Posts Tagged ‘security’

Can you guess which mobile device is hacked most often?

Tuesday, May 14th, 2013

Apple’s iPhone line of smartphones continues to be popular among consumers. Unfortunately, they’re also well-liked by a less savory group, hackers. Business Insider recently documented on a new study that discovered that the iPhone ranks as the most hacked mobile device. And most stunning? It’s not even close – the iPhone is the most hacked by a lot.

The most hacked

Business Insider cites research conducted recently by Web security firm SourceFire – “25 Years of Vulnerabilities” – in its story. As outlined by Source Fire, iPhones have registered 210 CVE – Critical Vulnerabilities – reports. In comparison, mobile devices powered by the Android operating system have just received 24 CVE reports. That’s a major difference.

Reasons

This begs the obvious question: Why have iPhones been hacked so many more times than have Android mobile devices? As with so many other big questions, there are no easy answers. Business Insider ponders whether part of the reason might be the iPhone’s popularity. The devices, in spite of everything, remain a top seller. But the SourceFire report states that Android has received fewer CVEs in 2012 than it did in 2011. This drop happened even though Android enjoyed a big rise in market share last year.

Another explanation?

In an interview with the ZDNet Web site, the author of the SourceFire report marvels if hackers don’t target the iPhone more often because it’s more of a challenge. Since of course, Android relies on an open platform. Consequently it’s relatively easy for criminals and scammers to create malicious apps for this platform. Users can then download them to their phones themselves. Hacking the iPhone, which does not use an open platform, might be more challenging. And that may inspire the nation’s best hackers.

Why you need to use two-factor authentication

Wednesday, April 17th, 2013

Think your business’s computer systems are protected with conventional passwords? Guess again. Too many of your staff rely on simple passwords that can be simple for hackers to figure out. Others use the same password for multiple Web sites, computers and mobile devices. Consequently once cyber criminals hack that password, they are able to easily gain access to numerous other sites and devices. That’s why a recent story by Biztech Magazine identifies two-factor authentication as a increasing trend among companies that take cyber security seriously.

Why a second step matters

The best way to prevent cyber crimes is to make hacking more of a challenge. That’s the reason, according to Biztech Magazine, two-factor authentication works so well. First, a worker must enter a password. But to gain access to their machines or Web sites, workers must also follow up with a second action. They might need to use a biometric identifier to gain access to a particularly sensitive Web site. Or, they might have to swipe a smart code or insert a token to log onto a computer. By adding a second step, your business will dissuade nearly all hackers.

The starting point

Not all your employees, though, will be happy about two-factor authentication. It requires more effort on their part, after all. But Biztech does provide a few recommendations for smoothing this rollout. First, the magazine suggests that you choose a second factor that will cause the least disruption among employees. As an example, Biztech uses the example of smart cards. Mobile devices such as smartphones are usually not compatible with these cards. That might be deal breaker for some organizations. Companies that have staff that work from a wide range of locations might not do well with physical tokens.

Take your time

Another factor to successfully launching two-factor authentication? You’ll want to take your time. Provide staff members with a window of time to read about the system and ask questions. This will likely boost the odds that your staff members will be on board with the change. If you launch the system without providing the proper education, you’ll quite possibly alienate and aggravate your workers.

Don’t leave your small business vulnerable to a cyber attack

Tuesday, April 9th, 2013

Here’s what attracts cyber criminals: easy targets. This means that you can leave your small business exposed to a cyber attack if you don’t defend your company’s Wi-Fi systems with passwords or if you rely on passwords which are ridiculously easy to guess. In a current story outlining steps that small business owners can take to secure themselves from cybercrimes, Entrepreneur Magazine recommends that you do the small things that may make most hackers move on to easier targets.

Encryption Matters

Entrepreneur recommends you first encrypt all of your important data, anything from bank routing numbers to credit-card account information to employee Social Security numbers. Hackers like to steal this information. It’s how they eventually drain money from your small business. Entrepreneur’s advice? Turn on the full-disk encryption tools that are included with your computer’s operating systems. On Windows, this tool is named BitLocker. On Macintosh computers, it’s called FileVault. The tool, once activated, will encrypt every file and program on the drive.

The Lockdown Approach

Here’s a surprising fact from the Entrepreneur story: Many businesses end up being the target of cyber crimes only after burglars physically break into their offices and steal their laptops or other devices. Once equipped with your equipment, cyber criminals can potentially gain access to important company accounts and information. That’s why employees should, before leaving for the day, run a cable through the Kensington locks – the small metal loops attached to most computers and laptops – on their electronic devices and lock them to their desks. This may prevent some criminals, obsessed with completing their theft quickly, from bothering with the devices.

Wi-Fi Protection

Wi-Fi networks are often at risk from hackers. That’s why Entrepreneur Magazine suggests that businesses depend on wired networks preferably. But if your business clearly needs a Wi-Fi network, make sure to safeguard it with a complex password. Entrepreneur Magazine recommends a password made up of letters, numbers and symbols. Record this password and hide it in a safe or other secure location.

Don’t leave your small business vulnerable to a cyber attack

Tuesday, April 9th, 2013

Here’s what attracts cyber criminals: easy targets. This means that you can leave your small business exposed to a cyber attack if you don’t defend your company’s Wi-Fi systems with passwords or if you rely on passwords which are ridiculously easy to guess. In a current story outlining steps that small business owners can take to secure themselves from cybercrimes, Entrepreneur Magazine recommends that you do the small things that may make most hackers move on to easier targets.

Encryption Matters

Entrepreneur recommends you first encrypt all of your important data, anything from bank routing numbers to credit-card account information to employee Social Security numbers. Hackers like to steal this information. It’s how they eventually drain money from your small business. Entrepreneur’s advice? Turn on the full-disk encryption tools that are included with your computer’s operating systems. On Windows, this tool is named BitLocker. On Macintosh computers, it’s called FileVault. The tool, once activated, will encrypt every file and program on the drive.

The Lockdown Approach

Here’s a surprising fact from the Entrepreneur story: Many businesses end up being the target of cyber crimes only after burglars physically break into their offices and steal their laptops or other devices. Once equipped with your equipment, cyber criminals can potentially gain access to important company accounts and information. That’s why employees should, before leaving for the day, run a cable through the Kensington locks – the small metal loops attached to most computers and laptops – on their electronic devices and lock them to their desks. This may prevent some criminals, obsessed with completing their theft quickly, from bothering with the devices.

Wi-Fi Protection

Wi-Fi networks are often at risk from hackers. That’s why Entrepreneur Magazine suggests that businesses depend on wired networks preferably. But if your business clearly needs a Wi-Fi network, make sure to safeguard it with a complex password. Entrepreneur Magazine recommends a password made up of letters, numbers and symbols. Record this password and hide it in a safe or other secure location.

These IT projects will boost your business in 2013

Tuesday, April 2nd, 2013

Your New Year’s resolution was to grow your small business in 2013. How is that resolution faring? If you’re struggling to increase your small business’ revenues so far this year, it might be time for you to turn to your IT department. That’s right: Your IT department provides the technical expertise to make your small business even more efficient. That, in return, can raise your employees’ productivity and improve your business’ bottom line. Here are a few tech projects that Small Business Computing.com recommends for small business owners who want to see their businesses grow in 2013.

OnsiteWi-Fi

A growing number of businesses allow their employees to bring their own electronic devices – everything from laptops to tablets – to their cubicles. The reasoning driving this movement: When people work on laptops and tablets that they know well, they work more efficiently. But allowing your staff to participate in the bring-your-own-device movement doesn’t mean very much if your office isn’t equipped with a reliable Wi-Fi network that allows your workers to access the internet, send e-mail and post to social media sites while at their desks. Make setting up a powerful Wi-Fi network in your office a priority for 2013.

Invest in Ultrabooks

Your employees can do more when they can tote laptops to meetings with clients. Traditional laptops, though, are too cumbersome. And small Netbooks are often too slow and limited. Ultrabooks, though, are a different story. These laptops are both small and light enough to be portable, and powerful enough to enable staff members to display multimedia demonstrations and reports to prospective customers. A great way to see your business grow is to give your employees more options for snagging new customers. Ultrabooks are one of these options.

No more Windows XP

A surprising number of businesses still have computers running the Windows XP . This is unproductive. To begin with, Microsoft will no longer support this 10-year-old operating system as of April 8, 2014. Which means that Microsoft will no longer be sending monthly security updates for the system. In addition, newer versions of the Windows operating system, especially Windows 7, are simply more efficient. Give your employees a better chance of finishing their projects faster — upgrade from Windows XP.

Why it’s time to disable Java

Friday, March 22nd, 2013

You almost have to feel sorry for the makers of Java. The applet is constantly cited as an open door to hackers, one that allows cyber criminals easy access to your computer and personal info. But really, Java’s time has mostly gone. That’s why Slate writer Will Oremus has this advice: Disable Java on your computer. Recall, just last year the U.S. Department of Homeland Security issued a warning regarding security holes associated with Java. If you wish to keep your computer safe, you’ll listen to Oremus’ advice.

Ignore the patch

Java, of course, has released new security patches to repair its latest security flaws. But Oremus recommends that users ignore this patch. The odds are high that hackers are only going to find another vulnerability to exploit Java. Oremus instead recommends that users disable the software on their machines. The reality is, the number of Web sites powered by Java applets is becoming less every day. If you really need Java to view a site, you can temporarily enable it until you’re finished with that site.

Vulnerable Java

The dangers of Java are real enough that you ought to take Oremus’ advice. The most recent Java weaknesses allowed hackers to use Java applications to take control over the computers of users who visited hacked Web sites. Oracle, which now owns Java, produced a quick emergency update to patch Java’s security holes. The fact is that, despite having the patch, there are still a number of Java weaknesses that criminals can exploit.

The disabling process

Fortunately, it doesn’t take much computer savvy to disable Java, even though the steps vary based on your Web browser. For Firefox, choose “Tools” from the browser’s main menu. Then click “Add-ons” and check the “Disable” button next to the listed Java plug-ins. In Safari, click “Safari” on your browser’s main menu. Click on “Preferences” prior to selecting the “Security” tab. Here you will see a button checked next to “Enable Java.” Uncheck it. With Chrome, type or copy “Chrome://Plugins” in the address bar. When Java plug-ins appear, click the “Disable” buttons beside them. It’s more complex to turn off Java if you are using Internet Explorer. The best way to understand how is to visit http://www.java.com/en/download/help/disable_browser.xml

Is the U.S. government driving a black market in zero-day bugs?

Wednesday, March 13th, 2013

Is the United States creating a more dangerous Web? This is the theory depicted in a recent story by the MIT Technology Review. The story details the history of Stuxnet. You may remember this bit of malware as it made big news in 2010 when it was discovered. Today, the general opinion is that Stuxnet was created by the governments of the United States and Israel to attack the industrial equipment needed to run Iran’s budding nuclear program. As the Technology Review story states, Stuxnet might be the first well-known example of a new form of warfare, one in which countries use malware and other viruses to attack computers and security systems of other nations. And the United States might just be the leader in this form of virtual warfare.

A developing industry

Here’s the worry, as expressed in the Technology Review story. As governments, including the United States, spend a rising amount of dollars to create malware weapons, are they also making the Internet a more dangerous place than it already is? Unfortunately, the answer appears to be a definite “yes”. Nobody knows just how many malware weapons governments have implemented since Stuxnet made news. But, as the report says, many have undoubtedly done their job without the public hearing about them. That ought to make any Internet users feel nervous.

A mobile attack?

As people move more firmly toward mobile devices such as tablets and smartphones, so are the makers of malware weapons. The Technology Review story reports that exploits aimed towards mobile operating systems are particularly valuable due to the fact mobile systems are updated so rarely. As the report highlights, Apple only sends updates to its iPhone software a few times per year. That leaves the system vulnerable to government that would love to surreptitiously deploy malware such as spyware on the mobile phones of terrorism suspects.

Nothing new?

The Technology Review story ends on a somber note. Perhaps, it suggests, these malware weapons are not so unusual. Countries around the world routinely develop new weapons. Malware exploits might be the latest version of an arms race. However, consumers could be caught in the crossfire of a Web that’s suddenly become considerably more dangerous.

Making the choice: Desktop or Web-based e-mail

Wednesday, February 27th, 2013

It’s a question all computer users face: Would it make more sense to download a desktop e-mail client like Sparrow or Postbox or is Web-based e-mail such as Gmail the best choice? Not surprisingly, there isn’t a clear answer. For many people a high-end desktop e-mail client is the best choice. For just as many other individuals, Web-based e-mail will work better. Fortunately, the Lifehacker Web site recently ran an article identifying which computer users are better suited to desktop e-mail and who should consider using Web-based e-mail. Their list, though by no means definitive, definitely helps answer the desktop-vs.-Web-based e-mail dilemma.

When desktop makes sense

The Lifehacker story does an excellent job identifying which people are good for which kind of system. For instance, Lifehacker recommends that you choose a desktop e-mail client if you frequently find yourself accessing e-mail messages when you’re offline. For obvious reasons, you can’t do this with a Web-based e-mail system. A desktop system might make more sense, too, in the event you own a number of different e-mail addresses with several different domains. Finally, if you utilize security measures – such as encryption or digital signing – or you like to filter your e-mail messages by subject header, sender or keywords, a desktop client might be the better option in your case.

When Web-based is best

Lifehacker provides a list, too, to help you decide if a Web-based e-mail system would be the better option for you. First, if you prefer a single inbox for all your e-mail, Web-based e-mail might make more sense for you. Secondly, if you only keep a small number of e-mail addresses, you might choose Web-based e-mail. This kind of e-mail makes sense, too, if you do the majority of your work at the office or at school. Often, your employer or school won’t let you download and install a desktop e-mail client on their computers.

The good news

Here is the best news of all: Whether you go with a desktop e-mail client or simply a Web-based service, take comfort knowing that you have lots of outstanding choices to help you manage and organize your e-mail messages. Desktop services like Sparrow and Postbox offer a wide range of organizing features. On the Web, the tried-and-true Gmail remains one of the strongest e-mail clients, whether desktop or Web-based, available for computer users.

These tech trends will change your business this year

Wednesday, February 20th, 2013

Remember when you sent faxes to your clients regularly? Today, that fax machine, if your office still has one, is most likely covered with dust. That’s because business technology is constantly changing. Businesses must constantly adapt to these changes if they plan to thrive. That’s something that CIO Magazine recognized in its recent look at the key tech trends that will change the way companies function in 2013. This year’s list is again a remarkable one, demonstrating once again how quickly technology is advancing. Need to keep your company on the cutting edge in 2013? Then check out these three tech trends that CIO Magazine says are changing the business world.

Hospitals and BYOD

Last year, according to CIO Magazine, the BYOD movement took hold in small businesses throughout the country. This movement, meaning bring your own device, allowed more employees to bring their laptops and tablets to their offices, connect to a secure network and finish their tasks using their own devices. The benefits? Employees work faster when they’re working on their own devices, increasing their productivity. And businesses cut costs by not having to supply desktop computers for all of the workers. This year, CIO Magazine predicts, more companies will embrace BYOD. We’ll even see employees at hospitals and other highly secure businesses working on their personal iPads and laptops.

3-D Printing Continues to Soar

3-D printing became popular last year, with a growing number of businesses making use of high-tech printers to fashion plastic parts and device components. This year, 3-D printing stands to be an even more common tool among tech-savvy businesses. 3-D printing is an amazing technology. And those companies who recognize this can stay a step ahead of their competitors.

The End of Passwords?

Is your password your home address? Would it be your wife’s name? Soon, according to CIO, you won’t need to worry about how lame that is. Companies are ready to embrace biometrics as a security measure, the magazine says. Biometrics lets companies make use of the iris of employees’ eyes, their voices or their fingerprints as security for these workers’ computers and online accounts. With biometrics, hackers will no longer be able to access your company’s important information just by guessing your top salesperson uses the name of his dog as a password.

Hackers now targeting smart phones

Friday, January 25th, 2013

Think your smartphone is safe from malware attacks? Think again. The depressing statistics indicate that cyber criminals are increasingly turning their attention to smartphones. This should not be surprising. After all, people are increasingly using our smartphones as miniature computers. A large number of even making use of these devices for online banking. Smartphones, then, represent a significant untapped market for cyber criminals. The good news? It is possible to protect yourself from mobile malware by adopting some common-sense strategies.

Scary Numbers

The security firm F-Secure shows the rather frightening numbers: According to the firm, the number of malware attacks directed at mobile Android devices quadrupled from the first quarter of 2011 to the same quarter in 2012. That’s just one of several unsettling statistics regarding mobile malware. CNN Money writer David Goldman, for instance, recently cited an article from security firm Lookout Security that four in 10 smart phone users will click or swipe a suspicious Web Link this year. Goldman also writes that smartphone cyber attacks have spiked by a factor of six, based on statistics revealed from anti-virus company McAfee.

The Good News

These numbers shouldn’t cause smartphone users to toss their devices in the river. Despite the rise in mobile malware, cyber criminals continue to focusing primarily on PCs. For just one reason, it’s easier. Developers have learned from their past mistakes, and have managed to make it a lot more tough for cyber criminals to take over smartphones and other mobile devices. At the same time, these criminals are so successful in targeting PC users, they have little financial incentive to focus on mobile devices. Consumers, though, shouldn’t rely on this for much longer, Goldman writes. As smartphones will continue to rise in popularity, they will likely experience a greater number, and variety, of malware attacks.

Protect Yourself

You can protect yourself from mobile malware attacks. And, just like with PCs, it mostly requires good judgment. To illustrate, when you find yourself looking for new apps, be careful. Don’t inadvertently download pirated versions of free apps. The pirates behind these apps will charge you for apps you could normally get for free. Be skeptical, too, of apps promoting free virus protection. Mobile virus software normally isn’t free. A free app could be a virus in disguise. When you are shopping for apps stay in well-known, regulated app stores. Independent app stores such as GetJar don’t have the same amount of regulation as iTunes and other regulated stores. Finally, be wary of phishing schemes. Never hand out personal data such as checking account numbers or Social Security numbers through e-mail.