Cybersecurity by Denise Villarreal: Current Stories & Multimedia

Majority Staff Report for Chairman Rockerfeller,
Committee on Commerce, Science, and Transportation

This report presents an explanation of how the Target breach occurred, based on media reports and expert analyses that have been published since Target publicly acknowledged this breach on December 19, 2013. Although the complete story of how this breach took place may not be known until Target completes its forensic examination of the breach, facts already available in the public record provide a great deal of useful information about the attackers’ methods and Target’s defenses.

As of November 2013, Microsoft has expanded the participant pool for the Mitigation Bypass Bounty and the BlueHat Bonus for Defense. Program participants can now include responders and other individuals and organizations who turn in novel mitigation bypass techniques that they see used in attacks in the wild.

Constitutional and Statutory Privacy Protections
Richard M. Thompson II, Legislative Attorney
March 22, 2013

The age of "unified identity" is coming ... in fact many of you are already starting to get comfortable with it. Unified identity (sounds similar to SSO - Single Sign On) is a concept where you authenticate to a single place (FaceBook, let's just say) and then your identity is federated out to various other places. You've been using it for a while, probably, as have your family and friends.

Convenient, but is it a good idea?

Adobe is investigating the illegal access of source code for Adobe Acrobat, ColdFusion, ColdFusion Builder and other Adobe products by an unauthorized third party. Based on our findings to date, we are not aware of any specific increased risk to customers as a result of this incident.

The facts that lead to U.S. v. Weaver, 636 F.Supp.2d 769 (C.D. Ill. 2009).

A jury awarded nearly $5 million to a worker at a top secret research laboratory who was fired after trying to catch foreign hackers stealing sensitive information from U.S. computers.

Summary guide to Computer Crimes Law.

Cyberattacks of the most serious global concern should be included in a substantive international criminal law. The most serious global cyberattacks in the recent years, have revealed that almost nobody has been investigated and nobody has been prosecuted and sentenced.

Security is broken. Face it, it's not whether you'll be attacked and breached - it's about whether you can detect, respond and resolve active issues meaningfully. Get over shiny box syndrome, drop the false prophets of prevention, and get your fundamentals right. To this end, my blog seeks to disentangle some of the confusion and FUD from truth and reality, and give you tools to meaningfully improve your security. I am @Wh1t3Rabbit and these are my personal thoughts and opinions...

How Bugcrowd Works:
Crowdcontrol lets you easily de-dupe and validate vulnerability disclosures from our 7,800 researchers.

This wiki is an encyclopedia of the legal issues, cases, statutes, events, policies, people, organizations and publications that make up the global fields of information law, information technology law (often referred to as "computer law," "cyberlaw" or "Internet law") and telecommunications law. The wiki focuses on the laws, regulations and policy issues that impact the information, IT and telecommunications industries and those government entities, industries, organizations and people that control or use information, IT and telecommunications. It also contains an authoritative set of definitions for those legal, technical, economic, political and policy terms used in the wiki.