Github DDoS Attack As Seen By Google Slashdotby Soulskill on china at January 1, 1970, 1:00 am (cached at April 24, 2015, 11:36 pm)

New submitter opensec writes: Last month GitHub was hit by a massive DDoS attack originating from China. On this occasion the public discovered that the NSA was not the only one with a QUANTUM-like capability. China has its own "Great Cannon" that can inject malicious JavaScript inside HTTP traffic. That weapon was used in the GitHub attack. People using Baidu services were unwitting participants in the denial of service, their bandwidth used to flood the website. But such a massive subversion of the Internet could not evade Google's watchful eye. Niels Provos, engineer at Google, tells us how it happened. Showing that such attacks cannot be made covertly, Provos hopes that the public shaming will act as a deterrent.

Read more of this story at Slashdot.

As Malware Surges, U.S. Remains Biggest Source of Attacks (Dark Reading) SANS ISC SecNewsFeed(cached at April 24, 2015, 11:30 pm)

Study: Conficker declared top threat of 2014, but N. America targeted mainly by Angl SANS ISC SecNewsFeed(cached at April 24, 2015, 11:30 pm)

Study: Conficker declared top threat of 2014, but N. America targeted mainly by Angl SANS ISC SecNewsFeed(cached at April 24, 2015, 11:30 pm)

As Malware Surges, U.S. Remains Biggest Source of Attacks (Dark Reading) SANS ISC SecNewsFeed(cached at April 24, 2015, 11:30 pm)

Aktivist mördad i Karachi SvD Utrikes(cached at April 24, 2015, 11:07 pm)

En medborgarrättsaktivist sköts till döds på fredagskvällen i Karachi i Pakistan av okända gärningsmän. Aktivisten Sabeen Mehmood hade lett ett seminarium om brott mot mänskliga rättigheter i Baluchistan och skulle återvända till sitt hem när hennes bil attackerades av beväpnade personer.
Två gripna för mordförsök SvD Inrikes(cached at April 24, 2015, 11:06 pm)

Två personer har gripits misstänkta för mordförsök efter en skottlossning i stadsdelen Skäggetorp i Linköping. Polisen fick larmet vid 19-tiden.
Microsoft, Chip Makers Working On Hardware DRM For Windows 10 PCs Slashdotby Soulskill on drm at January 1, 1970, 1:00 am (cached at April 24, 2015, 11:06 pm)

writertype writes: Last month, Microsoft began talking about PlayReady 3.0, which adds hardware DRM to secure 4K movies. Intel, AMD, Nvidia, and Qualcomm are all building it in, according to Microsoft. "Older generations of PCs used software-based DRM technology. The new hardware-based technology will know who you are, what rights your PC has, and won’t ever allow your PC to unlock the content so it can be ripped. ... Unfortunately, it looks like the advent of PlayReady 3.0 could leave older PCs in the lurch. Previous PlayReady technology secured content up to 1080p resolution using software DRM—and that could be the maximum resolution for older PCs without PlayReady 3.0." Years back, a number of people got upset when Hollywood talked about locking down "our content." It looks like we may be facing it again for 4K video.

Read more of this story at Slashdot.

Libya's lawlessness and migrant crisis AL JAZEERA ENGLISH (AJE)(cached at April 24, 2015, 11:00 pm)

A new European Union policy on migration is now in place, but the turmoil in Libya makes it difficult to enforce.
Auditors Tell Nuclear Plant Operator to Migrate 48,000 PCs Still Running Windows XP SANS ISC SecNewsFeed(cached at April 24, 2015, 11:00 pm)

DOD Says it May Respond to Threats With Offensive Cyber Measures (April 23, 2015) ( SANS ISC SecNewsFeed(cached at April 24, 2015, 11:00 pm)

Both Houses Introduce Legislation to Update Computer Fraud and Abuse Act (April 23, SANS ISC SecNewsFeed(cached at April 24, 2015, 11:00 pm)

Both Houses Introduce Legislation to Update Computer Fraud and Abuse Act (April 23, SANS ISC SecNewsFeed(cached at April 24, 2015, 11:00 pm)

Node.js Server-Side JavaScript Injection Detection Exploitation (Reddit) SANS ISC SecNewsFeed(cached at April 24, 2015, 11:00 pm)

Don't let your improper handling of digital evidence sink a cybercrime investigation SANS ISC SecNewsFeed(cached at April 24, 2015, 11:00 pm)