zero-day attacks

See the following -

After Stuxnet: The New Rules Of Cyberwar

Robert L. Mitchell | Computerworld | November 5, 2012

Critical infrastructure providers face off against a rising tide of increasingly sophisticated and potentially destructive attacks emanating from hacktivists, spies and militarized malware. Read More »

Obama Lets NSA. Exploit Some Internet Flaws, Officials Say

David E. Sanger | The New York Times | April 12, 2014

Stepping into a heated debate within the nation’s intelligence agencies, President Obama has decided that when the National Security Agency discovers major flaws in Internet security, it should — in most circumstances — reveal them to assure that they will be fixed, rather than keep mum so that the flaws can be used in espionage or cyberattacks, senior administration officials said Saturday.  But Mr. Obama carved a broad exception for “a clear national security or law enforcement need,” the officials said, a loophole that is likely to allow the N.S.A. to continue to exploit security flaws both to crack encryption on the Internet and to design cyberweapons.

Read More »

What Health Orgs Need To Know About Heartbleed

Lauren Still | Government HealthIT | April 10, 2014

As the greater health IT collective was preparing for the Windows XP end of life date, and accompanying zero-day attacks, another major security exploit hit the market without warning.

CVE-2014-0160, or Heartbleed (due to it exploiting a feature called heartbeat) nicknamed by the security firm that first publicly disclosed it, is a serious vulnerability in OpenSSL cryptographic software library.

Read More »