NSA Chief Exhorts Tech Industry to Join Effort to Bolster Security

 
 
By eWEEK Staff  |  Posted 2016-03-02 Print this article Print
 
 
 
 
 
 
 

DAILY VIDEO: NSA director makes plea to tech industry to partner on security; DROWN vulnerability hits SSL/TLS, but it's no Heartbleed; EMC, leaving HDDs behind, unveils several new flash arrays; and there's more.

 
French Regulators Says Microsoft Collects Too Much User Data

DAILY VIDEO: French regulators accuse Microsoft of improper data use; Samsung denies Galaxy S7 Active...

Oracle Distributes Largest-Ever List of Software Security Patches

DAILY VIDEO: Oracle issues its largest patch update ever; Why BlackBerry CEO Chen doesn't worry about...

Government Requests for Google User Data Continue to Rise

DAILY VIDEO: Google sees government requests for user data growing; Google tries to charm European...

Softbank to Acquire Chip Designer ARM in $32.2 Billion All-Cash Deal

DAILY VIDEO: Softbank deal to buy ARM aimed at bolstering its IoT reach; the hacking of Ubuntu Linux...

Microsoft Releases Azure SQL Data Warehouse for the Cloud

DAILY VIDEO: Microsoft's Azure SQL data warehouse opens its doors to big data; IBM delivers secure...

Court Overturns Ruling Ordering Microsoft to Give DOJ Access to Email

DAILY VIDEO: Microsoft wins appeal in Ireland email case; EU lobs new set of antitrust charges at...

Microsoft Power BI Embedded Now Fully Available

DAILY VIDEO: Microsoft makes Power BI Embedded generally available; IBM joins Microsoft's Surface...

Samsung Galaxy Active S7 Fails Consumer Reports Water-Resistance Tests

DAILY VIDEO: Samsung Galaxy S7 Active smartphone flunks water tests; Salesforce testing Shield...

HPE Weighs Selling Software Assets: Report

DAILY VIDEO: HPE is reportedly considering selling software units; Qualcomm adds to its mobile chip...

Facebook Deploying Encrypted, Self-Destructing Messages

DAILY VIDEO: Facebook tests 'secret conversations,' self-destructing messages; Apple releases iOS 10...



Read more about the stories in today's news:

 
 
 

Today's topics include the National Security Agency director's plea for the tech industry to partner with it on security, Snapchat's disclosure that a data breach occurred because a fake CEO phishing email fooled a worker, how a new vulnerability is affecting the Secure Sockets Layer protocol and EMC's transition from hard-disk storage to new flash arrays.

U.S. Navy Admiral Michael S. Rogers, commander of the U.S. Cyber Command and director of the National Security Agency, took the stage at the RSA Conference in San Francisco on March 1 to say he wants to work with the technology industry to help defend both the security and privacy of Americans.

In an effort to improve security, Rogers said Cyber Command is looking at how data is stored, especially now that data is a commodity of interest to many who want to steal it.

Online fraudsters managed to fool an employee of photo-chat service Snapchat, convincing the unnamed worker to send information on several current and former employees to the attackers, the company said in a statement on Feb. 29.

Three days prior, an employee received an email sent to Snapchat's payroll department requesting financial information on an undisclosed number of employees.

The worker responded to the email and "payroll information about some current and former employees was disclosed externally," the company stated.

DROWN, which stands for "Decrypting RSA with Obsolete and Weakened eNcryption," is a newly disclosed vulnerability that could be exposing millions of sites to risk today.

The DROWN attack is a vulnerability that can enable an attacker to decrypt intercepted Transport Layer Security links by abusing connection to a Secure Sockets Layer Version 2 server that uses the same private key.

However, the DROWN attack is specific to the legacy SSL Version 2 protocol, and the impact of the flaw is not nearly as widespread as the Heartbleed SSL flaw that was discovered in April 2014.

EMC is in the process of being bought by Dell, but that hasn't discouraged it from introducing new data storage products.

On Feb. 29, EMC unveiled a new heavy-duty all-NAND flash array, a re-engineered VMAX all-flash array and new software for mainframes at the SHARE 2016 conference in San Antonio, Texas. The new flash products are a sign that EMC is saying good-bye to hard-disk drives.

 
 
 

Submit a Comment

Loading Comments...
 
Manage your Newsletters: Login   Register My Newsletters























 
 
 
 
 
 
 
 
 
 
 
Rocket Fuel