Internet and online security professionals deal with hacking and cracking activity on a daily basis. With new technologies emerging every day the new security challenges arise and new vulnerabilities become available that allow black hat hackers to create and execute new scripts that can cause serious problems to the whole networks. Our mission is to let you know about the latest scams and to warn you about new exploits that can have a severe impact on your online business.
30th June 2009

How to Protect Your Computer and Smart Phone from Physical Data Theft and Your Business from Total Crash

Image of Disk Agent Smart Phone Recovery ServicesFirst of all, let’s be clear here. Right now I’m NOT talking about the ways to protect your computer from virtual theft. Virtual theft, which could happen through hacking into one’s computer or website over the Internet, is a far more advanced topic then the one that will be discussed today.

I have an entire course dedicated to the computer protection. If you’re interested to learn what you should do to protect your data from hackers, you might want to take a look at this course: Online Business Protection.

But today let’s talk about something that can be easily prevented, yet as of today the negligence in this area of data security causes huge headaches to many businessmen.

First let’s look at some facts.

  • Fact Number 1 2,000 laptops and 5,000 smartphones are stolen every day.
  • Fact Number 2 97% of stolen laptops are never recovered.
  • Fact Number 3 Computers and smart phones are the #1 source of identity and business theft .

It also helpful to remember that 60% of businesses that were unfortunate enough to go through data loss, completely go out of business within 6 months. You business could be next if you don’t take proper precautions.

Now that I have your undivided attention, let’s see how we can avoid this unfortunate scenario. It’s time to talk about physical data protection.

The majority of people have hundreds if not thousands of usernames and passwords stored on their computers and smartphones in unencrypted format. If laptop or phone is stolen, perpetrators get easy access to email contacts, financial information, bank accounts, proprietary business plans, etc.

This obviously can lead to both identity theft and serious financial losses. Unfortunately, the majority of people don’t do anything to prevent the flow of events that would bring them in such a precarious position.

What makes the matters even worse, when laptop or a smart phone is lost or stolen, the likelihood of its data to be restored is slim to none. Unless there is a data backup stored somewhere in a secure environment. If there is a backup available, then data of course can be restored yet the probability to find the stolen item still remains miniscule. Let alone the chance to punish the thief.

Today I’ll share with you a great resource. It will help you not only to create automatic backups (just set up the system once, and it will automatically backup your data in two different datacenters). It also will allow you to recover your stolen item. You can also lock down your device before it’s retrieved. This way it will be much more difficult to steal your data. Or you can wipe out the data remotely from the device if you choose to do so.

It’s very inexpensive, plus they offer 1 Gb of backup for free. So go get your Smartphone and Laptop Protection now.

posted in Computer Security, Identity Theft, Main, Recommended Security Resources | 0 Comments

14th August 2007

False Computer Safety Feeling with Internet Security Systems

It’s an axiom that [tag]computer security[/tag] impossible these days without several security components. At the very minimum you should have and  installed on your computer. Those programs can minimize the risk of unwanted intrusions. There are many computer security packages, and they are not equal in their ability to identify and prevent potential attacks.

One of the most well-known internet security programs is a security line of Symantec products known as “Norton family”: Norton AntiVirus, Norton Internet Security, Norton Anti-Spyware Edition, etc.

Of course, Symantec claims that your computer will be totally secure and protected if you use their security products. The sad truth however, that Norton security products are known in the hackers world as theone of the most easiest to hack into.

The most sought after type of vulnerabilities are the ones that can grant remote access to user’s computer, and if this access can be obtained without authentication, it’s even better.

And Norton security products are so popular among average computer users that it make them almost as wide-spread as computers with some kind of Windows OS installed, and thus even more desirable targets for hackers.

A few days ago Symantec had to release a security warning about security vulnerability found in 2 ActiveX controls. The vulnerability belonged to the class of input validation errors.

This means that data received by user computer was not properly validated which could allow a malicious attacker to remotely execute arbitrary code with the rights of logged in user (which means no additional authentication is required). The only other thing that attacker would need to successfully complete the attack is to trick the user to go to the website where this code would run.

This vulnerability affected Norton AntiVirus, Norton Internet Security, and Norton System Works, version 2006 and Norton Internet Security, Anti Spyware Edition, version 2005. Symantec Corporate Edition and Symantec for Linux were not affected.

Symantec Security Response team realesed Bloodhound.Exploit.148 that patches this vulnerability.

If you’re using Norton security products and you regularly update virus definitions and signatures through LiveUpdate then you should be OK.

Otherwise click on your LiveUpdate Right Now!

You can learn more about this vulnerability from the Symantec website: “Symantec ActiveX Control Input Validation Error

Symantec credits Secunia Research for reporting this issue. Funny thing that this exploit is announced as a new one.

But it was known to hackers community for over 3 months! Yes, the remote access computer vulnerability through the execution of arbitrary code within those Norton ActiveX was annonunced by one of the hackers group on their blog more than 3 months ago, and they even released proof of concept code proving their point.

That just gives to show you that Symantec is not very quick in pinpointing and liquidating newest threats. Plus their support department is notoriously slow in support responses.

So in the next post I’ll talk about other computer and internet security programs that offer better support, and have quicker response.

posted in Computer Security, Main | 2 Comments