Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Author: admini

2006: E-security in Vietnam shaken by crimes

Posted on January 17, 2007December 30, 2021 by admini

The painful indication of these 2006 attacks is that there seems to be a trend of e-commerce businesses themselves using e-space to launch DDoS attacks or hack websites of their rivals. Mr. Nguyen Hoa Binh (Director of PeaceSofts chodientu.com), Mr. Phung Minh Bao (VietCo JSC) and Mr. Vu Trung (Director of Nhan Hoa) all said that somebody must be playing foul.

According to VNCERTs report titled “Increasing Co-operation in Preventing E-Commerce Crimes which was read at the November 9 conference, the most popular unhealthy competition method among Vietnamese e-commerce businesses was to “hire hackers to destroy rivals operations. VNCERT warned of 5 common e-commerce crimes: 1 International swindling through emails (phising); 2 Falsifying, transacting and laundering money through credit cards; 3 Developing bot networks to refuse services, send spam emails and pops-up; 4 Attacking e-commerce systems for business and competition reasons; 5 Sending spam emails to Vietnams e-space on a large scale.

Looking ahead to what will be awaiting e-security in 2007, many worry about the prospect of the large-scale online destruction and mushrooming of botnets developed by Vietnamese hackers for commercial reasons.
These botnets are chiefly engaged in such activities as sending spam emails on a large scale, phising, stealing information, refusing services or laundering money. In the near future, Vietnamese hackers may catch up with foreign ones in setting up their own ingeniously destructive networks. It is now unclear how ISPs and responsible authorities will face the new e-security trend in e-commerce in 2007. But according to Mr. Hoang Ngoc Dieu, an expert on e-commerce solutions in Sydney (Australia), as well as the HVA forums administrator, 2007 will be the threshold year of Vietnamese e-commerce.

http://english.vietnamnet.vn/biz/2007/01/654412/

Read more

Firms Fret as Office E-Mail Jumps Security Walls

Posted on January 12, 2007December 30, 2021 by admini

If employees are just forwarding to their Web e-mail, we have no way to know what they are doing on the other end, said Joe Fantuzzi, chief executive of the information security firm Workshare.

Hospitals have an added legal obligation to protect patient records. When DeKalb Medical Center in Atlanta started monitoring its staff use of Web-based e-mail, it found that doctors and nurses routinely forwarded confidential medical records to their personal Web mail accounts not for nefarious purposes, but so they could continue to work from home. DeKalb now forbids the practice, and uses several software systems that monitor the hospitals outbound e-mail and Web traffic.

Even the security experts most knowledgeable about the risks of e-mail forwarding to personal accounts acknowledge doing so themselves. Bargero said she often used her Yahoo Mail account on business trips so she does not have to access her corporate network remotely. It is difficult to quantify exactly how many otherwise model employees are opting to use services like Yahoo Mail or Googles Gmail over their companys authorized e-mail programs.

At the business software maker BEA Systems, Anthony Bisulca, a senior security analyst, estimated that around 30 percent of his employees were using private e-mail accounts in the office, even though the companys Internet policy clearly prohibits it.

Many corporate technology professionals express the fear that Google and its rivals may actually own the intellectual property in the e-mail that resides on their systems. If you cant trust employees enough to use services like Gmail, they probably shouldnt be working for you, he said.

In a survey conducted last year, the e-mail security firm Proofpoint found that 37 percent of companies in the United States used software to monitor office use of Web mail.

This year, Google plans to introduce a more secure version of Gmail for use in large companies. But Microsoft and other providers of traditional internal e-mail systems, which the research firm Radicati says generated $2.5 billion in sales last year, are helping companies combat employee use of the Web services.

http://www.nytimes.com/2007/01/11/technology/11email.html

Read more

Enterprise Search And Destroy

Posted on January 3, 2007December 30, 2021 by admini

According to IDC analyst Sue Feldman, the field of electronic document search and retrieval has “gone from practically zilch three years ago” to achieving 30 percent growth over the past year, in large part thanks to the changes to the FRCP. No wonder that established enterprise search application vendors like Autonomy, Recommind and Exalead have introduced new products or tweaked existing software to meet demand for the efficient storage and retrieval of electronic communications. For instance, Exalead CEO Alain Heurtebise told me that his Paris-based company closed a deal with EDS’s Italian subsidiary in 2006, and is being considered by IBM as an OEM partner for a storage and e-discovery application.

Paris-based business intelligence vendor Business Objects (Quote) picked Attensity to be its search partner in November, while Nstein has recently signed deals with Cognos (Quote) and Computer Sciences Corp. (Quote).

E-discovery application vendors promote their own special sauce for allowing corporate lawyers to sift through reams of data while de-duping and otherwise reducing irrelevant search results.

“If you’re ignorant about what you’re looking for, you’re obliged to go by serendipity,” he said.

http://www.internetnews.com/bus-news/print.php/3651836

Read more

Banks Starting to Embrace Concept of Financial Supply Chain Management

Posted on January 1, 2007December 30, 2021 by admini

“It’s the layer atop the physical supply chain,” explains Michael Sugirin, Americas product specialist for financial supply chain management, global transaction banking, with Frankfurt-based Deutsche Bank (US$1.3 trillion in assets). “It spans the planning and execution of payments between trading partners, whether they’re the buyer or a supplier managing cash flow, working capital and key risk factors.”

“It’s visibility into the movement of information that has a financial impact across all the participants in a supply chain so that informed decisions can be made efficiently,” adds La Hulpe, Belgium-based SWIFT’s Christopher Conn, regional solutions manager, supply chain services, North America, banking industry division. “There are a lot of parallels between the physical and financial supply chain. You’re creating synergies by combining all this information into one service set.”

Financial supply chain management also is a means to further eliminate paper from the world of international trade. “A lot of these payments are still done with paper, in addition to the paper that follows these transactions around,” explains Richard Winston, director of payments and processing for North America financial services at Accenture (Chicago). “Automation stops at the interface point between counterparties. Corporates want an electronic facilitation of the process so you can use imaging and workflow engines, not paper and checks.”

Once again, banks are being driven to reevaluate some long-established paper-based processes to make life easier for their clients. “The goal is to create benefits for corporates around operational efficiency and working capital management,” says Tim House, director, global supply chain strategy, for Charlotte, N.C.-based Wachovia ($700 billion in assets). “You want to give them the ability to squeeze more cash out of their supply chain.” Of course, when the paper is cut out of the process, so too is a good deal of cost, relates National City’s (Cleveland; $140 billion in assets) Craig Schurr, SVP, global trade and treasury. “There’s a cost every time someone makes a payment,” Schurr comments. “There are costs for the whole trade cycle. The current thinking [among banks] is to find ways to drive that cost to the lowest point possible for clients.”

And beyond the financing costs, continues Schurr, is the cost associated with the transport of physical paper in the trade process. “With international trade, there’s a documentary/paper component that involves the movement of paper among couriers,” he says.

By employing imaging technology, banks such as National City are attempting to capture the paper at the earliest point possible in the process in an attempt to cut out one of the middlemen — in this case, the courier service. “We capture an image of the documents at our Hong Kong partner, for example, and make that available to the buyer in the U.S. so the purchase order information can be viewed as it becomes available,” relates Schurr. According to Wachovia’s Chris Ward, SVP and manager, payables and receivables solutions, this kind of real-time, actionable data availability is just what banks’ corporate clients desire. “Our customers are driving toward speeding up their supply chains to get more transparency and visibility into them,” he says.

“Payments are key to understanding what’s going on in the financial supply chain.” Corporate treasurers are keen on this because, traditionally, a lot of the processes have been very manual. They want to digitize trade information so they can more aggressively handle their business. Banks want to provide this real-time synchronicity to their clients.

The idea behind real-time insight into the supply chain is that if companies can keep tabs on the various trade transactions as they occur, they would have a better opportunity to move money around and generally make more-proactive business decisions, according to Ward. Part of financial supply chain management involves banks more intimately linking their systems with the enterprise resource planning (ERP) systems of their corporate clients in order to provide certain just-in-time services, according to SWIFT’s Conn.

Annette Hazapis, SVP, director, product management, global treasury management, at Cleveland-based KeyBank ($95 billion in assets) adds that the closer bank-client interaction enabled by financial supply chain management is yet another relationship-building opportunity for financial institutions. Those banks that are getting the picture early on already are making inroads on the international trade space for their clients and clients’ partners. For years, buyers and sellers paid for goods using letters of credit, where the bank would authorize the seller to draw drafts on a predetermined amount on the buyer’s behalf. And a level of risk is introduced into the transaction, particularly for the seller, because the goods ship with just the buyer’s assurance that it will pay, explains SWIFT’s Conn. But banks are wending their way into the open account process, he adds, eliminating some of the risk introduced with this method of payment by providing new supply chain services based on specific transaction flows.

http://www.banktech.com/showArticle.jhtml;jsessionid=RRQSPOOXIT1Y2QSNDLPCKHSCJUNN2JVN?articleID=196800488

Read more

Coast Guard mandates e-mail phishing training

Posted on December 28, 2006December 30, 2021 by admini

The Coast Guard is requiring the same of all Coast Guard personnel who connect to the services network over Standard Work Station III (SW III) computers, according to a Dec. 21 message sent to all personnel by Rear Adm. The Coast Guards requirement stems from directives by the U.S. Strategic Command regarding DOD Information Operations Condition (Infocon) procedures and Homeland Security Department policy directives on sensitive systems, Hewitts message said.

Last month, DOD raised its Infocon status from Level 5, or normal operating conditions, to Level 4 in the face of continuing and sophisticated threats to DOD networks.

http://www.fcw.com/article97216-12-28-06-Web

Read more

FTC gets broader authority to pursue foreign spammers

Posted on December 26, 2006December 30, 2021 by admini

It’s the start of an Interpol for the Internet. President Bush signed a bill that gives the commission broader authority to pursue e-crooks in other countries. The FTC had pushed for more than three years for the new powers, which will help it shut down scammers such as the polite Nigerians who e-mail thousands of people a day with tales of woe and promises of riches to those kind enough to help.

Increasingly, people operating e-mail scams or launching attacks with secretive programs that can steal personal information operate from Eastern Europe, Southeast Asia, Africa and other foreign locations. Sometimes they simply route their efforts through computer servers in multiple countries to make it more difficult for authorities to track them down.

“Commerce has gone global and so fraud follows.”

But the FTC said it had been hindered in such probes by legal barriers preventing it from sharing information with foreign countries or assisting them in their own investigations.

The legislation gives the FTC abilities similar to those granted in the 1990s to the Securities and Exchange Commission and the Commodity Futures Trading Commission to share information with foreign counterparts. Specifically, the US SAFE WEB Act — which stands for Undertaking Spam, Spyware, And Fraud Enforcement With Enforcers beyond Borders — gives the FTC the legal authority to share confidential information from its own investigations with foreign law enforcement authorities and assist them in their cases.

“These purveyors of bad applications can live in one country and affect people in 200 other countries,” said John Palfrey, executive director of the Berkman Center for Internet & Society at Harvard University. The center originally had some concerns with Smith’s legislation, particularly if the U.S. assisted investigations in other countries that have more restrictions on freedom of speech, said Ari Schwartz, the center’s deputy director. “It’s one thing to say that you want to be able to cooperate, but actually cooperating with foreign governments on these types of issues is more difficult,” said Schwartz, who recently attended a meeting in Brussels of the London Action Plan, a group promoting international cooperation on Internet fraud.

http://www.latimes.com/business/la-fi-foreignspam26dec26,1,741752.story?track=rss&ctrack=1&cset=true

Read more

Posts navigation

  • Previous
  • 1
  • …
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • …
  • 421
  • Next

Recent Posts

  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14
  • CSO News – 2024-04-15
  • IT Security News – 2023-09-25
  • IT Security News – 2023-09-20

Archives

  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CyberSecurity Institute | Powered by Superbs Personal Blog theme