Tag Archives | the daily star

More of the storm photos from all around Lebanon

The Daily Star has some nice photos from almost all around Lebanon showing how the snow blanketed most of the Lebanese villages yesterday, in addition to photos of how bad the situation is in Hay El Sellom after Al-Ghadir flooded the whole area.

Aley

Aley

Baalbeck

Baalbeck

Bhamdoun

Bhamdoun

Dahr El Baidar

Dahr El Baydar 1

Dahr El Baydar

Damaged sea road in Dbayeh

Dbayeh

Hasroun

Hasroun

Hay El Sellom

Hay el sellom 1

Hay el sellom 2

Hay el sellom 3

Hay el sellom

Jezzine (Yep, nothing can take away our arguileh, not even a snowstorm)

Jezzine

Saida

Saida

For more photos you can check the Daily Star galleries here, here, and here. And for more about the flood in Hay El Sellom you can also check the below news report by Al Jadeed.

0

No, our banks are still vulnerable to cyber attacks

Remember when it was revealed back in August that many Lebanese bank have been targeted by a malware called “Gauss”? I bet people are starting to forget about the matter and there’s really nothing wrong about that. I mean you can’t expect people to keep talking about the issue for ever, but what’s really worrying is when regulators disregard the threat this malware is still posing to the information systems at our banks.

On September 15th, an article was published in The Daily Star aiming to assure everyone that Lebanese banks are safe and no one will be able to break into their systems because of the “preventive measures” they’re taking. What measures you may ask? Updating their antivirus programs.

Lebanese banks have upgraded their software security systems to block any virus designed to spy on transactions and operations, the Central Bank and IT experts said Thursday.

Jonny Torbey, the head of the IT department at Credit Libanais, said Lebanese banks have developed a security system to prevent any outside party from penetrating their computers regardless of how strong the virus. Read more here

I don’t claim to be a security professional, but I work in the IT sector, and if you also have some basic knowledge in IT and Information Security, you’ll know that updating programs and virus definitions is not sufficient to be protect yourself from cyber attacks. Even the biggest organizations in the world are not immune to attacks, but the difference is in how these organizations react when facing such issue, and that can only be done with proper policies, standards, processes, and systems in place.

A group of independent security professionals wrote this reply to let people know why these actions are insufficient and I decided to publish it here for you guys to read.

Lebanese banks upgrading anti-virus systems: Isn’t it business as usual? Are they truly willing to fight back?

First and foremost, the authors are speaking as Lebanese banking customers who happen to be subject matter experts!

Some of us have had first hands experience reacting to the Gauss Malware in Lebanese banks, and we have taken notice of the Central Bank memorandum released to the IT Departments of all Lebanese banks as well as last week’s related press release.

We can quite understand the need for such communication. It was surely aimed at re-increasing the level of confidence in Lebanese banks in the media and reassuring the general public, who are mostly illiterate in the works of Gauss.

However, knowing how lethal and stealthy the Gauss malware is, we are afraid that such an analysis, if considered sufficient and remained unchallenged, is hurting the Lebanese Banking’s sector reputation rather than increasing confidence in it.

Indeed, the quoted explanations might be misleading and give the impression that the Lebanese Central Bank might have not fully understood the dynamics of the Gauss malware, specially that the latter targets customers’ workstations rather than the banks’ Information Systems.

The reported solution consisting of upgrading the anti-virus systems alone will not prevent future sophisticated malware from targeting the Lebanese banking sector again! More dangerously it might encourage more lethal and frequent hacking and cyber-espionage…

Gauss falls into the category of highly advanced cyber-espionage attacks, more commonly known as Advanced Persistent Threats (APT), and is far from being a playground for script-kiddies.
By only conveying simplistic views about Gauss, the banking sector might not be showing enough readiness to fight back.

Moreover, when it comes to the Lebanese banking sector intrinsic sensitivity, it is quite shocking to read “Other bankers confidently say that they are not concerned about any virus because they insist that they have nothing to hide.”

Is the Lebanese Central Bank enforcing security standards as it should? Is it emphasizing more on implementing policies and procedures? Is there enough security awareness preached and are banks investing enough in this area?

Regulatory authorities should really focus more on pushing Lebanese Banks to become ISO 27001 certified with a clear Information Security Management System (ISMS).

Such a continuous improvement lifecycle will concretely increase Lebanese Banks’ reputation when it comes to operational risk management.

Apparently, much more work needs to be done there, and it’s not that great to hear about these attacks targeting same assets once again. We sincerely hope this will trigger some sort of a more serious action! An information security program must exist, and must be based on a well-established strategy with measured deliverables, and clear accountability for all the involved parties.

As too much time has elapsed between the Gauss info disclosure from Kaspersky and the “public” reaction from the Lebanese Central Bank, one could legitimately look for an officially appointed crisis management spokesperson. Such speaker would rely on a Computer Security Incident Response Team (CISRT) and/or relevant structure in order to protect the sector and the public from unverified media delivery and from misleading information.

It’s not a shame to admit our shortcomings as long as we are determined to work on eliminating them and reassuring the customers in parallel about all sorts of required actions taken to contain and eradicate this malware from the internal workspace.

Remember, big worldwide financial and non-financial companies got compromised too. Even the most sophisticated information security organizations’ operations got hacked as well, but with proper ISMS in place, they were able to stand on their feet and react quickly and expertly.

Remember the Confidentiality, Integrity, Availability (CIA) triad? It’s a great model, but we prefer CIAA instead – Last “A=Accountability” is what matters everywhere used…

To end on a lighter note, we all recall that Lebanese applause when the plane lands safely in Beirut airport but isn’t it business as usual to have a successful landing? The same applies to bankers “continuously updating their antivirus systems”: Isn’t it business as usual?

Sustainable security can only happen with a process enhancement security program!

4

Skiing and swimming in the same day

We’ve all heard a million times that in Lebanon you can ski and swim in the same day, but did you ever meet someone who really did that?

Alex Taylor, a reporter in The Daily Star, felt like confirming the myth a few days ago and actually went skiing at Mzaar in the morning, then drove around noon to Jbeil and hit the beach.

After a few runs, I’m feeling exhilarated, but a bit overheated and in need of a swim. It might be the booming tunes by Stereo Love and the Black Eyed Peas blaring from the lodge speakers or maybe subliminal messaging from all the billboards advertising vodka, but I’m feeling ready for another, world-renowned Lebanese pastime – to party. I take off my skis, intent on joining the snow bunnies drinking white wine at the lodge in their furry, Prada boots, but remember that I have a mission.

I’m off to Jbeil, following flashy Hummers driving down the mountain. As I descend, the temperature rises, as do the glorious smokestacks of the Zouk power plant just ahead. Beach, here I come. Source

And just like the article revolves around a cliche idea about Lebanon, it also has a cliche start and ending. For some reason, Alex started by comparing Lebanon to the rising phoenix, and ended it by telling that she still has to pay Skybar a visit to see the “real” Lebanon there (yeah right).

2

Powered by WordPress. Designed by WooThemes