More troubles for Sony, as their PSN gets DDoS-ed on xmas day! The same group (called Lizard Squad) also attacks Tor - enough to cause a scare and force them to issue a warning.
Some information on Lizard Squad - seems like some kids seeking attention (which is common for DDoS attacks). However, since they have been giving interviews to BBC, we maybe looking at an arrest in the making.
More information out. The sqad is offering DDoS services for a fee. However, the whole setup looks amateurish. Back to my earlier thoughts, that the group seems only minimally competent, and looking for some lime-light.
Update 10-Jan-15:
Not surprisingly two members of the squad get arrested.
2014-12-27
2014-12-20
Security in Cloud Hosting
As IT Security professionals, we are usually quick to sign-off cloud security providers citing data-privacy and/or confidentiality concerns. However, that may not really be true any more. Things are changing and some service providers may even end up providing an orgnaization better security than their in-house data centers.
An article that seem to agree.
An article that seem to agree.
2014-12-18
ICANN Hacked
Not the worse news we have heard this month, but surely another embarrassment. Simply said, The Internet Corporation for Assigned Names and Numbers (ICANN) is a non-profit organization that is responsible for managing the internet.
2014-12-13
Alibaba Websites at risk
Smart-watches compromised
Some bluetooth connected watches checked, and apparently they share data with the phones in clear text. This sounds plain dumb. I am surprised this wasn't discovered sooner.
2014-12-04
Finally an easy [no] captcha!
Introducing No CAPTCHA, from Google. It's super simple for humans, and is even more secure against bots.
2014-11-26
Sony Pictures Hacked
Update 03-Mar-2016:
Some report about Operation Blockbuster & Lazarus Group ?
Update 02-Nov-15:
Sony pays $8M to staff, to settle lawsuits
Update 28-May-15:
How cyber-insurance saved the day for Sony, and why this is very important for all of us
Update 19-Apr-15
Wikileaks rolls out a easy to search dump of all the data!
Update 04-Feb-15:
Cost of the restoration/investigation = $35M
Update 26-Jan-15:
Please check my blog here, for a full sum-up
Update 24-Dec-14:
N. Korea got knocked off the internet by a DDoS. Some say US is behind this, in retaliation of Sony hack. But I am sure there is no basis of that theory. North Korea blames Obama!
Update 23-Dec-14:
Seems like there are numerous security gurus (skeptics or realists?!) who believe there is no real evidence to link N Korea with the Sony hack.
Update 20-Dec-14:
Some learnings for all corporates.
Update 17-Dec-14:
Troubles have started pouring in. Employees are filing a class-action law suit against Sony. And we have movie theaters cancelling the shows for the infamous 'interview' movie.
Update 13-Dec-14:
This is getting out of hand. Sony's digital certs have also been compromised, and are being used to sign malware, as legitimate 'sony software'
Update 03-Dec-14:
Employee salary data, healthcare data, and lots more was also leaked!
Update 01-Dec-14
This is really bad: the hackers leaked 5 unreleased movies to torrents. Which effectively means it is now impossible for Sony to contain the leak, since the movies will keep getting circulated over and over again via the P2P network. This will for sure mean some monetary loss for the movies.
Also in the news, is that Sony has hired FireEye's Mandiant to help with the breach.
Update 26-Nov-14
The troubles of Sony, do not seem to go away. This time the Sony Pictures website has been compromised, and "secret and top secret" data was stolen!
Some report about Operation Blockbuster & Lazarus Group ?
Update 02-Nov-15:
Sony pays $8M to staff, to settle lawsuits
Update 28-May-15:
How cyber-insurance saved the day for Sony, and why this is very important for all of us
Update 19-Apr-15
Wikileaks rolls out a easy to search dump of all the data!
Update 04-Feb-15:
Cost of the restoration/investigation = $35M
Update 26-Jan-15:
Please check my blog here, for a full sum-up
Update 24-Dec-14:
N. Korea got knocked off the internet by a DDoS. Some say US is behind this, in retaliation of Sony hack. But I am sure there is no basis of that theory. North Korea blames Obama!
Update 23-Dec-14:
Seems like there are numerous security gurus (skeptics or realists?!) who believe there is no real evidence to link N Korea with the Sony hack.
Update 20-Dec-14:
Some learnings for all corporates.
Update 17-Dec-14:
Troubles have started pouring in. Employees are filing a class-action law suit against Sony. And we have movie theaters cancelling the shows for the infamous 'interview' movie.
Update 13-Dec-14:
This is getting out of hand. Sony's digital certs have also been compromised, and are being used to sign malware, as legitimate 'sony software'
Update 03-Dec-14:
Employee salary data, healthcare data, and lots more was also leaked!
Update 01-Dec-14
This is really bad: the hackers leaked 5 unreleased movies to torrents. Which effectively means it is now impossible for Sony to contain the leak, since the movies will keep getting circulated over and over again via the P2P network. This will for sure mean some monetary loss for the movies.
Also in the news, is that Sony has hired FireEye's Mandiant to help with the breach.
Update 26-Nov-14
The troubles of Sony, do not seem to go away. This time the Sony Pictures website has been compromised, and "secret and top secret" data was stolen!
Subscribe to:
Posts (Atom)