Top 7 Security Threat Predictions for 2012
AhnLab (http://www.ahnlab.com) announced the top 7 security threats for 2012.
Among these threats, sophisticated APT (Advanced Persistent Threat) attack tops the list. The remaining 6 threats include: heightened threat-levels for smartphones; increasing security threat through SNS; localization of threats that exploit applications’ vulnerabilities; increasing targeted threats for infrastructure system of specific country or industry; threats targeting cloud computing and virtualization environment; and finally, an increasing threat to the connected systems via network.
1) Evolving APT Attack
APT attacks targeting enterprises and organizations will continue in 2012, and the method to deliver the attack is expected to become increasingly sophisticated. Hitherto, the major attack route used for APT attack was sending a fake work email to specific members of enterprises or organizations targeted. The attackers collect email addresses and other information such as friends and personal network via SNS, then attach the malicious attachment with vulnerabilities or insert malicious URL to the fake email. In this case the attacker is impersonating somebody trusted by the target based on the information collected via SNS. Some attackers modified update files of the commercial software widely used by the business. In the future, an internal attack is expected to be increased, exploiting handheld device including smartphones that can easily be carried into an organization, or through the equipment or software of third party companies as it is often difficult for an organization to adequately supervise its security management. Read more
IBM is Helping Make Customer Checkout Easier, Faster, Smarter
IBM announced retail technology that allows stores to offer targeted third-party products and services to consumers at checkout, and add future services with close to “plug-and-play” simplicity. Essentially, retailers will have a quick and easy way to extend the traditional point-of-sale aisle to a revenue-generating point-of-service.
IBM’s new Smarter Checkout solution provides shoppers a more personalized, interactive experience that includes letting customers purchase specialized items such as lottery, theater and show tickets in the checkout lane. For example, shoppers can buy their favorite Quick Pick draw games with the scan of a bar-code in the main aisle just like other store items. They can also use mobile devices, such as a cell phone, to help process their orders, redeem digital coupons, access loyalty points, and pay for their orders at an IBM self-service pay station.
According to a recent study of global retailers, 85% of consumers prefer to complete their transactions through a traditional point-of-sale station, whether they take goods home or have items delivered. The checkout aisle is the retailer’s last chance to save a sale, generate extra revenue, and make a lasting impression on shoppers. Read more
IBM Unveiled Breakthrough Software and New Services to Exploit Big Data
As companies seek to gain real-time insight from diverse types of data, IBM unveiled new software and services to help clients more effectively gain competitive insight, optimize infrastructure and better manage resources to address Internet-scale data. For the first time, organizations can integrate and analyze tens-of-petabytes of data in its native format and gain critical intelligence in sub-second response times.
IBM also announced a $100 million investment for continued research on technologies and services that will enable clients to manage and exploit data as it continues to grow in diversity, speed and volume. The initiative will focus on research to drive the future of massive scale analytics, through advancing software, systems and services capabilities.
The news comes on the heels of the 2011 IBM Global CIO Study where 83 percent of 3,000 CIOs surveyed said applying analytics and business intelligence to their IT operations is the most important element of their strategic growth plans over the next three to five years.
Today’s news further enables Smarter Computing innovations realized by designing systems that incorporate Big Data for better decision making, and optimized systems tuned to the task and managed in a cloud.
According to recent IT industry analyst reports, enterprise data growth over the next five years is estimated to increase by more than 650 percent. Eighty percent of this data is expected to be unstructured.
The new analytics capabilities pioneered by IBM Research will enable chief information officers (CIOs) to construct specific, fact-based financial and business models for their IT operations. Traditionally, CIOs have had to make decisions about their IT operations without the benefit of tools that can help interpret and model data.
With today’s news, IBM is expanding its portfolio and furthering its investments in analytics with: Read more
Spyware Compromises 150,000+ Symbian Devices
A new variant of spyware “Spy.Felxispy” on Symbian devices causing privacy leakage has recently been captured by the National Computer Virus Emergency Response Centre of China. According to NetQin Mobile Inc., a global leader in mobile security service, there are more than a dozen variants of the spyware since the first was spotted, and the latest has affected 150,000+ devices.
Once installed, the spyware will turn on the Conference Call feature of the device without users’ awareness. When users are making phone calls, the spyware automatically adds itself to the call to monitor the conversation. “The Conference Call feature allows more than two parties to join a conversation, and it’s easily available to most smart-phone users. The privacy stealers exploit the vulnerability of this feature for financial purposes. The privacy protection on mobile devices becomes more important than ever,” said Dr. Zou Shihong, Vice President of R&D from NetQin.
NetQin Cloud Security Centre detects that the spyware can remotely turn on the speaker on the phone to monitor sounds around users without the users’ awareness. Apart from that, the spyware is also capable of synchronizing the messages the user received and delivered to the monitoring phone. These performances will compromise users’ privacy.
According to NetQin, the privacy stealers usually install the spyware on the phone or send MMS containing the spyware to users to lure them to click. As the spyware is artfully disguised, users will easily be trapped.
NetQin warns that smart-phone users are exposed to more mobile security threats than ever and users should always be cautious whenever performing operations on their mobile devices. To stay safe, NetQin experts give the following tips in using your phone: Read more
Five Teams Advance to Finals in National Cyber Competition
After four exciting rounds of competition and nearly five months of preparation, five All Service teams have advanced to the finals of CyberPatriot III, the nation’s largest high school cyber defense competition.
Today, CyberPatriot concluded its two-day semifinal round for the competition’s All Service Division – comprised of Junior ROTC units of all Services and Civil Air Patrol squadrons – at the Rosen Shingle Creek Resort in Orlando, Florida, where 12 teams competed for the five spots in the finals.
Congratulations to the advancing teams:
- Ramona High School, Navy JROTC, Ramona, Calif.
- Montachusett Regional Vocational Technical School, Marine JROTC, Fitchburg, Mass.
- Clearfield High School, Air Force JROTC, Clearfield, Utah
- Buena High School, Army JROTC, Sierra Vista, Ariz.
- Orlando Cadet Squadron, Civil Air Patrol, Orlando, Fla. Read more

