Adrian-Tiberiu Oprea, whose gang targeted hundreds of Subway branches in the US, has been sentenced to a hefty 15 years in jail. Meanwhile a US business exec faces 5 years for stealing company data from his former employers, an Anonymous hacker has been hit with a gagging order, and a gang of phishers has been rounded up in South Africa.
Hector Monsegur, the notorious hacker known as "Sabu," once railed against the establishment. Now he owes his freedom to the good graces of federal authorities, who successfully lobbied for a six month extension on his sentencing.
If you spend a lot of time paying attention to IT (in)security it can drive you to rant on occasion. This is one of those occasions, as too many companies are putting their future and their customers at risk thinking that "IT security isn't our busniess".
George Fried,an, CEO of Stratfor, came forth with a public statement explaining what happened in the attacks against his company last December. He admitted fault, took responsibility and accused Anonymous of censorship that doesn't come openly from governments, but rather from people hiding behind masks.
Paul Ducklin joins Chet for the first Chet Chat of 2012. This week they discuss the privacy implications of smart meters, the recent research showing how WiFi routers are vulnerable due to an easy setup feature and password hashes.
Customers of Stratfor who had their account details published by Anonymous last month started receiving joke spam messages today containing the famous Rickroll video. This message is a pertinent reminder that many of our emails and business relationships were disclosed by cyber criminals last year and to never click links or open attachments in email messages.
A professor at Utah Valley University analyzed the leaked password hashes stolen by Anonymous from security firm Stratfor and determined even their security minded customers choose weak passwords.
As 2011 comes to a close it is clear there is much to be done to better secure our information in the "cloud". I look back at the major data loss incidents of the year and speculate this isn't the last we will see of our information being p0wned.