FTC probes

Investigations conducted on corporations and web companies that are suspected of different violations. One of the most common is not disclosing breaches and leaks against the entity that may affect their customers.

FURTHER INFORMATION

Read more

Tailgating

Also called piggybacking, this scheme is used in gaining access even without having any authorization by simply riding on another individual’s credentials. This includes faking an ID or presenting excuses in order to make the person believe the hacker is harmless.

Read full article

Read more

Baiting

Baiting is closely similar to a trojan horse, only it is conducted in the physical world. It involves leaving an infected media (e.g. flash drive, CD, floppy disk) in a public location with the intent of damaging a network or stealing from a PC.

GET MORE INFO

Read more

Phishing

Phishing is commonly seen in email messages, a very vulnerable avenue in illegally getting private data from unsuspecting users. A hacker can pose as a legit entity with a message that will compel the user to act at once.

READ FULL ARTICLE

Read more

Pretexting

Pretexting is basically used through inventing a scenario or pretending to be someone else in order to obtain the target’s desired information. Hackers can fake their way into gaining access to birthdate, social security number and bill amounts through establishing credibility. This is typically done more effectively when the impersonator has a confident and authoritative voice and have basic knowledge of the target.

FURTHER INFORMATION

Read more

Social Engineering

Social enginnering is a popular technique utilized by skilled hackers that is conventionally used on the phone or on a face-to-face encounter. It is called the art of handling people — the most vulnerable element in computer security — into divulging personal data and doing something that will benefit the hacker [...]

READ FULL ARTICLE

Read more

SQLi

SQL injection is a tactic used in attacking a database or a server via its front-end (e.g. website). Through putting parts of SQL statements in an entry field of the website, hackers can try and get the site to run the newly-created malicious command to the database itself, for instance, dumping its contents to a remote server under the control of the attacker [...]

CONTINUE READING

Read more

DDoS

Distributed Denial of Service attack is an onslaught of web traffic to a particular website that is launched to cripple its server. Flooding, or using up all of the website’s bandwidth and resources is a typical tactic for hackers who want to bring down the remote host, ergo the website along with it, for a period of time [...]

CONTINUE READING

Read more

Legal

Instances of legal measures taken that involves computer and network security. Also includes the legislative development that happened as hackers emerged and exploits became more widespread and damaging [...]

READ MORE

Read more

House passes cybersecurity bill as privacy concerns linger

House passes cybersecurity bill as privacy concerns linger

The House of Representatives go for the second round of Cyber Intelligence Sharing and Protection Act as it passed legislation on Thursday.

The newly granted powers are intended to stop computer security threats against a company’s rights and property. But the definitions are broad and vague. The terms allow purposes such as guarding against “improper” information modification and ensuring “timely” access to information, functions that are not necessarily tied to attacks.

Once handed over, the government is able to use this information for investigating crimes that are unrelated to the underlying security threat and, more broadly, for “national security” purposes, which is a poorly defined term that includes “threats to the United States, its people, property, or interests” and “any other matter bearing on United States national or homeland security.”

The bill’s vague definitions like “cybersecurity purpose” and “cybersecurity system” also raise the frightening possibility of a company using aggressive countermeasures. If a company wants to combat a threat, it is empowered to use “cybersecurity systems” to identify and obtain “cyber threat information.” But the bill does not define exactly how far a company can go, leaving it open to the possibility of abuse [...]

READ MORE ABOUT THIS POST

Read more