• Santa Monica to identify, require retrofitting for, quake-vulnerable buildings

    Twenty years ago the city of Santa Monica, California passed laws requiring retrofitting of concrete, steel, and wood apartment buildings which were likely to collapse during an earthquake. The city stopped enforcing the laws a few years after it was passed. Beginning this year, Santa Monica will inspect, and require seismic retrofitting for, concrete, steel, and wood-frame buildings deemed vulnerable during a major earthquake.

  • Costs of extreme weather events multiply

    The United States sustained $1.15 trillion in economic loss in the past thirty years due to extreme weather, a trend that will continue if state and local governments do not prepare for future weather disasters, according to Munich Re, the world’s largest risk insurer.The GAO’s Mark Gaffigan told lawmakers that as a result of extreme weather, the federal government’s crop insurance program had increased four-fold since 2003, and the flood insurance program has a $24 billion debt.

  • Israeli defense company launches cybersecurity solutions section

    In recent months the Israel Aerospace Industries (IAI) has increased its cyberdefense-related activities. Esti Peshin, director of the company’s cyber section and a veteran of the IDF’s hush-hush sigint Unit 8200, says IAI is now developing solutions for clients in Israel and abroad. “We’re a start-up, but with the backing of a company that earns $3.5 billion a year,” she said. Ultimately, she implied, these defensive measures can be turned into offensive capabilities. “Intelligence is a subset of attack,” Peshin said. “This is, first of all, a national mission.”

  • New cyber-attack model helps hackers time the next Stuxnet

    Taking the enemy by surprise is usually a good idea. Surprise can only be achieved if you get the timing right — timing which, researchers argue, can be calculated using a mathematical model, at least in the case of cyber-wars. The researchers say that based on the stakes of the outcome, a cyberweapon must be used soon (if stakes are constant) or later (if the stakes are uneven). In other words, when the gain from a cyberattack is fixed and ramifications are low, it is best to attack as quickly as possible. When the gain is high or low and ramifications are high, it is best to be patient before attacking.

  • Torrential rain, hurricane-force winds, floods continue to batter U.K.

    Torrential rains, floods, and winds with speeds reaching 108 mph continue to batter south and west U.K., causing massive disruptions to power supply and road and rail transportation. Britain is enjoying a short respite today (Thursday), but meteorologists warned people to brace themselves for more chaos as another storm brings heavy rain, strong winds, and more risk of flooding on Friday and into the weekend. Severe flood warnings, indicating danger to life, remain in place in Berkshire, Surrey, and Somerset, where hundreds of homes have been evacuated.

  • Old-fashioned way to protect high-voltage substations

    There are about 45,000 substations in the United States, but far fewer high-voltage substations like the one attacked last April in Metcalf. California. Americans could see what the loss of just one important power substation can have when, in 2003, a failure in one such substation knocked out power to fifty million people in the United States and Canada for days. Illinois-based IDT says that since Biblical times, the method of thick-walled fortifications to halt manned and artillery attacks remains the best technology for protecting lives and important assets. The company says that its METALITH, a several-feet-thick prefabricated steel barrier structure filled with sand, would offer the best protection to vulnerable power substations. “While most of the electrical industry has been focused on the threat of cyber-terrorism, the San Jose [Metcalf is near San Jose] attack points to the need for physical protection of strategic power grid assets as well,” says Tom Carlton, IDT’s CEO.

  • W.Va. spill leads lawmakers, industry to look at reforming toxic substances law

    The government was slow to respond to the 9 January 2014 massive chemical spill in West Virginia because the law governing such response, the 1976 Toxic Substances Control Act (TSCA), limits regulatory agencies’ authority to investigate such spills.Under TSCA, the EPA must first prove that a chemical poses an unreasonable risk to health or the environment before it can require the needed testing that would show a potential risk. One observer called this a Catch-22, telling a congressional panel that “This is like requiring a doctor to prove that a patient has cancer before being able to order a biopsy.”

  • The “Mask": Kaspersky Lab discovers advanced global cyber-espionage operation

    Kaspersky Lab’s security researchers have announced the discovery of the Mask (aka Careto), an advanced Spanish-language speaking threat actor that has been involved in global cyber-espionage operations since at least 2007. What makes the Mask special is the complexity of the toolset used by the attackers. This includes a sophisticated malware, a rootkit, a bootkit, Mac OS X and Linux versions, and possibly versions for Android and iOS (iPad/iPhone). The primary targets are government institutions, diplomatic offices and embassies, energy, oil, and gas companies, research organizations and activists. Victims of this targeted attack have been found in thirty-one countries around the world.

  • Natural gas leaks a significant source of green-house gas methane

    Methane, a key greenhouse gas, has more than doubled in volume in Earth’s atmosphere since 1750. Its increase is believed to be a leading contributor to climate change. Where is the methane coming from, however? Research by atmospheric chemist Paul Wennberg of the California Institute of Technology (Caltech) suggests that losses of natural gas – regarded as the “cleanest” fossil fuel — into the atmosphere may be a larger source than previously recognized.

  • U.K. facing flood crisis, as prime minister warns victims they are in for “long haul”

    David Cameron warns flooding victims that they are in for a “long haul,” as the weather service says the weather will get worse this week, leaving thousands more homes at risk. There is a growing anger at the government by residents who complain that in addition to lack of preparation and response – thus, there were many complaints that sandbags intended for the worst-hit areas being “hijacked” and unavailable to stem the rising water – government agencies have not provided enough security after resident were ordered to evacuate, leading to looting of vacant homes. Officials have predicted that thousands more homes will be flooded over the coming days and said restoring the country’s battered rail network could take months.

  • Former FERC chair calls for mandatory security standards for high-voltage substations

    Jon Wellinghoff, the former chairman of the Federal Energy Regulatory Commission(FERC), is leading a crusade to improve physical security around the nation’s electrical grid. Following a 16 April 2013 sniper attack on a San Jose, California substation he is urging Congress to give federal agencies the authority to demand improved security around electrical substations. “This isn’t about this substation or this organized attack,” Wellinghoff said of the California incident. “This is more about the larger issue of physical security of these high-voltage substations nationwide and the need to ensure that some defensive measures start to be put in place.”

  • Israeli legal expert urges development of ethics code for cyberwarfare

    Col. Sharon Afek, former deputy military advocate general, says that countries would benefit from developing an ethics code to govern cyber warfare operations. He notes that existing law already prohibits cyber operations which would directly lead to loss of life, injury, or property damage, such as causing a train to derail or undermining a dam. “Israel faces a complex and challenging period in which we can expect both a cyber arms race with the participation of state and non-state entities, and a massive battle between East and West over the character of the future legal regime,” he writes. He acknowledges, though, that only a catastrophic event like “Pearl Harbor or Twin Towers attack in cyberspace” would accelerate developments in this area.

  • Lawmakers want mandatory security standards for national grid

    Lawmakers have urged the imposition of federal security standards on grid operator in order to protect the U.S. national electric grid from attack. The new push follows stories, first reported in the Wall Street Journal reported last Wednesday, about a 16 April 2013sniper attack which disabled seventeen transformer in a San Jose, California substation for twenty-seven days, causing about $16 million in damage. Federal cybersecurity standards for protecting the grid are in place and mandated, but rules for protecting physical sites such as transformers and substations are voluntary.

  • Coastal areas must adapt to sea-level rise and storm surges or suffer massive damage

    A new study presents, for the first time, comprehensive global simulation results on future flood damages to buildings and infrastructure in coastal flood plains. Drastic increases in these damages are expected due to both rising sea levels and population and economic growth in the coastal zone. Asia and Africa may be particularly hard hit because of their rapidly growing coastal mega-cities, such as Shanghai, Manila, and Lagos.

  • Attack on California power station heightens concerns about grid security

    Security experts are concerned that last year’s unsolved attack on an electrical-power substation in San Jose, California, is but a prologue to similar attacks which, if executed simultaneously and in a coordinated fashion against several such substations, could cripple the U.S. power grid. The transformers at the substation, vital for regional power distribution, were shot at by several gunmen and disabled for twenty-seven days. What is especially worrisome, security exert note, is that the attack appeared to have been carried out by people with some training, although the FBI said the agency does not think it was the act of terrorists.