WatchGuard announces Top Threats to education

November 4, 2009 · Filed Under Software News · Comment 

Education-related Threats Expected to Rise – According to the U.S. Department of Homeland Security, 25 percent of all cyber-security breaches involve schools, and although a majority of educators believe that their campus networks are more secure now than last year, WatchGuard predicts that significant breaches, vulnerabilities and threats will continue to plague schools and universities. WatchGuard deems the following to be the leading network, application and data threats to education:

– Malware & Spyware - As students and faculty utilize the Web for education as well as entertainment purposes, many unwittingly expose themselves to drive-by downloads, or corrupted websites, which injects malicious forms of software on their computers. Once infected, they risk becoming victims of identity theft or loss of personal information via spyware and keyloggers.
– Viruses – Today, e-mail remains to be one of the primary vectors for delivering viruses. Unfortunately, a recent survey showed that 27 percent of users fail to keep their antivirus signatures up to date.  With viruses taking on innovative polymorphic properties, antivirus signatures alone may not be enough to stop the next wave of new viruses to come.
– Botnets – It has been estimated that 15 to 20 percent of all school and university computers connected to the Internet may be part of a botnet. As part of a botnet, school and university systems may be used in a variety of unknown exploits, including spam delivery, denial of service attacks, click-fraud, identity theft and more.
– Phishing – Phishing scams continue to get more sophisticated and selective, with students being specifically targeted. A recent report states that phishing attacks via social networks achieve a success rate of over 70 percent, which indicates that a majority of students are vulnerable to phishing scams.
– Hacking - In a recent survey of education IT professionals, 23 percent ranked student hackers as one of their greatest threats to their network security. Whether the hacks are designed to alter grades or for more sinister purposes, student hackers continue to push the envelope for network and data protection.
– Access Control – Usage of mobile devices and wireless access continues to plague network administrators. Concerns of thwarting unauthorized user access to education IT resources is top of mind with many administrators. As use of mobile devices escalates, schools will face
increasing challenges in managing authorized network access.
– Social Networks – The number one threat to school and university networks is social networks, such as Facebook and MySpace.  Unfortunately, social networks act as an ideal platform to launch a myriad of attacks against students and faculty, including spam, viruses, malware, phishing and more. Adding to this, socially engineered attacks are often extremely successful due to the “trusted” environment that social networks create.

– Because of the sensitive nature of student and faculty information, such as social security numbers, credit card information, and other personal identifying data at risk, WatchGuard recommends that schools and universities review their security controls and IT policies regularly to ensure they have the most effective, up-to-date security solutions in place.

Source: WatchGuard Technologies

Tags: , , , , , , , , , , , , , ,

McAfee and Phoenix Technologies to deliver a secured computing cloud for PC Notebook & Netbook users

August 28, 2009 · Filed Under Internet Software, Security Software, Software News · Comment 

Viruses, malicious attacks, malware and spyware meet new gatekeeper with combined technologies delivering unrivaled online and platform protection for consumers

McAfee, Inc., the world’s largest dedicated security technology company, and Phoenix Technologies Ltd., the leader in PC 3.0(TM) products, services and embedded technologies, announced their partnership to develop a product for HyperSpace(TM) — Phoenix’s groundbreaking instant-on computing environment for notebooks and netbooks. By combining technologies, McAfee and Phoenix plan to provide computer users revolutionary new levels of protection from viruses and targeted attacks as well as online malware and spyware intrusions.

HyperSpace, a Moblin-compliant, instant-on computing environment features applications that are certified by Phoenix to ensure the integrity of the computing environment. Contents of the hard drive remain walled off from the internet and are therefore protected. By teaming with McAfee, HyperSpace is achieving new levels of consumer internet security protection.

The explosion in Web 2.0 applications, including social networking sites with cloud-based applications and functionality, has created new vehicles for launching malicious attacks, according to McAfee’s “2009 Threat Predictions.” Including McAfee’s technology into HyperSpace means computer users will have additional protection from online threats.

“McAfee’s superior technology complements the device-level protection provided by HyperSpace by blocking attacks targeting the browser or network access,” said Brent Remai, vice president of consumer marketing at McAfee. “With the online threatscape constantly shifting, and computer users moving more and more of their activities and documents onto cloud-based systems, the combination of HyperSpace and McAfee represents a powerful security option available for computer users.”

“Security plays a key role in our PC 3.0(TM) strategy of providing software and services that make computing devices more user-friendly,” said Woody Hobbs, President and CEO of Phoenix Technologies. “Protection from malicious software and other forms of attack enhances the user experience. By itself, HyperSpace provides a secure computing environment for users to surf the Web, access applications and sensitive data and conduct financial and other transactions. Layering in McAfee’s best-in-class security technology provides additional tiers of vault-like protection for computer users that are unmatched in the industry.”

HyperSpace is designed to deliver significantly faster boot times, continuous, smart internet connectivity, extended battery life and new levels of security protection while online. With HyperSpace, users can begin searching the Web, send and receive email, use other Web-based applications and work in important productivity applications within seconds of turning on their computing device. Users also enjoy the benefits of up to two hours of extra battery life on their HyperSpace-enabled laptops and all-day computing on their netbooks and smartbooks. The HyperSpace platform also provides a unique computing environment that PC designers, software developers and content providers can utilize to create always-available, instant-on applications that bring new convenience, connectivity, uptime and security to users.

Source: Phoenix Technologies Ltd.

Tags: , , , , , , , , , , , , , , , , , , ,

Rise in cyber crime, cyber terrorism and cyber espionage tied heavily to data-stealing malware

June 30, 2009 · Filed Under Security Software, Software News · 1 Comment 

In its first Focus Report, Trend Micro examines the growth of data-stealing malware, its characteristics and its roots in the underground cyber crime economy.

While the term “data-stealing malware” is a relatively new one, its sole purpose for existence is a familiar story: To steal proprietary information such as online banking credentials, credit card numbers, social security numbers, passwords, and more from compromised networks and PCs in order to fuel an underground cyber crime economy driven by profit-seeking criminal networks that cross geopolitical boundaries.

Trojans: The Rising Star in Data-Stealing

Trojans are the fastest growing category of data-stealing malware, according to data from TrendLabs(SM), Trend Micro’s global network of research, service, and support centers committed to constant threat surveillance and attack prevention. Trojan attacks pose a serious threat to computer security. True to their name, they typically arrive disguised as something benign such as a screen saver, game, or joke. Based on TrendLabs research:

  • In 2007, 52 percent of data-stealing malware were Trojans; in 2008, that number increased to 87 percent; as of Q1 2009, 93 percent of data-stealing malware were Trojans.
  • Trojans and Trojan spyware are the predominant type of data-stealing malware in all regions monitored by TrendLabs, including Australia, Asia, Africa, South America, North America and Europe.

“As a threat category, data-stealing malware is experiencing tremendous growth because it serves the needs of financially motivated criminals who leverage the Internet for what it does best – provides valuable information,” said Jamz Yaneza, threat research manager for Trend Micro.

The Politics of Transnational Cyber Crime

Politics and cyber crime have finally intersected in news headlines; understandably so: In the U.S. alone, the number of known breaches of government computers with malware more than doubled between 2006 and 2008, according to the Department of Homeland Security.(i)

And, says Trend Micro advanced threat researcher Paul Ferguson, it is even possible that cyber terrorists may have already planted malware within the U.S. electrical grid that would allow them to remotely disrupt service.

Cyber crime has gained significant international mobility. In 2007, Estonian computer networks were crippled when serious distributed denial of service (DDoS) attacks against government and civilian sites were reputedly linked back to Russian operatives. At the time, Russia and Estonia were involved in a dispute over the Estonians’ removal of a Soviet war memorial. The French Embassy’s web site in Beijing was inaccessible for several days after a full-scale cyber attack following President Nicolas Sarkozy’s meeting with Tibetan spiritual leader, the Dalai Lama. Experts now widely believe instead that a Chinese hacking group staged the attack for nationalistic purposes.

“Virtually anyone with a computer and Internet access can wreak havoc. In the U.S., hacker attacks have been documented on county or state government sites,” said Ferguson. “Smaller organizations have a limited IT budget and few IT staff so they hire a third party to build a web site. Over time, the site fails to be maintained or upgraded, exposing vulnerabilities that hacktivists then leverage to express political views.”

Cyber espionage is also grabbing headlines. Every year, corporations suffer billions of dollars in intellectual property losses when trade secrets are illegally copied and sold to competitors on the black market for profit, or used for extortion. Business networks all over the world provide the perfect medium for cybercriminals capable of breaching their defenses.

“Cybercriminals are using malware for financial gain and for geopolitical purposes,” said Ferguson. “We have even seen data-stealing malware attacks against U.S. defense contractors – believed to be Chinese – launched to steal confidential trade secrets. However, it’s hard to connect the dots back to the people really pulling the strings because of the anonymous nature of the Internet.”

Traditional Security is no Longer a Match for Cyber Criminals

For years, security protections have been focused on protecting the endpoints – where most people access data. In today’s multi-threat environment, a new strategy is needed. The Trend Micro(TM) Smart Protection Network enables a multilayered threat prevention approach that is built upon the concept of proactively blocking data-stealing malware in the Internet cloud before they can infiltrate a network.

A correlated approach is used to address the tendency for cybercriminals today to launch multi-pronged, combined attacks composed of a number of different Web threats. Using correlation technology and behavioral analysis, the Smart Protection Network correlates combinations of threat activities to evaluate their potential for danger. It analyzes email, embedded links, file attachments, and hosted web files to identify new IPs, domains, URLs, and files that can be instantly added to reputation databases to quickly block new threats.

By examining the relationships between and across different components, the Smart Protection Network provides a realistic view of potential threats to deliver a holistic, comprehensive view of the threat landscape.

Data Protection Pack for “Insider” Threats

A company’s greatest asset – their employees – can also be their greatest security liability, especially by those who have access to data within a corporate network. Trend Micro offers solutions not just for external threats, but internal threats as well. The Data Protection Pack bundles together Trend Micro(TM) LeakProof Standard, Trend Micro(TM) Email Encryption Gateway and Trend Micro(TM) Message Archiver. The Data Protection Pack secures email and prevents the loss of sensitive data in use, in motion and at rest; it is available for Trend Micro(TM) NeatSuite Advanced and Client Server Messaging customers.

To read the full Data-Stealing Malware Focus Report, visit: http://us.trendmicro.com/imperia/md/content/us/pdf/threats/securitylibrary/dat a_stealing_malware_focus_report_-_june_2009.pdf

(i) Paul Haven, “Cyber-Spy vs. Cyber-Spy,” TechNewsWorld.com, April 12, 2009, http://www.technewsworld.com/story/viruses-malware/66782.html?wlc=1241718857

Source: Trend Micro

Tags: , , , , , , , , , , ,

Javacool Software Releases Free SpywareBlaster 4.2

April 15, 2009 · Filed Under Downloads, Internet Software, Security Software, Software News · Comment 

Enhanced “Layered Defense” Spyware, Malware Prevention Software Now Supports More Browsers & With Faster Updating

Fans of Javacool Software LLC, take note: an upgraded version of the company’s popular SpywareBlaster(R) is now available for free downloads from the software company’s Web site (www.javacoolsoftware.com).

With over 50 million free downloads since the company’s launch in 2002, Javacool Software offers a range of free privacy and security software products used by home and small business computer owners worldwide, along with other services for enterprises and networks.

Unlike other subscription or free anti-spyware and anti-malware software, SpywareBlaster focuses on prevention. It protects against stealth downloading of spyware, adware, browser hijackers, dialers and other potentially unwanted software. And unlike other programs, the performance-friendly SpywareBlaster does not remain running in the background, avoiding drags on a PC’s operation.

SpywareBlaster coexists with other security software to provide a “layered defense” against multiple threats. It prevents the installation of ActiveX-based spyware and other dangerous programs, blocks spying and tracking via cookies, and restricts the actions of potentially threatening Web sites.

The new version 4.2 of SpywareBlaster features improved Windows 7 support, faster updating worldwide, support for the Internet Explorer 8 and K-Meleon browsers, interface improvements and numerous other enhancements.

PC World magazine recently named SpywareBlaster as one of its ‘8 Great Free Security Tools.’ Noted the report: “With this downloadable antispyware utility, you can make sure you don’t get infected in the first place rather than scanning for and killing spyware after it hits your machine. It works differently from most competitors by restricting the actions that potentially dangerous Web sites can perform when you visit them. It also protects against dangerous ActiveX controls, and keeps tracking cookies off your PC.”

Javacool Software offers a SpywareBlaster AutoUpdate service to download new versions when they become available, with automatic database updates, easy multi-user coverage and technical support.

Source: Javacool Software LLC

Tags: , , , , , , , , , , , , , , ,