Category: cybersecurity

Auto Added by WPeMatico

Cybersecurity Insurance Not Paying for NotPetya Losses

Posted on By infossl
cybersecurity, hacking, insurance, malware, ransomware, russia, Security technology, war

This will complicate things: To complicate matters, having cyber insurance might not cover everyone’s losses. Zurich American Insurance Company refused to pay out a $100 million claim from Mondelez, saying that since the U.S. and other governments labeled the NotPetya attack as an action by the Russian military their claim was excluded under the “hostile … Read More “Cybersecurity Insurance Not Paying for NotPetya Losses” »

Cybersecurity for the Public Interest

Posted on By infossl
cryptowars, cybersecurity, essays, lawenforcement, nationalsecuritypolicy, publicinterest, rsa, Security technology

The Crypto Wars have been waging off-and-on for a quarter-century. On one side is law enforcement, which wants to be able to break encryption, to access devices and communications of terrorists and criminals. On the other are almost every cryptographer and computer security expert, repeatedly explaining that there’s no way to provide this capability without … Read More “Cybersecurity for the Public Interest” »

Cyberinsurance and Acts of War

Posted on By infossl
cybersecurity, cyberwar, insurance, Security technology

I had not heard about this case before. Zurich Insurance has refused to pay Mondelez International’s claim of $100 million in damages from NotPetya. It claims it is an act of war and therefor not covered. Mondelez is suing. Those turning to cyber insurance to manage their exposure presently face significant uncertainties about its promise. … Read More “Cyberinsurance and Acts of War” »

Hacking the GCHQ Backdoor

Posted on By infossl
backdoors, cryptowars, cybersecurity, encryption, gchq, hacking, Security technology

Last week, I evaluated the security of a recent GCHQ backdoor proposal for communications systems. Furthering the debate, Nate Cardozo and Seth Schoen of EFF explain how this sort of backdoor can be detected: In fact, we think when the ghost feature is active­ — silently inserting a secret eavesdropping member into an otherwise end-to-end … Read More “Hacking the GCHQ Backdoor” »

New Shamoon Variant

Posted on By infossl
cybersecurity, datadestruction, infrastructure, malware, Security technology

A new variant of the Shamoon malware has destroyed significant amounts of data at a UAE “heavy engineering company” and the Italian oil and gas contractor Saipem. Shamoon is the Iranian malware that was targeted against the Saudi Arabian oil company, Saudi Aramco, in 2012 and 2016. We have no idea if this new variant … Read More “New Shamoon Variant” »

Security Vulnerabilities in US Weapons Systems

Posted on By infossl
control, cybersecurity, departmentofdefense, encryption, nationalsecuritypolicy, operationalsecurity, passwords, reports, Security technology, vulnerabilities, weapons

The US Government Accounting Office just published a new report: “Weapons Systems Cyber Security: DOD Just Beginning to Grapple with Scale of Vulnerabilities” (summary here). The upshot won’t be a surprise to any of my regular readers: they’re vulnerable. From the summary: Automation and connectivity are fundamental enablers of DOD’s modern military capabilities. However, they … Read More “Security Vulnerabilities in US Weapons Systems” »

The US National Cyber Strategy

Posted on By infossl
cybersecurity, defense, nationalsecuritypolicy, Security technology, securitypolicies

Last month, the White House released the “National Cyber Strategy of the United States of America. I generally don’t have much to say about these sorts of documents. They’re filled with broad generalities. Who can argue with: Defend the homeland by protecting networks, systems, functions, and data; Promote American prosperity by nurturing a secure, thriving … Read More “The US National Cyber Strategy” »