Author: admini

Officials said the new cyber policies have been guided by a decade of evolution in counterterrorism policy, particularly on the division of authority between the military and the intelligence agencies in deploying cyber weapons. But the intelligence agencies have the authority to carry out clandestine drone strikes and commando raids in places like Pakistan and Yemen, which are not declared war zones.

Obama is known to have approved use of cyber weapons once, early in his presidency, when he ordered an escalating series of cyber attacks against Iran’s nuclear enrichment facilities.

Another senior official said it was quickly determined that the cyber weapons were so powerful that — like nuclear weapons — they should be unleashed only on the direct orders of the commander in chief. That means the administration has ruled out the use of “automatic” retaliation if a cyber attack on America’s infrastructure is detected, even if the virus is traveling at network speeds. During the attacks on Iran’s facilities, which the U.S. never acknowledged, Obama insisted that cyber weapons be targeted narrowly, so that they did not affect hospitals or power supplies.

Link: http://www.startribune.com/nation/189605461.html?refer=y

The department said it was working with federal law enforcement to gather more information on the nature and scope of the attacks and assess the potential impact on staff and contractors.

It was not clear which divisions at the agency’s headquarters were breached in the attack, and it was also uncertain who the hackers were or where they were based.

A department spokesman declined to comment, and a spokesman for the Energy Information Administration, which publishes data that helps keep oil, gas and electricity markets stable, deferred to DOE headquarters.

In the past, Energy Department installations that design and build nuclear weapons, including the Los Alamos National Lab in New Mexico, have faced scandals over alleged mishandling of classified information. In 2006, for example, after raiding a house trailer containing a suspected small methamphetamine lab, local police found three computer memory sticks containing classified information downloaded from the Los Alamos lab’s computers.

One of the largest security scandals in modern U.S. history, the leaking of hundreds of thousands of State Department cables and military reports to the website WikiLeaks, allegedly occurred because, in an effort to share intelligence more widely with operations in the field, agencies sent classified reports electronically to battlefield intelligence units, where data protection measures were lax.

In late 1999, a Los Alamos nuclear weapons scientist born in Taiwan, Wen Ho Lee, was arrested and indicted for allegedly mishandling classified information from the lab.

Link: http://www.nbcnews.com/technology/technolog/energy-department-hacked-says-no-classified-data-compromised-1B8242980

The release said that this spear phishing campaign continues to show the sophistication and preparation of attackers, especially gathering intelligence on what social engineering will best entice targets. Also, Symantec Intelligence report (June, 2012) revealed that globally, the defense industry (a sub category of the Public Sector) has been the targeted industry of choice in the first half of the year, with an average of 7.3 attacks per day.

Organizations should thus ensure that proper email security is in place and also make patch management a priority, as the vulnerability exploited here was patched in 2011. Businesses will have to engage with IT security solutions providers as their business partners and engage with them in an ongoing, service level agreement based relationships.

Link: http://articles.timesofindia.indiatimes.com/2013-02-02/software-services/36703043_1_symantec-intelligence-report-targets-attackers