AusCERT - The Year Begins

HOME

About AusCERT

Membership

PKI Services

Training

Publications

Sec. Bulletins

Conferences

News & Media

Services

Web Log

Site Map

Site Help

Member login

The Year Begins

Date: 01 January 2009

Click here for printable version

Hope you all had a Merry Christmas and a Happy New Year!

It's been quite quiet over the Christmas/New Year break, however we are still seeing the usual phishing and malware activity. If you have new staff starting, you may wish to bring them up to speed on your workplace security policies.

There has however been some interesting research conducted recently, including the exposure of a weakness in the internet's digital certificate system (SSL) . Counterfeit certificates are forged allowing attackers to impersonate virtually any website that relies on this security system. Around 200 PlayStation 3 game consoles were used to generate millions of certificates until one that matched the target certificate was created. They could then use it to appear as the legitmate website.
Scary stuff.

Have a good weekend.

Patrick