[From the desk of Paul Davis – his opinions and no-one else’s]<\/p>\n
So onto the news:<\/p>\n
Hacker Implants NFC Chip In His Hand To Bypass Security Scans And Exploit Android Phones<\/p>\n
That\u2019s why US navy petty officer Seth Wahle, now an engineer at APA Wireless, implanted a chip in his hand, in between the thumb and the finger \u2013 the purlicue apparently \u2013 of his left hand. It has an NFC (Near Field Communications) antenna that pings Android phones, asking them to open a link. Once the user agrees to open that link and install a malicious file, their phone connects to a remote computer, the owner of which can carry out further exploits on that mobile device. Put simply, that Android device is compromised. In a demo for FORBES, Wahle used the Metasploit penetration testing software on his laptop to force an Android device to take a picture of his cheery visage.<\/p>\n
Link: http:\/\/paulgdavis.us3.list-manage2.com\/track\/click?u=45bf3caf699abf9904ddc00e3&id=cd2e16deb3&e=20056c7556<\/p>\n
Portland General Electric : WEI and Concordia University-Portland Introduce Incident Management Center for Utilities<\/p>\n
The new Incident Management for Utilities National Training Center is located at Concordia University’s Columbia River Campus, along with Concordia’s Center for Homeland Security Studies and Homeland Security Simulation Center.<\/p>\n
Link: http:\/\/paulgdavis.us3.list-manage.com\/track\/click?u=45bf3caf699abf9904ddc00e3&id=1cbfe61954&e=20056c7556<\/p>\n
Marsh Launches New Cyber Risk Assessment Solutions<\/p>\n
NEW YORK, Apr 27, 2015 (BUSINESS WIRE) — Marsh, a global leader in insurance broking and risk management, today announced the launch of Marsh Cyber Monitor and Marsh Cyber View, new cyber risk assessment services to help the risk management community effectively understand, measure, and manage their cyber risk. These offerings are part of a broader effort by Marsh to integrate its industry-leading risk and insurance advisory capabilities with best-in-class cyber technology and service providers to offer a unified solution of tools and resources companies need to better assess, mitigate, and manage complex cyber exposures.<\/p>\n
Marsh Cyber Monitor enables companies to understand their cyber risk by examining a comprehensive set of threat indicators that are continuously updated using a variety of data collection methods. With Marsh Cyber Monitor, individual companies can proactively understand their cyber security posture, gain insight into how their cyber risk is changing, and benchmark themselves against their peer group on an ongoing basis.<\/p>\n
Link: http:\/\/paulgdavis.us3.list-manage.com\/track\/click?u=45bf3caf699abf9904ddc00e3&id=60ea68f600&e=20056c7556<\/p>\n
Nine Threats to the Global Security Landscape<\/p>\n
Threat Horizon 2017, the latest in our annual series of reports which provide businesses a forward-looking view of the increasing threats in today\u2019s always-on, interconnected world, was released. In Threat Horizon 2017, it highlighted the top nine emerging threats, as determined by ISF research, to information security over the next two years.<\/p>\n
– Increased Connectivity Speeds Present Issues in Organizational Response Time<\/p>\n
– Criminal Organizations Become More Structured and Sophisticated<\/p>\n
– Widespread Social Unrest Breaks Out Led by \u2018Tech Rejectionists\u2019<\/p>\n
– Dependence on Critical Infrastructure Becomes Dangerous<\/p>\n
– Malicious Agents Weaponize Systemic Vulnerabilities<\/p>\n
– Legacy Technology Crumbles<\/p>\n
– Disruption to Digital Systems Leads to Verifiable Human Deaths<\/p>\n
– Global Consolidation of Organizations Endangers Competition and Security<\/p>\n
– Cost and Scale of Data Breaches Increases Dramatically<\/p>\n
– Be Prepated<\/p>\n
Link: http:\/\/paulgdavis.us3.list-manage1.com\/track\/click?u=45bf3caf699abf9904ddc00e3&id=11279bb7bb&e=20056c7556<\/p>\n
6 hard truths security pros must learn to live with<\/p>\n
The following six hard truths of IT security show not only why today\u2019s security solutions fall short but how we, as IT pros and an industry, can mitigate at least some of the inevitable fallout of imperfect security solutions.<\/p>\n
– Imperfect distribution of defenses<\/p>\n
– Insufficient staffing for deployment and monitoring<\/p>\n
– Hackers need to find only one weakness<\/p>\n
– Hackers can change tactics on a dime<\/p>\n
– Lack of focus on the right risks<\/p>\n
– No solution addresses the real root of the problem<\/p>\n
Link: http:\/\/paulgdavis.us3.list-manage1.com\/track\/click?u=45bf3caf699abf9904ddc00e3&id=be69461b25&e=20056c7556<\/p>\n
US hospitals to treat medical device malware with AC power probes<\/p>\n
The unnamed hospitals will be the first in a list to test the add-on monitoring platform dubbed WattsUpDoc to check for potentially life-threatening malware running on critical medical devices. PhDs Benjamin Ransford and Denis Foo Kune developed the platform which uses the \u201ctraditionally undesirable\u201d power consumption side channel to detect malware with the accuracy of desktop anti-virus at run-time without the need to modify the hardware or software of systems.<\/p>\n
Link: http:\/\/paulgdavis.us3.list-manage2.com\/track\/click?u=45bf3caf699abf9904ddc00e3&id=f37e5dd704&e=20056c7556<\/p>\n
NINETY PER CENT of Java black hats migrate to footling Flash<\/p>\n
\u201c2014 saw a shift from a balanced targeting of Java and Flash to over 90 per cent focus on Flash,\u201d the team told delegates to RSA San Francisco last week. \u201cThe drop in Java exploits corresponds to a new Internet Explorer feature which blocks the use of out-of-date Java.\u201d<\/p>\n
Link: http:\/\/paulgdavis.us3.list-manage1.com\/track\/click?u=45bf3caf699abf9904ddc00e3&id=e923129c76&e=20056c7556<\/p>\n
============================================================
\nFeedback, questions? Our mailing address is: ** dailynews@paulgdavis.com (mailto:dailynews@paulgdavis.com)<\/p>\n
If someone forwarded this email to you and you want to be added in,
\nplease click this: ** Subscribe to this list (http:\/\/paulgdavis.us3.list-manage1.com\/subscribe?u=45bf3caf699abf9904ddc00e3&id=e09452545a)<\/p>\n
** Unsubscribe from this list (http:\/\/paulgdavis.us3.list-manage1.com\/unsubscribe?u=45bf3caf699abf9904ddc00e3&id=e09452545a&e=20056c7556&c=52191dd12e)<\/p>\n
** Update subscription preferences (http:\/\/paulgdavis.us3.list-manage1.com\/profile?u=45bf3caf699abf9904ddc00e3&id=e09452545a&e=20056c7556)<\/p>\n","protected":false},"excerpt":{"rendered":"
[From the desk of Paul Davis – his opinions and no-one else’s] So onto the news: Hacker Implants NFC Chip In His Hand To Bypass Security Scans And Exploit Android Phones That\u2019s why US navy petty officer Seth Wahle, now an engineer at APA Wireless, implanted a chip in his…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29],"tags":[],"class_list":["post-1062","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/1062","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=1062"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/1062\/revisions"}],"predecessor-version":[{"id":3549,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/1062\/revisions\/3549"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=1062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=1062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=1062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}