December 23, 2014

NOTE: Next update 1/2/15

News

• Attack on German Steel Plant Causes ‘Severe Damage’

• Chinese Criminals Blamed for Record Japan Bank Cybertheft

• CIA-led Panel Recommends no Penalty for CIA Hack of Senate

• Data Broker Charged with Selling Consumer Info for Fraud

• Egypt: Founding of State Cybersecurity Body Worries Rights Activists

• Entry Point of JPMorgan Data Breach Is Identified

• North Korea Suffers 10 Hour Internet Blackout

• Researchers Identify Critical Flaw in Global Cell Signaling Protocol

• Sony: Threatens to Sue Twitter / Obama Vows ‘Proportional’ Response / Obama: ‘Not Act of War’ / Faces Multi-Million Dollar Lawsuits

• South Korean Nuclear Operator Breached

• Staples: 6-Month Breach, 1.16 Million Cards Stolen

• Target Averts Most Breach Claims

Journals / Articles

• Android Based Malware Detection Using a Multifeature Collaborative Decision Fusion Approach

• Are Industrial Control Systems Ready for the Cloud?

• Block Based Medical Image Watermarking Technique for Tamper Detection and Recovery

• Crypto-Nets: Neural Networks over Encrypted Data

• Development of a Cyber Security Risk Model Using Bayesian Networks

• Hashing Pursuit for Online Identification of Heavy-Hitters in High-Speed Network Streams

• Instantiated First Order Qualitative Choice Logic for an Efficient Handling of Alerts Correlation [Request Full Text]

• iPersea : The Improved Persea with Sybil Detection Mechanism

• A Survey: Energy Exhausting Attacks in MAC Protocols in WBANs [Request Full Text]

• Taxonomy of SCADA Systems Security Testbeds [Request Full Text]

• Two Securities: How Contemporary Cyber Geopolitics Impacts Critical Infrastructure Protection

• New issue: Computer Fraud & Security

Reports / Blogs / Etc.

• Charlatans: The New Wave of Privacy Profiteers [ZDNet]

• Chthonic: A New Modification of ZeuS [Kaspersky Lab]

• Legislation to Facilitate Cybersecurity Information Sharing: Economic Analysis [Congressional Research Service – download via Federation of American Scientists]

• Lessons from the Sony Hack / Reacting to the Sony Hack [Bruce Schneier]

• ‘Misfortune Cookie’ Vulnerability Affects ~12 Million Routers [Check Point]

• Organizations Struggling to Defend Against Sophisticated Cyber Attacks [IBM]

• Protecting the Internet from Government Control [<re/code>]

• The Sony Hack: Norms and North Korea [Just Security]

• Underground Hacker Markets are Booming with Counterfeit Documents, Premiere Credit Cards, Hacker Tutorials, and 100% Satisfaction Guarantees [download via Dell SecureWorks]

• USBdriveby: How to Compromise a PC with a $20 Microcontroller [Security Affairs]

• Why All Journalists Should Use Encryption [Center for Global Communications Studies]

December 19, 2014

PLEASE NOTE: “★” indicates item containing leaked classified documents

News

• Banks Sue Kmart Over Credit Card Data Breach

• Canada’s Supreme Court OKs Searches of Arrestee’s Phones

• Congress Passes 4 Cybersecurity Bills

• Dutch Government Admits Spying on Terror Suspect Lawyers

• FBI: Iran Hackers May Target US Energy, Defence Firms

• FBI Used Metasploit to Deanonymize Tor Users

• 48,000+ Federal Workers Notified After KeyPoint Breach

• Google Considers Flagging HTTP Sites As Insecure

• Hackers Claim Massive Breach of Serbian Government Network

• ICANN Breached in Spearphishing Attack

• Lawsuits Over PF Chang’s Breach Dismissed

• Malware Infects 100,000+ WordPress Sites

• Maricopa County Colleges Hack Cost Tops $26M

• Microsoft Well-Supported in Irish Datacenter Fight

• New Verizon ‘Encrypted’ Voice App Has NSA Backdoor

• Sony: Breach May Cost ~$100 Million / Reportedly DDoSing File Sharing Sites / 47K+ Exposed in Unreported Breach / Threatens Reporters / Shelves Film After Hacker Threats / US May Now Blame North Korea (counterpoint) / Snapchat Business Plans Leaked

• SpamHaus, CloudFlare Attacker Pleads Guilty

• Unauthorized Cell Towers Found in Norway’s Capital

Journals / Preprints

• The Abandoned Side of the Internet: Hijacking Internet Resources When Domain Names Expire

• Complexity of Distance Fraud Attacks in Graph-based Distance Bounding

• Cyber-privacy or Cyber-surveillance? Legal Responses to Fear in Cyberspace [Request Full Text]

• An Elementary Completeness Proof for Secure Two-Party Computation Primitives

• Experiments in Encrypted and Searchable Network Audit Logs [more from Cryptology ePrint Archive]

• Fair Anonymity for the Tor Network

• Hasq Hash Chains

• Jamming Based on an Ephemeral Key to Obtain Everlasting Security in Wireless Environments

• Low-Complexity Cloud Image Privacy Protection via Matrix Perturbation

• Maximal Correlation Secrecy

• Optimized Combined-clustering Methods for Finding Replicated Criminal Websites

• Privacy-Preserving and Outsourced Multi-User k-Means Clustering

• Secret Sharing using Non-Commutative Groups and the Shortlex Order

• Secure State Estimation Under Sensor Attacks: A Satisfiability Modulo Theory Approach

• A Storage-Efficient and Robust Private Information Retrieval Scheme Allowing Few Servers

• Two Novel Applications of Bilinear Groups to ABE Encryption

• Very Low Cost Entropy Source Based on Chaotic Dynamics Retrofittable on Networked Devices to Prevent RNG Attacks

• New issue: IET Information Security [Request Full Text]

Reports / Blogs / Etc.

• CoolReaper Revealed: A Backdoor in Coolpad Android Devices [Palo Alto Networks]

• DIY UAVs for Cyber Warfare [Mike Tassey +  Rich Perkins / Security Affairs profile]

• The Future of Privacy [Pew Research]

• Google: End-to-End Encryption Goes Open Source, Moves to Github

• Inside the Firewall: Tracking the News That China Blocks [ProPublica]

• International Law and Cyber Attacks: Sony v. North Korea [Just Security]

• Kenya, the Next Surveillance State? [Access]

• Malware Attack Targeting Syrian ISIS Critics [Citizen Lab]

• Managing the Cyber Security Threat [Hoover Institution]

• Operation Socialist: How British Spies Hacked Belgium’s Largest Telco [Intercept] ★

• Threats at Sea: A Security Evaluation of AIS [Trend Micro]

• TISA Leak: EU Data Protection and Net Neutrality Threatened [Computerworld UK]

• TorrentLocker: Ransomware in a Country Near You [welivesecurity]

• The UK Cyber Security Strategy: Report on Progress and Forward Plans [UK Cabinet Office]

December 12, 2014

News

• Audit Reveals Continued Weaknesses in U. of Maryland Security

• bebe Stores Hit in PoS Hack

• Bloomberg: Iranian Hackers Hit Sands Casino

• Caymans Banks: No Legal Protection for Customers Against Data Theft

• Chicago Police Illegally Deployed Stingray Against Protesters

• FBI Calls For Law Facilitating Security Information Sharing

• Financial Industry Regulators Increase Data Security Oversight

• Germany Declines to Investigate FinFisher Spyware Manufacturer

• Ireland Retroactively Legalizes GCHQ Surveillance

• Microsoft Continues to Resist US Warrant Against Irish Data Center

• Mobile Payments Processor Breached for 5 Years, Sent Data in Plaintext

• Pirate Bay Taken Down in Police Raid

• Report: 93% of Chinese Government Sites Vulnerable

• Report: UK Police Lack Skills, Resources to Fight Cybercrime

• Senate Bill Calls for Voluntary Protection of Critical Infrastructure

• Sony: Stolen Certs Signed Malware /  Studio’s Dirty Laundry Revealed  / Employees Threatened / 100s of Passwords, Tokens Dumped / PlayStation Store Knocked Offline / FBI: North Korea Not Responsible / ALSO: IEEE on how not be Sony

• Sweden’s Largest ISP Crippled by DDoS

• Treasury Dept: Tor a Big Source of Bank Fraud

• ’08 Turkey Pipeline Blast ‘Opened New Cyberwar Era’

• UK Tribunal Rules Mass Surveillance Legal

Journals / Preprints

• Analysis of Maximum Likelihood and Mahalanobis Distance for Identifying Cheating Anchor Nodes

• Attacking and Securing Beacon-enabled 802.15.4 Networks [Request Full Text]

• Censorship Resistance: Let a Thousand Flowers Bloom?

• A Cryptographic Mutual Authentication Scheme for Web Applications

• Gesture-based Continuous Authentication for Wearable Devices: the Google Glass Case

• ‘I Don’t Have Anything to Hide, But…’: The Challenges and Negotiations of Social and Mobile Media Privacy for Non-Dominant Youth

• Integrated OCSVM Mechanism for Intrusion Detection in SCADA Systems [Request Full Text]

• Joint Anti-attack Scheme for Channel Assignment in Multi-radio Multi-channel Wireless Mesh Networks [Request Full Text]

• On Quantum Preimage Attacks

• PCkAD: An Unsupervised Intrusion Detection Technique Exploiting within Payload n-gram Location Distribution

• Phishing Detection in IMs using Domain Ontology and CBA – An innovative Rule Generation Approach

• Social Networks, Government Surveillance, and the Fourth Amendment Mosaic Theory

• SpoofedMe – Intruding Accounts Using Social Login Providers

• Survey of Strong Authentication Approaches for Mobile Proximity and Remote Wallet Applications – Challenges and Evolution

• Symbolic Universal Composability [Request Full Text]

• New issue: American Foreign Policy Interests [special issue on cybersecurity / Request Full Text]
• New issue: Cryptography & Communications [Request Full Text]
• New issue: Digital Investigation
• New issue: EDP Audit, Control, and Security Newsletter [Request Full Text]
• New issue: IEEE Transactions on Automatic Control [special issue on cyber-physical systems / Request Full Text]

Reports / Blogs / Etc.

• The Bot Baseline: Fraud in Digital Advertising [White Ops / summary]

• CIGI-Ipsos Global Survey on Internet Security and Trust

• Cybersecurity: Enhancing Coordination to Protect the Financial Sector [US Senate]

• Data Sent Between Phones, Smartwatches ‘Wide Open’ to Hackers [Ars Technica]

• Freedom on the Net 2014 [Freedom House]

• FIDO Alliance Final Authentication Specifications [summary]

• The Inception Framework: Cloud-hosted APT  [download via Bluecoat / summary]

• Mobile Privacy Concerns Often Traded for Free Apps [Norton]

• The Next Frontier for Hackers: Your Car [Southern California Public Radio]

• The ‘Penquin’ Turla: A Turla/Snake/Uroburos Malware for Linux [Kaspersky Lab]

• RedOctober APT is Back in Style [Kaspersky Lab / Also, an update to their Cyberthreat Real-Time Map]

• Russia’s Creeping Descent Into Internet Censorship [Wired]

• 2014 Retail Security Barometer [overview / Sophos]

• 2014 State of Risk Report [Trustwave / summary]

• Toward a Breach Canary for Data Brokers [Brian Krebs]

December 5, 2014

PLEASE NOTE: “★” indicates item containing leaked classified documents

News

• Australia Announces 1st Cybersecurity Review Since 2008

• Data Breach Hits Parking Vendor in Chicago, Seattle & Philadelphia

• Database of Legitimate ICS/SCADA Files and Processes Launched

• Feds Want Apple’s Help to Defeat Encryption, New Case Shows

• FireEye: Hackers Stole Secrets to Game US Stock Market

• 1st Ever US Spyware Conviction as Danish Man Pleads Guilty

• GCHQ’s Telco Ties Allowed Global Surveillance Reach ★

• German Court Blocks US Extradition for “Number Two” Hacker

• Poland Slammed in Security Audit

• Sony Breach May Have Exposed Employee Healthcare, Salary Data [More: 1, 2]

• Syrian Electronic Army Hacks Multiple News Sites

• Target Had Duty to Protect Data: Judge

• Xbox Live DDoSed Offline

Journals / Preprints

• Analyzing the BrowserID SSO System with Primary Identity Providers Using an Expressive Model of the Web

• The Cloaked-Centroid Protocol: Location Privacy Protection for a Group of Users of Location-based Services [Request Full Text]

• Countermeasures Against High-Order Fault-Injection Attacks on CRT-RSA

• Do Not Trust Me: Using Malicious IdPs for Analyzing and Attacking Single Sign-On

• Efficient and Secure DNS Cyber Shelter on DDoS Attacks [Request Full Text]

• Efficient Botnet Herding Within the Tor Network [Request Full Text]

• A Methodology for Estimating the Tangible Cost of Data Breaches

• On Subversive Miner Strategies and Block Withholding Attack in Bitcoin Digital Currency

• ScreenAvoider: Protecting Computer Screens from Ubiquitous Cameras

• SECOQC White Paper on Quantum Key Distribution and Cryptography

• Stability and Immunization Analysis of a Malware Spread Model Over Scale-Free Networks [Request Full Text]

• Towards a More Secure and Scalable Verifying PKI of eMRTD [Request Full Text]

• New issue: Security and Communication Networks [Request Full Text]
• New issue: International Journal of Critical Infrastructure Protection
• New issue: Technology Information Management Review [special issue on cybersecurity]

Reports / Blogs / Etc.

• China, a Fish Barrel for Cybercriminals [New York Times]

• Cisco 2014 Midyear Security Report

• Cybercriminals Abuse Charities to Verify Stolen Credit Cards [PhishLabs]

• An Evaluation Framework for Cyber Security Strategies [ENISA]

• Evolution of Black Markets After Operation Onymous [Security Affairs]

• Hacking PayPal Accounts with One Click [Yasser Ali]

• INCENSER, or How NSA and GCHQ Are Tapping Internet Cables [Top Level Telecommunications] ★

• Operation Auroragold: How the NSA Hacks Cellphone Networks Worldwide [Intercept] ★

• Is Uber’s Rider Database A Sitting Duck for Hackers? [Washington Post]

• Operation Cleaver [report RE: alleged Iranian state-sponsored hackers / Cylance]

• What Happens When Spies Can Eavesdrop on Any Conversation? [Defense One]