IRC Federal Suffers Data Breach
Recently, cyber-attackers targeted IRC Federal and released sensitive information online. Anonymous Group has claimed responsibility for the latest attack. IRC Federal is a defense contractor, who assists United States (U.S) government and defense bodies such as Army, Navy, Federal Bureau of Investigation (FBI) and Department of Justice (DOJ) among several others. Earlier in the year, another defense contractor Lockheed Martin suffered cyber-attacks, which forced the company to replace SecurIDs of employees. Several reports indicated that attacks relate to a security breach at RSA, the security division of EMC and developer of SecurID electronic keys. In case of the latest attack on IRC Federal, Anonymous was reportedly successful in extracting and publishing confidential data, which includes documents related to Special Identities Modernization product, fingerprinting contracts, biometric projects and strategy contracts. Attackers were successful in compromising e-mail accounts of the IRC Federal employees and extracted privileged contractual information. The latest attack is part of the AntiSec movement launched by the attackers on alleged corrupt governments and business corporations. Anonymous has allegedly termed the attack on IRC Federal as response to the latter””””s cooperation with the U.S government agencies.
Ironically, Anonymous urged the employees to stop working for the organization and the government and join the fight against them. The group also reportedly left a quote by Martin Luther King indicating that those who accept evil are as much part of those perpetrating it. There is always a risk of misuse of leaked sensitive government and defense related information by terrorist organizations and rival intelligence agencies. IT professionals must update their technical skills and know-how through online technology degree programs.
IRC Federal has not confirmed the attack, but the organization””””s website is not accessible. Attackers reportedly initiated SQL injection attack to gain access to confidential databases. Websites are vulnerable to SQL injections. Use of parameterized queries, appropriate input validation and restricting use of SQL statements to those that are required by applications may help in reducing SQL injection attacks. Professionals qualified in IT masters degree and penetration testing may help organizations in understanding the security scenario, implementin
Cyber-attackers are increasingly targeting employees through spear phishing attacks. Employees must be encouraged to undertake online computer degree and e-learning programs to improve their security practices.
Contact Press
EC-Council
Website: http://www.eccuni.us
Email: iclass@eccouncil.org
Tel: 505-341-3228
EC-Council University is based in Albuquerque, New Mexico and offers Master of Security Science (MSS) degree to students from various backgrounds such as graduates, IT Professionals, and military students amongst several others. The MSS is offered as a 100% online degree program and allows EC-Council University to reach students from not only the United States, but from all around the world.
EC-Council is a member-based organization that certifies individuals in cybersecurity and e-commerce skills. It is the owner and developer of 16 security certifications, including Certified Ethical Hacker (CEH), Computer Hacking Forensics Investigator (CHFI) and EC-Council Certified Security Analyst (ECSA)/License Penetration Tester (LPT). Its certificate programs are offered in over 60 countries around the world.
EC-Council has trained over 80,000 individuals and certified more than 30,000 members, through more than 450 training partners globally. These certifications are recognized worldwide and have received endorsements from various government agencies including the U.S. federal government via the Montgomery GI Bill, Department of Defense via DoD 8570.01-M, National Security Agency (NSA) and the Committee on National Security Systems (CNSS). EC-Council also operates the global series of Hacker Halted security conferences.