HomeCommunitySecurity Blog

Security Blog

 

June 2011 Archives

The Fall of the Traditional Firewall

Posted By Pete at 4:44 PM, June 30, 2011

The importance of the good old firewall has been radiply declining over the past 10 years. More and more applications and threats are finding its way into networks through firewall policies that allow port 80 traffic (I mean, who doesn't allow port 80 outbound traffic on their network?). The floodgates have been open for years now, and it's up to the other layers of security to pick up the slack. Technologies such as Web filtering, anti-virus, and application control go along way in truly securing your network.

If you're business is still relying on that trusty firewall to secure your network it might be a good idea to look into replacing or supplementing that with more current and sopisticated protection such a UTM.

Posted by: Pete at 4:44 PM
Categories: General

 

Microsoft Releases Patch for June - Fixes 34 Flaws Including some found in Internet Explorer 9

Posted By Netgear Threat Lab at 3:01 PM, June 16, 2011

Microsoft this month released a total of 16 security patches, 9 of which had the highest level of severity. A total of 34 security vulnerabilities involving Windows, Office (Excel and InfoPath), IE,. NET, SQL, Visual Studio, Silverlight and Forefront products were fixed. The number of fixes ranks second only behind the April update for the year.


It is noteworthy that the updates included the first patch for the just released IE9 browser. The MS11-050 patch fixed 11 IE9 vulnerabilities, the most serious of which could use a specially crafted Web page using Internet Explorer to allow remote code execution. When successfully exploited, the attacker could gain the same permissions as the victim local user.


Although the privacy protection in IE9 is very good, if the user inadvertently opens a malicious website, hackers could still exploited a vulnerability to steal a IE9 browser cookie and obtain the victim's account login information, such as email or microblogging account.

To protect your security, we recommend that users immediately download and install the new security patches.

Posted by: Netgear Threat Lab at 3:01 PM
Categories: General

 

Citibank Hacked - Your Money is No Longer Safe

Posted By Pete at 2:46 PM, June 16, 2011

First there was Barracuda Networks, then the Sony Playstation Network, now it's Citibank. This is a disturbing trend of large sites and networks being hacked and the hackers getting away with thousands/millions of customer records. The really big one - the Playstation Network hack could have potentially exposed critical data (credit card numbers, names, emails, passwords) of over 70 million of its customers. However, from my point of view the recent Citibank hack was even more alarming.

The hackers went straight to the source for this one. The Citigroup has indicated that over 360,000 customers had their financial data exposed in the attack. The hackers were able to access this data through a vulnerability in the Citibank Web site. The attackers used a Web parameter tampering method by adding account numbers into the URL string in the browser.

I'm surprised that with so much at stake, this vulnerability wasn't found internally earlier and patched. This just goes to show that there isn't enough vulnerability testing in both the software development or deployment phases.

I hope the rest of the banking industry takes note and fortify their defenses, otherwise people might be better off hiding their hard earned cash in their sofas.

Posted by: Pete at 2:46 PM
Categories: General

 

Android Malware BaseBridge on the Rise

Posted By Pete at 6:27 PM, June 5, 2011

Security Week writes that mobile security company NetQin is reporting that malware specifically targeting Android devices is spotted in the wild. The malware "BaseBridge" has been spotted in over 20 different Android applications throughout the Internet. You can find more detailed info on how the infection occurs in the link above, but the point I'm trying to make is that this is just the tip of the iceberg.  

Smartphones and tablets have seen significant growth over the past few years. Their processing power and sophistication have gotten to the point where they are basically PCs in smaller form factor. They have fully functional web browsers capable of executing complex scripts, and have access to the same dangerous sites and files. However, compared to PCs, these Android or iOS based mobile devices have little to no malware protection (Even with more security software, PCs already see their fair sure of infections and attacks). Security companies and device makers really have to take a long hard look at hardening the security of these devices - in a hurry. It's just a matter of time before a cell phone based botnet uses a DDOS attack to take down a wireless data network.

Posted by: Pete at 6:27 PM
Categories: Malware

 

Mac/PC Viruses, Facebook, & Dominique Strauss-Kahn of the IMF

Posted By Jason at 5:06 PM, June 1, 2011

Isn't it interest that the security news that always seems to get attention always seems to be the same-old same-old?  Malware, viruses, and scams that circulate the web ---- this time using social media.

Its not data leakage (although that's important) or any of the uber-sexy security topics out there. It always seems to be the latest virus/malware.

There's a new Facebook virus circulating out there that affects both Mac and PC users ... this time using current events (Dominique Strauss-Kahn, the ex-head of the IMF, who's been charged with allegedly sexually assaulting a hotel maid) to solicit folks to click on a video link.

The link redirects users to a Lithuanian server that hosts malware that infects Macs and PCs.

Sophos has reproduced the text that comes with the Facebook link - 



"oh s**t, one more really freaky video O_O
IMF boss Dominique Strauss-Kahn Exclusive Rape Video - Black lady under attack!
[LINK]
IMF chief Dominique Strauss-Kahn rape scandal. Mother of Alleged Rape Victim: Dominique Strauss-Kahn Did Not Want To Be President of France - ABC News"

sophos.jpg

Anyone out there feel like this is deja-vu with the "Michael Jackson Thriller Death" scam video almost exactly two years ago?

Posted by: Jason at 5:06 PM

 

« May 2011 | Main Index | Archives | July 2011 »