Welcome!

Government Cloud Authors: Elizabeth White, Pat Romanski, Dana Gardner, Liz McMillan, Gopala Krishna Behara

Blog Feed Post

Cell phone amplifiers can be hacked, DISA adding extra certs for cloud vendors and more

By

DISAHere are the top cyber news and stories of the day.

  • At Commerce Dept., false alarm on cyberattack cost almost $3 million – The Commerce Department was recently hit by a cyber attack, one it deemed “so vicious that the agency’s entire computer network had been put at risk.” The Commerce Department even had 200 employees “spend months without e-mail or access to Internet servers and databases.” This cut out communications to regional offices, and cost untold dollars in lost productivity. They also spent almost $3M on destroying ‘infected’ machines. However, the attack was merely a small infection on six machines, which could have easily been cleaned up by routine antivirus programs. This attack, and the reactions, demonstrate how important accurate diagnosis is. Via Washington Post, more here.
  • Malware campaign strikes Asian, European governments – It is sometimes nice to see that the US is not the only target of cyber attackers. “Trend Micro says it detected a targeted attack that sent malware-laden emails to representatives of 16 European countries and some Asian governments.” These emails are allegedly from the Chinese defense ministry, but those allegations have not been verified. Via ComputerWorld, more here.
  • Cell phone amplifiers can be hacked – Recently, some security researchers have found it possible to hack Verizon femtocells and siphon off personal data, directly from the device. They can record phone calls, take users’ browser history and grab text messages. Verizon claims they became aware of these vulnerabilities last year and have since fixed them, but it seems odd that they were still able to control the devices. Via SFGate, more here.
  • The ban on feds at Defcon draws a mixed reaction – In the past, Defcon has been a place where government folks and hackers of all sorts can meet on a common ground. However, after the PRISM news, it seems they are no longer welcome. This is unfortunate, because the event could have been a way for the government to reach out, and start to mend relationships, but that day will have to wait. Via ComputerWorld, more here.
  • Chinese APT Worked through Cloud – “The Chinese Advanced Persistent Threat (APT) group that targeted The New York Times last year used Dropbox and WordPress to carry out its missions, said researchers from Cyber Squared in a new report.” Dropbox allowed them to better anonymize themselves, and to move past some security measures. The attacks then used a WordPress blog for command and control, effectively hiding in plain sight. Via ISS Source, more here.
  • DISA cloud contractors face strict security standards –  ”The Defense Information Systems Agency anticipates up to 10 awards on a potential $450 million contract to provide cloud computing services to Defense Department agencies. But to make the cut, vendors will need to go through two vigorous certification processes in which government officials test whether their cloud offerings meet strict security standards.” DISA is instituting a second certification process which will occur after vendors pass the FedRAMP standard. With only a few vendors FedRAMP certified, they have a leg up on the competition. The final RFP for this project is due in August, with awards slated for March 2014. Via Federal Times, more here.
  • Governments are Big Buyers of Zero-Day Flaws – According to a recent NYT article, hackers are pouring over millions of lines of code, just looking for Zero-day exploits. They aren’t turning them into developers, but rather selling them to governments, often for hundreds of thousands of dollars. “The hackers in question run the company known as Revuln, and like France-based Vupen, it finds or acquires zero-day vulnerabilities that it can sell on to the highest bidder. Vupen charges its customers an annual subscription fee of $100,000 merely to see its catalog of flaws – and then charges extra for each vulnerability.” Via InfoSecurity, more here.

Read the original blog entry...

More Stories By Bob Gourley

Bob Gourley writes on enterprise IT. He is a founder of Crucial Point and publisher of CTOvision.com

IoT & Smart Cities Stories
The challenges of aggregating data from consumer-oriented devices, such as wearable technologies and smart thermostats, are fairly well-understood. However, there are a new set of challenges for IoT devices that generate megabytes or gigabytes of data per second. Certainly, the infrastructure will have to change, as those volumes of data will likely overwhelm the available bandwidth for aggregating the data into a central repository. Ochandarena discusses a whole new way to think about your next...
Dynatrace is an application performance management software company with products for the information technology departments and digital business owners of medium and large businesses. Building the Future of Monitoring with Artificial Intelligence. Today we can collect lots and lots of performance data. We build beautiful dashboards and even have fancy query languages to access and transform the data. Still performance data is a secret language only a couple of people understand. The more busine...
DXWorldEXPO LLC announced today that Big Data Federation to Exhibit at the 22nd International CloudEXPO, colocated with DevOpsSUMMIT and DXWorldEXPO, November 12-13, 2018 in New York City. Big Data Federation, Inc. develops and applies artificial intelligence to predict financial and economic events that matter. The company uncovers patterns and precise drivers of performance and outcomes with the aid of machine-learning algorithms, big data, and fundamental analysis. Their products are deployed...
All in Mobile is a place where we continually maximize their impact by fostering understanding, empathy, insights, creativity and joy. They believe that a truly useful and desirable mobile app doesn't need the brightest idea or the most advanced technology. A great product begins with understanding people. It's easy to think that customers will love your app, but can you justify it? They make sure your final app is something that users truly want and need. The only way to do this is by ...
CloudEXPO | DevOpsSUMMIT | DXWorldEXPO are the world's most influential, independent events where Cloud Computing was coined and where technology buyers and vendors meet to experience and discuss the big picture of Digital Transformation and all of the strategies, tactics, and tools they need to realize their goals. Sponsors of DXWorldEXPO | CloudEXPO benefit from unmatched branding, profile building and lead generation opportunities.
Digital Transformation and Disruption, Amazon Style - What You Can Learn. Chris Kocher is a co-founder of Grey Heron, a management and strategic marketing consulting firm. He has 25+ years in both strategic and hands-on operating experience helping executives and investors build revenues and shareholder value. He has consulted with over 130 companies on innovating with new business models, product strategies and monetization. Chris has held management positions at HP and Symantec in addition to ...
Cell networks have the advantage of long-range communications, reaching an estimated 90% of the world. But cell networks such as 2G, 3G and LTE consume lots of power and were designed for connecting people. They are not optimized for low- or battery-powered devices or for IoT applications with infrequently transmitted data. Cell IoT modules that support narrow-band IoT and 4G cell networks will enable cell connectivity, device management, and app enablement for low-power wide-area network IoT. B...
The hierarchical architecture that distributes "compute" within the network specially at the edge can enable new services by harnessing emerging technologies. But Edge-Compute comes at increased cost that needs to be managed and potentially augmented by creative architecture solutions as there will always a catching-up with the capacity demands. Processing power in smartphones has enhanced YoY and there is increasingly spare compute capacity that can be potentially pooled. Uber has successfully ...
SYS-CON Events announced today that CrowdReviews.com has been named “Media Sponsor” of SYS-CON's 22nd International Cloud Expo, which will take place on June 5–7, 2018, at the Javits Center in New York City, NY. CrowdReviews.com is a transparent online platform for determining which products and services are the best based on the opinion of the crowd. The crowd consists of Internet users that have experienced products and services first-hand and have an interest in letting other potential buye...
When talking IoT we often focus on the devices, the sensors, the hardware itself. The new smart appliances, the new smart or self-driving cars (which are amalgamations of many ‘things'). When we are looking at the world of IoT, we should take a step back, look at the big picture. What value are these devices providing. IoT is not about the devices, its about the data consumed and generated. The devices are tools, mechanisms, conduits. This paper discusses the considerations when dealing with the...