Friday, March 09, 2012

Security Management Weekly - March 9, 2012

header

  Learn more! ->   sm professional  

March 9, 2012
 
 
Corporate Security
Sponsored By:
  1. "No Motive Known for Pitt Psych Clinic Shooting"
  2. "Former Manager Sues Paula Deen, Brother for Workplace Abuse" Georgia
  3. "Drug Distributor is Tied to Imports of Fake Avastin"
  4. "Texas Tycoon Found Guilty in $7B Ponzi Scheme" R. Allen Stanford
  5. "Nursing Home in Meth Lab Fire Was Cited Earlier" Ohio

Homeland Security
Sponsored By:
  1. "Nigeria Deaths: Italian Anger at UK Over Rescue Bid"
  2. "Before Shooting, Fla. Students Joked About Fired Teacher"
  3. "Indian Journalist Arrested for Attack on Israeli Envoy"
  4. "Deputy, 2 Others Shot Outside Okla. Courthouse"
  5. "Immigrants With Long-Expired Visas Tough to Track"

Cyber Security
  1. "Cybersecurity Bills Duel Over Rules for Firms"
  2. "U.S. Report to Warn on Cyberattack Threat From China"
  3. "Attacks on Spanish and Vatican Sites After LulzSec Arrests"
  4. "Five Arrested in High-Profile Cyberattacks"
  5. "Hackers Had 'Full Control' of Hijacked NASA Network"

   

 
 
 

 


No Motive Known for Pitt Psych Clinic Shooting
Associated Press (03/09/12)

Two people were killed and seven others were injured in a shooting Thursday at a University of Pittsburgh psychiatric clinic located several miles from downtown Pittsburgh. The gunman was among the dead, and a police officer, several employees, and a visitor to the clinic were among those injured. The incident began Thursday afternoon, when a man armed with two semi-automatic handguns walked into the clinic's lobby and began shooting. University of Pittsburgh police officers responded and fired on the gunman. The gunman was eventually shot and killed. Although it appears that a University of Pittsburgh police officer shot and killed the gunman, Pittsburgh Mayor Luke Ravenstahl did not confirm that. As the shooting was unfolding, the University of Pittsburgh sent out text alerts warning of an active shooter and the possibility of a second gunman, though reports of a second assailant turned out to be false. The texts also urged recipients to stay where they were until further notice. In addition, SWAT teams closed the street where the clinic was located and put buildings near the clinic on lockdown. No information about the gunman has been released, and officials have yet to determine a motive for the shooting.


Former Manager Sues Paula Deen, Brother for Workplace Abuse
Savannah Morning News (Ga.) (03/07/12) Skutch, Jan

A former manager at a restaurant owned and operated by Paula Deen and her brother, Earl W. "Bubba" Heirs, will proceed. A Chatham County (Ga.) Superior Court judge rejected a gag order governing pre-trial comment on the sexual harassment lawsuit. In the lawsuit, Lisa T. Jackson, a former manager of Uncle Bubba's restaurant, claims she was the victim of violence and sexual harassment for the entire duration of her employment at the company. Deen lawyer Gregory Hodges argued for the gag order, claiming the suit was meant to force a $1.25 million settlement under threat to the Deen brand's reputation. Jackson alleges that Hiers sexually harassed her regularly and at times left her with a "reasonable fear of bodily injury with apparent ability to inflict such harm." Additionally, Jackson said that over the years she noticed systematic racial discrimination in the workplace. According to Jackson, black employees were often referred to with the "N" word and required to use the back entrance and separate bathroom. The Deen family vehemently deny the claims.


Drug Distributor is Tied to Imports of Fake Avastin
Wall Street Journal (03/06/12) Weaver, Christopher; Whalen, Jeanne; Faucon, Benoit

The Food and Drug Administration (FDA) is currently working with its international regulatory counterparts to determine the source of recently-discovered vials of counterfeit bevacizumab (Avastin), an expensive cancer treatment sold legitimately by Roche Holding AG. Thus far, investigators have determined that the fake product may have entered the U.S. via a "gray market" supply chain that delivers discounted medications to U.S. citizens from abroad. The discovery of the counterfeit Avastin has now put the spotlight on the growing problem of international companies trading in fake and/or harmful medications. When it was initially discovered, U.S. and British regulators initially named several companies believed to have shipped and marketed it, including Canada and Montana-based Montana Healthcare Solutions, and British drug wholesaler River East Supplies and Quality Specialty Products. All of the companies are controlled by Canadian drug distributor Thomas Haughton. He has reportedly been questioned about his dealings with his brother-in-law, Kris Thorkelson, a Canada-based pharmacist and entrepreneur who sells low-cost medicines over the Internet to consumers in the United States and elsewhere. Haughton says that his River East Supplies shipped the Avastin to the United States via Tennessee-based Volunteer Distribution, and claims to source his product "through EU regulated channels." Neither Haughton nor Thorkelson are believed to have been aware that the Avastin they sold was fake, and investigators are now focused on divining the rest of the drug's global journey. They believe it may have come to the European Union via Egyptian and Turkish companies. Turkey's Health Ministry says it is investigating the matter, and one European agency is investigating whether two Syrians helped transport the Avastin from Turkey. Beyond that, the origin of the drug is unknown, but pharmaceutical industry experts say such counterfeit products are often manufactured in China and travel through Dubai and other points in the Middle East to reach lucrative Western markets.


Texas Tycoon Found Guilty in $7B Ponzi Scheme
Associated Press (03/06/12)

R. Allen Stanford, a Texas businessman who was once considered one of the richest people in the country, was convicted Tuesday on 13 counts related to the $7 billion Ponzi scheme that he ran for 20 years. The jury found Stanford guilty after the prosecution presented evidence that showed that Stanford sold billions of dollars worth of certificates of deposits to investors through his bank in Antigua. In addition, evidence for the prosecution showed that Stanford lied to depositors by telling them that their money was being invested in stocks, bonds, and other securities when it was actually being funneled into his businesses and personal accounts. Stanford concealed the Ponzi scheme by working with one of his executives, who testified for the prosecution at the trial after reaching a plea agreement, to draw up fraudulent bank records, annual reports, and other documents. The most serious charge against Stanford carries a maximum sentence of 20 years, though he could end up spending more time in prison than that if the judge rules that his sentences should be served consecutively rather than concurrently. Stanford and three other indicted former executives from his companies still face a Securities and Exchange Commission lawsuit related to the Ponzi scheme, while the three executives also face a criminal trial in September.


Nursing Home in Meth Lab Fire Was Cited Earlier
CBS News (03/06/12)

One person was killed and four others were injured in a meth lab fire that broke out in an Ohio nursing home on March 4. The individual who was killed was a 31-year-old man who was neither a patient or an employee at the Park Haven Home in Ashtabula. Three of the four who were injured were residents, while the fourth person was a non-resident. The meth lab, which had been set up in the room of one of the residents of the nursing home, ignited Sunday evening and damaged one room and part of a hallway. Officials are trying to determine how the meth lab was set up in the room and how long it had been there. Authorities believe that two visitors and one resident at the nursing home knew about the meth lab. Two of the men who suffered injuries in the blaze are expected to be charged in the matter. The nursing home where the fire took place had been cited for more than a dozen violations last year, including failing to investigate how a resident had been injured and not adequately responding to complaints about the theft of residents' property.




Nigeria Deaths: Italian Anger at UK Over Rescue Bid
BBC News (03/09/12)

Two hostages who were being held by the Nigerian Islamist group Sokoto were killed during a rescue operation in Nigeria on Thursday. The hostages, 28-year-old Chris McManus of the U.K. and Franco Lamolinara of Italy, were taken hostage last May while working for an Italian construction firm involved in the building of the Central Bank of Nigeria's headquarters. Britain launched the rescue operation in conjunction with Nigeria on Thursday because it feared the men's lives were in danger. There are conflicting reports as to how McManus and Lamolinara died. Some have said that their captors killed them even before British and Nigerian military personnel arrived at the compound where they were being held, while one Nigerian security official said that the hostages were killed in a gun battle that took place during the rescue operation. The incident has angered Italian officials, who said that they were not consulted about the rescue operation before it was launched. British Prime Minister David Cameron said that the decision to act was made quickly because officials believed that they were losing the opportunity to rescue the men before their captors killed them.


Before Shooting, Fla. Students Joked About Fired Teacher
USA Today (03/07/12) Stanglin, Douglas

Students at Episcopal High School in Jacksonville, Fla., say they were aware that Shane Schumerth, the teacher who shot headmistress Dale Regan on March 6, had been fired and that they joked he would come back and "do something." The details of Schumerth's firing were not immediately released, but students say that they knew he had been fired and that he had to be escorted out of class. Some also described him as "awkward" or "shy" and said that it seemed he did not get along with other teachers. Schumerth returned to the school after being escorted off the premises and killed Regan with an AK-47 assault rifle in a guitar case before committing suicide. Other reports indicate that Schumerth had previously resigned from a Duval County public school in June 2010 for "personal reasons." At the time he was given "do not hire" status by public schools because he had violated an agreement binding him to stay three years at the school after being given a $1,000 bonus. Episcopal High School will remain closed until March 19.


Indian Journalist Arrested for Attack on Israeli Envoy
Associated Press (03/07/12)

Authorities in India have arrested a suspect in connection with last month's attack on an Israeli diplomatic vehicle in New Delhi. The suspect who was arrested was an Indian journalist who is believed to have been in touch with the person who affixed a magnetic bomb to the diplomatic vehicle during the attack. That vehicle was carrying the wife of an Israeli diplomat and her driver, both of whom were injured when the bomb went off. It remains unclear what news organization the journalist worked for. Indian officials have not yet said if Iran was behind the attack or not, saying that the investigation into the incident is continuing. Israel has blamed Iran for the attack in New Delhi as well as a similar one that took place in the former Soviet republic of Georgia the same day.


Deputy, 2 Others Shot Outside Okla. Courthouse
CBS News (03/07/12)

Police in Tulsa, Okla., report that a sheriff's deputy and two other people were wounded in a shootout with a man in the courthouse plaza on Wednesday. The man reportedly walked into the square then began firing in the air. Deputies exchanged fire with the shooter, and one of them was shot. An innocent bystander was also hit, but it was unclear whether he was hit by the suspect or by the deputies. The names of the shooter, the deputy, and the bystander have not been released, but none of their injuries appear to be life-threatening. Other reports indicate that the gunman fired at least two shots at the deputies, and that they fired multiple rounds back at them after ordering him to drop his gun.


Immigrants With Long-Expired Visas Tough to Track
Associated Press (03/06/12)

The case of Amine El Khalifi, the Moroccan national who lived in Alexandria, Va., and is accused of plotting a suicide bombing attack against the U.S. Capitol, has highlighted the concerns about foreign visitors who overstay their visas. El Khalifi arrived in the U.S. from Morocco on a tourist visa in 1999. That visa expired later that year, meaning that El Khalifi had been in the country illegally for 12 years when he was arrested for allegedly planning to attack the Capitol. One reason why El Khalifi was able to stay in the country illegally for so long is because the federal government does not make it a priority to go after people whose only crime is remaining in the country after a visa has expired. El Khalifi did have some small run-ins with police in Northern Virginia, though programs that could have identified him as someone who was in the country illegally were not in place at the time of his interactions with law enforcement. The case has prompted some lawmakers to call for better security measures that can identify foreign visitors who have remained in the U.S. after their visas expired. Among them is Rep. Candice Miller (R-Mich.), who said that the U.S. should implement an exit program that uses biometric data collected from foreign visitors when they are given visas and when they enter the country. Homeland Security Secretary Janet Napolitano has said that she agrees that such a system would be beneficial but that it would be too expensive to implement. The U.S. is already collecting fingerprints, photographs, and other information from almost all foreign nationals entering the country under the U.S.-Visit program.




Cybersecurity Bills Duel Over Rules for Firms
Wall Street Journal (03/08/12) Gorman, Siobhan

The Obama administration has backed a bipartisan cybersecurity bill that would require companies that own computer networks important to U.S. infrastructure, such as power companies, to meet certain security standards. The bill also removes legal barriers that would prevent companies and the government from sharing cyberthreat data. Companies would additionally receive liability protection. Finally, the bill calls for improved government computer security, such as continuous monitoring of networks for security weaknesses. Despite some differences with another Senate bill, and objections from Republicans who want to improve information sharing without regulating corporations, both lawmakers and and industry officials believe a bill will pass. Both measures are expected to reach the Senate floor soon. Much of the debate so far has focused on weather measures would be too costly for business interests. "This bill actually takes a really innovative approach to regulation," said James Lewis, a cybersecurity specialist at the Center for Strategic and International Studies who has advised the White House. The private sector, on the other hand, continues to support the Republican-backed bill, because it allows companies to set their own standards for security.


U.S. Report to Warn on Cyberattack Threat From China
Wall Street Journal (03/08/12) Gorman, Siobhan

A congressional advisory panel known as the U.S.-China Economic and Security Review Commission has released a report about the threat of a cyber attack from China. The report, which was written by analysts at Northrop Grumman, noted that Beijing would be almost certain to launch a cyber attack against the U.S. during a conflict with Washington. The first thing that China would do in such a situation, the report said, would be to check and improve the cyber surveillance capabilities that it has hidden in U.S. military communications systems. Military operatives in China would then work to identify possible targets for an attack, such as U.S. military commands and defense contractors, the report said. The report also noted that the nation's telecommunications systems could also be tempting targets for the Chinese. According to the report, the telecommunications supply chain is prone to tampering because some pieces of telecommunications equipment have components that are made at a number of different locations and because there are few controls on the distribution process that would prevent security breaches that take place after equipment has been manufactured. The report concluded that an attack on the nation's telecommunications systems could cause a "catastrophic failure" of critical infrastructure. Finally, the report noted that the U.S. has no standard for responding proportionally to a cyber attack from China in the event officials did not have clear evidence that proved who was behind the attack.


Attacks on Spanish and Vatican Sites After LulzSec Arrests
Wall Street Journal (03/08/12)

Hackers affiliated with the hacking collective Anonymous launched cyber attacks against Web sites run by the Vatican and Panda Security on March 7, according to reports from Catholic News and PC Magazine. In the attack against the Vatican, the Holy See's homepage became unresponsive at roughly mid-afternoon local time. E-mails to and from addresses with the vatican.va domain were also temporarily blocked. Members of Anonymous posted messages on a number of Web sites claiming responsibility for the attack, which they said was launched to exact revenge on the Vatican for the sexual abuse scandal and the past practice of selling indulgences for sins. Meanwhile, hackers from Anonymous also knocked 25 of Panda Security's Web sites offline and defaced them with their own messages. Attackers also posted the e-mails, usernames, and passwords of more than 100 Panda Security staff members online. Panda Security senior research advisor Pedro Bustamante said that some of that information belonged to employees who had not worked for the Spain-based organization in more than five years. Bustamante also noted that the attack did not result in a breach of Panda Security's internal network and that source code, update servers, and customer data were not accessed. The only thing that was breached, Bustamante said, was an external server that stored Panda Security's marketing campaigns and blogs. Anonymous may have targeted Panda Security because it has condemned LulzSec, another hacking group that is an offshoot of Anonymous.


Five Arrested in High-Profile Cyberattacks
CNN.com (03/07/12) Candiotti, Susan

Five members of the hacking collective Anonymous and its associated groups have been arrested in the U.S. and Europe and charged in a New York federal court with being involved in a number of cyber attacks against companies and government agencies. Four of the suspects, Ryan Ackroyd and Jake Davis, both of whom are from the U.K., and Darren Martyn and Donncha O'Cearrbhail, who are from Ireland, have been charged with conspiracy in connection with their alleged involvement in cyber attacks against Fox Broadcasting, Sony Pictures Entertainment, and the Public Broadcasting Service. O'Cearrbhail has also been accused of breaking into an Irish national police officer's personal e-mail account and listening into a conference call between police in Ireland, the FBI, and other law enforcement agencies about their investigations into the activities of Anonymous and other hacking groups. That call was allegedly recorded by O'Cearrbhail and the recording was given to other hackers. The fifth suspect, 27-year-old Jeremy Hammond of Chicago, has been charged with being involved in the cyber attack on Strategic Forecasting in December. The case against the five hackers was built with the help of another Anonymous hacker named Hector Xavier Monsegur, who agreed to cooperate with authorities as part of a plea agreement. Despite the arrests of the hackers, a spokesman for Anonymous said that the organization's long-term plans will not be disrupted.


Hackers Had 'Full Control' of Hijacked NASA Network
Telegraph.co.uk (03/05/12)

NASA Inspector General Paul Martin recently testified before Congress and told lawmakers that the space agency had suffered a number of cybersecurity breaches over the past year. According to Martin, hackers were able to break into computer systems at NASA more than a dozen times last year. In one breach that was discovered last November, hackers using IP addresses based in China broke into the computer network at NASA's Jet Propulsion Laboratory and gained complete control over computers there. After hacking into the network, the attackers were able to access sensitive files and alter, copy, or delete them, Martin said. He also noted that hackers were able to create new user accounts on mission-critical systems at JPL and upload hacking tools that allowed them to steal user credentials and break into other systems at NASA. System logs were modified so that JPL staff members would not be able to detect the attack, Martin said. Martin also said that hackers were able to carry out a separate attack in which they stole the user credentials of more than 150 NASA employees. Compounding the problem caused by these attacks is the fact that NASA has been slow to encrypt data stored on its laptops, Martin said. He added that the attacks are troublesome because hackers could cause significant financial damage and harm to the nation's security and its competitive technological edge by accessing the sensitive information that is stored on some of NASA's systems.


Abstracts Copyright © 2012 Information, Inc. Bethesda, MD


  ASIS also offers a daily and a non-sponsored, special-content Professional Edition of
Security Newsbriefs. Please click to see a sample or to contact us for more information.

Unsubscribe | Change E-mail | Advertising Opportunities | Security Management Online | ASIS Online

No comments:

Post a Comment