of mobile and fixed broadband Internet service with an easy-to-understand information about price and performance. "These labels provide consumers clarity about the broadband service they are purchasing, not only helping them to make more informed choices but also preventing surprises when the first bill arrives," said Chairman Wheeler. more

Net Neutrality Can Be Taken Too Far, Says Zuckerberg in Defense of Internet.org Project

While speaking at a town-hall-style meeting in India on Wednesday, Facebook CEO Mark Zuckerberg defended the company’s controversial Internet.org project, insisting on how the project can help connect parts of the country that otherwise wouldn’t have access to the Internet. more

Canadian Government Used Airport Wi-Fi to Track Travellers, According to Leaked Snowden Documents

A top secret document retrieved by U.S. whistleblower Edward Snowden indicates that Canada's electronic spy agency used information from the free internet service at a major Canadian airport to track the wireless devices of thousands of ordinary airline passengers for days after they left the terminal, according to a report from CBC. After reviewing the document, one of Canada's foremost authorities on cyber-security says the clandestine operation by the Communications Security Establishment Canada (CSEC) was almost certainly illegal...  more

Trojans Fastest Growing Category of Data-Stealing Malware

The Anti-Phishing Working Group (APWG) recently reported that the number of sites infecting PCs with password-stealing crimeware reached an all time high of 31,173 in December 2008 - an 827 percent increase from January. And according to a report just released by Trend Micro's Focus Report, 93 percent of data-stealing malware have been identified as Trojans in the first quarter of 2009. more