CRIME FW: NIPC Daily Report for 19 February 2002

From: George Heuston (GeorgeH@private)
Date: Tue Feb 19 2002 - 07:02:26 PST

  • Next message: Zot O'Connor: "[PLUG-ANNOUNCE] Second ANNOUNCEMENT: February Adv Linux Topics (ALT) Meeting -- PGP/GPG"

     
    
    -----Original Message-----
    From: NIPC Watch
    To: Daily Distribution
    Sent: 2/19/02 6:32 AM
    Subject: NIPC Daily Report for 19 February 2002
    
    NIPC Daily Report 19 February 2002
    
    The NIPC Watch and Warning Unit compiles this report to inform 
    recipients of issues impacting the integrity and capability of the 
    nation's critical infrastructures.
    
    Food Marketing Institute (FMI) establishes ISAC with FBI. The Food 
    Marketing Institute signed an agreement with the National Infrastructure
    
    Protection Center (NIPC) on 15 February establishing a public and 
    private sector partnership with the Food Industry Information Sharing 
    and Analysis Center (ISAC) led by FMI. ISAC's serve as a voluntary 
    industry contact point for gathering, analyzing and disseminating 
    information between companies and the multi-agency NIPC. The Food 
    Industry ISAC will provide information and analysis that will enable the
    
    food industry to report, identify and reduce vulnerabilities to 
    malicious attack. The new ISAC will also help the NIPC identify and 
    assess credible threats, and craft specific warning messages for the 
    industry. (FMI.org, 15 Feb)
    
    Worm alert: Alcarys causes alarm. Anti-virus company Symantec warns that
    
    a new worm, W32.Alcarys@mm, has the ability to overwrite files and 
    infect Microsoft Word documents. Alcarys carries the subject line: 
    "sounds of sex and other stuffs", and contains four separate 
    attachments. (SIlicon.com, 15 Feb)
    
    802.1X can be toppled 'like set of dominoes.' Security researchers 
    suggest more security shortcomings in the way Wireless LANs are set up. 
    The standard falls short in providing access control, authentication and
    
    key management. The systems are vulnerable to session hijacking and 
    man-in-the-middle attacks. These conditions point to flaws in the way 
    that 802.1X works in combination with the 802.11 wireless networking 
    kit. (The Register, 15 Feb)
    



    This archive was generated by hypermail 2b30 : Sun May 26 2002 - 11:39:00 PDT