Summary: Critical infrastructure connectivity continues to increase risk, as demonstrated by a large number of industrial control systems being Internet accessible, some without authentication. News reports indicate that railways may have been attacked, although these attacks may have been of low significance and not targeted. Corporate boardroom videoconference systems have taken a blow as a researcher demonstrates various insecurities that allow eavesdropping. Symantec suggests temporarily disabling PcAnywhere software as a result of a source code leak increasing security risks, and US-CERT issues a Cyber Security Alert related to widespread DDoS attacks with various Anonymous DDoS tools and tactics.

Title: Symantec tells customers to disable pcAnywhere software| Reuters
Severity Level: High Severity
Published: Wed, 25 Jan 2012 19:18:20 +0000
Symantec recommends that customers temporarily disable pcAnywhere software due to a source code leak
Source: Symantec tells customers to disable pcAnywhere software| Reuters

Title: Hacking boardroom videoconferencing systems | Naked Security
Severity Level: Elevated Severity
Published: Wed, 25 Jan 2012 19:18:20 +0000
Videoconferencing systems may be vulnerable to eavesdropping attacks.
Source: Hacking boardroom videoconferencing systems | Naked Security

Title: 10K Reasons to Worry About Critical Infrastructure | Threat Level | Wi ...
Severity Level: Normal Severity
Published: Wed, 25 Jan 2012 19:18:20 +0000
Security researcher reveals many industrial control systems connected to the Internet
Source: 10K Reasons to Worry About Critical Infrastructure | Threat Level | Wi ...

Title: Hackers Breached Railyway Network, Disrupted Service | Threat Level | ...
Severity Level: Normal Severity
Published: Wed, 25 Jan 2012 19:18:20 +0000
News reports indicate that attackers have breached the security of railway transportation systems, however details indicate that this may not have been a targeted attack.
Source: Hackers Breached Railyway Network, Disrupted Service | Threat Level | ...

[more]

What Will Trigger Widespread Worldwide IPv6 Deployment?

Everyone is wondering when IPv6 will actually be deployed in earnest on the global Internet.  While there are a handful of enterprises that have extensive internal IPv6 deployments, the ratio of IPv6 to IPv4 traffic in the global Internet is still very small (See “World IPv6 Day: Final Look and “Wagon’s Ho!”). I have a [...]
Tue, 06 Dec 2011 14:20:49 +0000

The importance of DARPA funding

As many of you know, Arbor Networks was founded in 2000 in order to commercialize research I did as a graduate student with Farnam Jahanian, my advisor at the electrical engineering and computer science department at the University of Michigan. The research we did, and everything that followed, would not have been possible without a [...]
Wed, 09 Nov 2011 20:23:59 +0000

Cloud Signaling: From napkin to networks

Long time comin’! Cloud Signaling! Man… what a long time coming! I remember drawing the concept for cloud signaling at a Denny’s at about 1:30 in the morning way back in the Spring of 1999. Arbor wasn’t even incorporated at the time, but Farnam and I were talking about being able to hit a ‘big [...]
Thu, 03 Nov 2011 17:30:09 +0000

Thinking about the Futurecom

A major event took place in Sao Paulo, Brazil last month. No, I’m not referring to the Miss Universe Pageant that also happened at the same time at the Hilton in Sao Paulo. I’m referring to the Futurecom held at the Transamerica Expo. Futurecom is definitely the premier technology exposition in Brazil and in my [...]
Mon, 10 Oct 2011 11:19:25 +0000

Arbor Networks at Virus Bulletin 2011

Arbor’s ASERT team has a paper at this year’s Virus Bulletin conference in Barcelona, Spain. The paper, by Arbor’s Jeff Edwards and Jose Nazario, is titled A survey of Chinese DDoS malware and is based on some of the detailed analysis we did as part of the development of the ATLAS intelligence feed or AIF. [...]
Wed, 05 Oct 2011 19:44:25 +0000

[more]