Information Protection and Security

The Monthly Chosun reports that a certified password to the Chemical Accident Response Information System (CARIS) set up by the National Institute of Environmental Research (NIER) was stolen by hackers on March 5 from a computer used by an officer at South Korean Army command. 
Article link

TalkTalk has criticised the government's proposals to cut off broadband service for unlawful file-sharers, after conducting a street-level test that found a high proportion of household Wi-Fi connections are vulnerable to hacking.

TalkTalk has criticised the government's proposals to cut off broadband service for unlawful file-sharers, after conducting a street-level test that found a high proportion of household Wi-Fi connections are vulnerable to hacking.

Phishing scam may also have breached e-mail services offered by Google and Yahoo.
Article link

A former teenage hacker who once served prison time for an online stock-trading scheme pleaded guilty last week to new charges of cracking a New York-based currency exchange service and gifting himself more than $100,000.

In the hacking case, the DOJ accused Leonard of illegally accessing the Web site of Zetaware, an oil- and gas-exploration software company and a competitor of PRA. During the intrusion, in October 2005, Zetaware's password-protected files were downloaded via a wireless computer network at the Houston airport, the DOJ said.

Attackers are using the old standby SQL injection en masse -- a look at the attack and how to protect your applications from it.

 
Computer scientists in Japan say they've developed a way to break the WPA encryption system used in wireless routers in about one minute. 

"The dramatic rise in attacks against social networking sites this year can primarily be attributed to attacks on popular new technologies like Twitter, where cross-site scripting and CSRF worms were unleashed," Ryan Barnett, director of application security research for Breach Security, said in a statement. "Looking back at 2008, a notable election year, government-related organizations were the top-ranked attack victims and have now dropped to number three.

The study concludes that the cyberattacks against Georgian targets were carried out by civilians, many of them recruited via social networking forums devoted to dating, hobbies and politics.
Article link