CRIME NIPC Daily Report, 10 Apr 02

From: George Heuston (GeorgeH@private)
Date: Wed Apr 10 2002 - 07:32:15 PDT

  • Next message: Andrew Plato: "RE: CRIME Perspective on Criticisms leveled at Microsoft"

    Note Microsoft's free security analyzer, discussed infra--this should reheat
    the discussions!
    
    The NIPC Watch and Warning Unit compiles this report to inform 
    recipients of issues impacting the integrity and capability of the 
    nation's critical infrastructures.
    
    Vandals strike New York dairy farm tanks.  Since last fall 14 
    investigations have been opened in western New York State to determine 
    circumstances surrounding the dumping of antibiotics into milk storage 
    tanks.  In some instances, cows have been injected with antibiotics. 
    Authorities advise that only a small amount of antibiotic is required to
    
    contaminate a load of milk.  A vial dumped into one storage tank 
    contaminates the entire tank or truckload because collection trucks make
    
    numerous stops on a single run and the milk from each farm is mixed 
    together along the way.   None of the tainted milk has been placed on 
    store shelves or into milk products because milk is tested for 
    contaminants before being unloaded from the trucks at processing plants.
    
      To date, 44,000 gallons of milk worth approximately $49,000 has been 
    tampered with. (Associated Press, 8 Apr)
    
    INS sets new rules for student visas.  Hoping to better track foreign 
    visitors and keep out would-be terrorists, immigration officials are 
    tightening student visa rules and proposing shorter US trips for 
    tourists and business travelers.  Effective immediately, any foreigner 
    wishing to study in the US must have an approved student visa before 
    taking courses.  Also, the INS also is proposing to restrict tourists 
    and business travelers to 30-day visits, down from six months. 
    (Associated Press, 9 Apr)
    
    WWU Comment: These changes alone may have little effect on domestic 
    security.  The ability to track visas does not equal the ability to the 
    track visitors.
    
    District not ready for germ attack. According to a report commissioned 
    by DC Mayor Anthony Williams,
    Washington D.C. may be vulnerable to a biochemical attack because its 
    hazardous materials unit suffers from deficiencies in equipment, 
    funding, staffing, training, and fire management support.  The city is a
    
    target-rich environment with a high number of high-profile universities,
    
    hospitals, military and law enforcement facilities, government 
    buildings, research labs, and printing and engraving plants that could 
    be attacked.  The city's design is itself a vulnerability, given its 
    many traffic circles that could hinder emergency and evacuation 
    vehicles.  (Washington Times, 9 Apr)
    
    FAA faulted for inspection lapses. Three and a half years after 
    launching a program to more effectively inspect airlines for potential 
    safety problems, the Federal Aviation Administration still lacks the 
    people, training and management focus to carry out the job, according to
    
    a new government report. The report prepared by the US Transportation 
    Department's inspector general, faults the FAA for failing to carry out 
    adequately an enhanced inspection regime designed to keep closer tabs on
    
    the nation's largest carriers. Intended to be more proactive in 
    identifying and cracking down on operational and maintenance lapses, the
    
    initiative continues to lag behind in analyzing data and properly 
    training inspectors, the report says.  (Wall Street Journal, 9 Apr)
    
    Microsoft offers free tool for security checks.  On 8 April, Microsoft 
    Corp. made available a free tool designed to search out security 
    vulnerabilities hiding in Windows-based computers. Called the Microsoft 
    Baseline Security Analyzer (MBSA), the tool is intended to provide users
    
    with an easy way to check their systems for common problems that arise 
    when computers are configured incorrectly or when users fail to install 
    suggested security patches. After scanning a system with the tool, users
    
    receive a security report card that lists all the holes and 
    vulnerabilities found during the scan. The MBSA does not actually 
    download and install fixes, but provides instructions on how to do so. 
    The tool, which is 2.5M bytes in size, can be downloaded from 
    Microsoft's developer Web site at 
    http://www.microsoft.com/technet/security/tools/Tools/mbsahome.asp. 
    (IDG News Service, 9 Apr)
    



    This archive was generated by hypermail 2b30 : Sun May 26 2002 - 11:39:55 PDT