1. Perkembangan teknologi seperti sekarang ini tentu sangat berpengaruh besar terhadap sistem keamanan suatu negara. Suatu negara berkepentingan dengan sebuah negara lain pasti selalu ingin tahu isi dari perkembangan negara objeknya tersebut. Oleh sebab itu, salah satu cara yang digunakan adalah menyadap kegiatan para pejabat negara yang menjalankan roda pemerintahan negara yang disadapnya. Bahwasanya aksi penyadapan ini dilakukan dengan motif yang sangat beragam, antara lain : motif ekonomi, politik, ilmu pengetahuan, perdagangan, ekstra ordinary dan lain sebagainya. Menurut informasi yang berkembang di media massa yakni sumber media detiknews.com menunjukan bahwa pernyataan Kepala BIN Marciano Norman, terkait kemungkinan penyadapan yang dilakukan Kedutaan Amerika Serikat (AS) di Jakarta, dan Badan Intelijen Negara (BIN) sedang melakukan pendalaman informasi tersebut dengan meminta penjelasan counterpart Amerika Serikat yang ada di Jakarta dan disamping itu BIN juga sedang mencari bukti dari berbagai sumber lainnya, sehingga hasilnya akan dapat memberikan gambaran mengenai ada tidaknya penyadapan tersebut.
sumber :
http://news.liputan6.com/read/736522/amerika-serikat-panik-atas-perubahan-peta-global
2. MADRID (AP) — A Spanish judge charged nine people with fraud Sunday for allegedly participating in the theft of $45 million after a massive hacking of a bank's card payments system.
Judge Eloy Velasco of Spain's National Court said the suspects include seven Romanians and two Spaniards, who allegedly fraudulently extracted money from ATM's in February 2013.
The judge said there was evidence the suspects belonged to an international criminal organization that also laundered money and took part in credit card fraud.
Velasco said the cash extractions were perpetrated on a global scale and are linked to eight hackers in the United States who penetrated the security system of a company that handled an Omani bank's card payments operations.
Access code numbers were distributed by the hackers to cyber thieves around the world who made 34,000 cash extractions in 23 countries within a space of 13 hours, the court statement said.
Authorities in the United States calculated that $45 million were stolen, making it one of the biggest heists in the 20th century.
The Madrid gang allegedly took part in the theft, using received codes to extract $390,078 from ATM's in the early hours of Feb. 20, 2013, the judge said.
Velasco said the suspects had also raided a cash dispenser in a similar manner in December 2012.
U.S. secret services led Spanish police to the suspects, most of who were arrested in December.
Seven of the hackers behind the thefts were arrested in New York in May 2013 and the presumed ringleader of the gang was murdered in the Dominican Republic, according to US police. All of the hackers were U.S. citizens of Dominican ancestry, the statement said.
___
Associated Press writer Harold Heckle in Madrid contributed to this report.
source :
http://www.dailymail.co.uk/wires/ap/article-2763990/Spanish-judge-indicts-9-persons-cyber-fraud.html
3. Hackers launch attacks exploiting 'Shellshock' bug in Bash software
BOSTON, Sept 25 (Reuters) - Hackers have launched attacks exploiting the newly identified "Shellshock" computer bug, researchers warned on Thursday, as news surfaced that an initial patch for the issue was incomplete, suggesting even updated systems were vulnerable.
The attacks came as security experts scrambled to determine how many systems and what types of computers are vulnerable to "Shellshock," which some say may be as serious as the "Heartbleed" vulnerability that surfaced in April.
"Shellshock" is a bug in a piece of software known as "Bash" that runs the command prompt on many Unix computers, including some Linux servers that run websites, and tiny computers inside consumer devices such as routers and web cams.
"We don't actually know how widespread this is. This is probably one of the most difficult-to-measure bugs that has come along in years," said Dan Kaminsky, a well-known expert on Internet threats.
For an attack to be successful, a targeted system must be accessible via the Internet and also running a second vulnerable set of code besides Bash, computer experts said.
"There is a lot of speculation out there as to what is vulnerable, but we just don't have the answers," said Marc Maiffret, chief technology officer of cybersecurity firm BeyondTrust. "This is going to unfold over the coming weeks and months."
Joe Hancock, a cybersecurity expert with insurer AEGIS in London, said in a statement that he is concerned about the potential for attacks on home broadband routers and controllers used to manage critical infrastructure facilities.
"In some areas this will be a challenge to fix, as many embedded devices are not designed with regular updates in mind and will never be able to be patched," Hancock said.
Linux makers released patches to protect against attacks on Wednesday, though security researchers uncovered flaws in those updates, prompting No. 1 Linux maker Red Hat Inc to advise customers that the patch was "incomplete."
"That's a problem. It's been a little over 24 hours and we're still in the same boat," said Mat Gangwer, lead security consultant at Rook Security. "People are kind of freaking out. Rightfully so."
Russian security software maker Kaspersky Lab reported that a computer worm has begun infecting computers by exploiting "Shellshock."
The malicious software can take control of an infected machine, launch denial-of-service attacks on websites to disrupt their operations and scan for other vulnerable devices, including routers, said Kaspersky researcher David Jacoby.
He said he did not know who was behind the attacks and could not name any victims.
"Heartbleed" is a bug in an open-source encryption software called OpenSSL. The bug put the data of millions of people at risk, as OpenSSL is used in about two-thirds of all websites. It also forced dozens of technology companies to issue security patches for hundreds of products that use OpenSSL. (Additional reporting by Carolyn Cohn; Editing by Dan Grebler)
source :
http://www.dailymail.co.uk/wires/reuters/article-2769840/Hackers-launch-attacks-exploiting-Shellshock-bug-Bash-software.html
