NSA Chief Exhorts Tech Industry to Join Effort to Bolster Security

 
 
By eWEEK Staff  |  Posted 2016-03-02 Print this article Print
 
 
 
 
 
 
 

DAILY VIDEO: NSA director makes plea to tech industry to partner on security; DROWN vulnerability hits SSL/TLS, but it's no Heartbleed; EMC, leaving HDDs behind, unveils several new flash arrays; and there's more.

 
Verizon, Yahoo Agree to Reduce Buyout Price to $4.55 Billion

DAILY VIDEO: Verizon negotiates down to $4.55B for Yahoo transaction; Congressional staffers see...

Google Tells RSA Show Audience How it Secures a Billion Android Users

DAILY VIDEO: How Google secures over a billion Android users; Amazon moves into teleconferencing...

Oracle Appeals Ruling in Java Infringement Dispute With Google

DAILY VIDEO: Oracle revives Java copyright infringement dispute with Google; Apple to Mark Smartphone...

Trump Administration Holds Back Executive Order on Cyber-Security

DAILY VIDEO: White House withholds cyber-security order for further revision; Cortana to help Windows...

Kaspersky Finds New Malware Designed to Hide in Memory, Steal Data

DAILY VIDEO: Kaspersky discovers new malware designed to stealthily steal data; Microsoft to shield...

U.S. Court Orders Google to Turn Over Data Stored on Overseas Servers

DAILY VIDEO: Federal court says Google must turn over data in foreign servers; Cisco report: mobile...

Leak of Windows 10 Cloud Suggests Microsoft Readying Chrome OS Fighter

DAILY VIDEO: Windows 10 Cloud leak points to potential Chrome OS fighter; TiVo's analytics pinpoint...

Google Shuts Down Short-Lived Hands Free Mobile Payment App

DAILY VIDEO: Google drops hands free mobile payment app; Microsoft Outlook on iOS welcomes Evernote...

Snap Inc. Files for an IPO Worth an Estimated $3 Billion

DAILY VIDEO: Snap Inc. makes it official, will go public next month; Microsoft sharpens Edge browser...

Google Wins Appeal of 'Right to Be Forgotten' Case in Japan

DAILY VIDEO: Japan's supreme court backs Google in 'right to be forgotten' case; HPE acquires...



Read more about the stories in today's news:

 
 
 

Today's topics include the National Security Agency director's plea for the tech industry to partner with it on security, Snapchat's disclosure that a data breach occurred because a fake CEO phishing email fooled a worker, how a new vulnerability is affecting the Secure Sockets Layer protocol and EMC's transition from hard-disk storage to new flash arrays.

U.S. Navy Admiral Michael S. Rogers, commander of the U.S. Cyber Command and director of the National Security Agency, took the stage at the RSA Conference in San Francisco on March 1 to say he wants to work with the technology industry to help defend both the security and privacy of Americans.

In an effort to improve security, Rogers said Cyber Command is looking at how data is stored, especially now that data is a commodity of interest to many who want to steal it.

Online fraudsters managed to fool an employee of photo-chat service Snapchat, convincing the unnamed worker to send information on several current and former employees to the attackers, the company said in a statement on Feb. 29.

Three days prior, an employee received an email sent to Snapchat's payroll department requesting financial information on an undisclosed number of employees.

The worker responded to the email and "payroll information about some current and former employees was disclosed externally," the company stated.

DROWN, which stands for "Decrypting RSA with Obsolete and Weakened eNcryption," is a newly disclosed vulnerability that could be exposing millions of sites to risk today.

The DROWN attack is a vulnerability that can enable an attacker to decrypt intercepted Transport Layer Security links by abusing connection to a Secure Sockets Layer Version 2 server that uses the same private key.

However, the DROWN attack is specific to the legacy SSL Version 2 protocol, and the impact of the flaw is not nearly as widespread as the Heartbleed SSL flaw that was discovered in April 2014.

EMC is in the process of being bought by Dell, but that hasn't discouraged it from introducing new data storage products.

On Feb. 29, EMC unveiled a new heavy-duty all-NAND flash array, a re-engineered VMAX all-flash array and new software for mainframes at the SHARE 2016 conference in San Antonio, Texas. The new flash products are a sign that EMC is saying good-bye to hard-disk drives.

 
 
 

Submit a Comment

Loading Comments...
 
Manage your Newsletters: Login   Register My Newsletters























 
 
 
 
 
 
 
 
 
 
 
Rocket Fuel