Small companies ignorant of security?
677728
Former White House adviser Howard Schmidt warns that hackers aren't just going after big corporations, and small businesses must beware.
749180
The Story: It?s not often that an analyst covering computer security issues tells you that he doesn?t do much to protect his systems. But one reputable analyst I know said just that as we talked about the rising threat of malware aimed at Apple?s hardware. I won?t mention his name, but the gentleman is dead wrong. The days when you can assume that Apple?s products are exempt from harm are over.[ Slideshow: 2007's top underreported tech stories ]                                                    Is it time to panic? No, actual attacks against Macs and the rest of the Apple family, such as the iPhone, are still rare. But as the platform becomes more and more popular, hackers are gearing up to do damage. You?d better protect yourself.?Most Mac users take security too lightly. In fact, most are quite proud of the fact that they don?t run any security at all,? says IDC analyst Chris Christiansen. ?That?s an open door; at some point it will be exploited,? he says.First some numbers: In 2006, the National Institute of Standards and Testing (NIST) tabulated 106 ?vulnerabilities? in Apple?s Mac OS X. (It defines vulnerabilities as a weakness in the code that could be exploited to perform unauthorized, and generally harmful, functions by the application.) In the first six months of 2007 there were 78 vulnerabilities found in Mac OS X. Windows XP (all flavors), meanwhile, had 55 vulnerabilities in 2006 and 19 in the first six months of 2007. Vista, which wasn?t available in 2006, chalked up 19 vulnerabilities in 2007.In a sense, Apple is a victim of its own success. Savvy hackers read the same stories and watch the same television programs as the rest of us, and so they are very aware of the burgeoning popularity of Apple?s products. Hacking Windows still provides a lot more bang per bug than attacks on Apple, but the smaller rival is a more satisfying target than ever before. And the company?s deserved reputation for building good products has probably made users overconfident.?Apple has better commercials, but the Mac is no harder to break into than a Windows PC,? says Gartner security analyst John Pescatore. What?s more, most IT shops can automatically patch large numbers of PCs at the same time, while Macs generally have to be patched one at a time, he said.The Bottom Line: Actual attacks on the Mac platform are still unusual. But as it becomes a juicier target, that will change. Why take a chance? Give a lot more thought to securing your Macs this year.Complete list of 2007 underreported stories: 1.? Java is becoming the new Cobol 2.? Sun Microsystems is back in the game 3.? Hackers take aim at Mac OS X 4.? There are some threats you can worry less about 5.? Companies may have found a way around H-1B visa limits 6.? Open source?s new commercial strategy 7.? End-to-end Ethernet finally arrives 8.? Blade servers arrive for the masses 9.? BI is dead; long live BI 10. Balance of power shifts to software buyers
577394
Despite having a greater awareness of the security risks posed by careless computing habits and personal Internet activity carried out on corporate laptops, many remote workers continue to do things that imperil the safety of themselves and their employers, according to a new report from Cisco.As part of its annual study on the security awareness and online behavior of remote workers -- based on interviews with 2,000 telecommuters carried out by researchers from InsightExpress -- Cisco experts said that people appear to have acquired a false sense of security when it comes to the use of their company-issued computers and other corporate IT assets.Despite the fact that the IT security community has done a much better job in recent years of keeping people informed of the latest and greatest malware attacks and social engineering schemes, remote workers keep falling for the same types of tricks as they always have -- in part because they believe that they are now protected by more advanced security technologies, said Patrick Gray, special assistant to the CTO at Cisco.In fact, in just one year's time, the number of respondents to the survey who expressed a belief that the Internet is "getting safer" increased from 48 percent 12 months ago to more than 56 percent in 2008. The trend was particularly evident in some parts of the world where Internet use is growing the fastest, and where people believe that their governments are going to greater lengths to protect individual users, such as Brazil (71 percent), India (68 percent), and China (64 percent). In Brazil, for instance, where banking-password stealing Trojan virus attacks have finally been thwarted by stricter legal penalties for those creating the threats, people may falsely assume that it is now safe to let down their guard, according to Gray."The awareness of security threats has grown across the board, but somehow, because of that, we do see the emergence of this false sense of security," said Gray. "Companies have done a great job of securing themselves at the perimeter, but where they're really falling down is with what is going on within their own networks and what is going outbound. They are blocking a lot more potential threats, but there's a lot of risky behavior on their networks as well."One of the biggest problems contributing to the situation is the fact that many workers feel it is acceptable for them to use their work computers for their personal activities, such as shopping, interacting with friends, and searching the Web for popular information, the expert maintains.By using their company-issued devices to head to corners of the Internet where attacks are more prevalent -- such as on e-commerce sites, social networking portals, and independent Web properties, workers are putting their employers at risk of exploit by malware, and other threats, he said.The report found a 3 percent increase year-over-year in terms of the number of remote workers who felt that it was acceptable to use their corporate devices for personal use, such as Internet shopping, downloading music, and social collaboration.Business versus personal use With the rise in attacks being delivered via hacked Web sites and popular destinations including social networking sites, people need to begin shifting their behavior and keeping their work machines separate from their personal lives, Gray contends."At end of day it's not their computer, it's a business tool, and people need to understand how much risk their activity poses for their employers, and that they need some level of separation in terms of their personal use," he said. "Companies may not want people going to the mall in the middle of the day when they could be doing work, but they might not want to allow them to use business tools to do things like e-commerce either."IT workers participating in the study also highlighted the issue with 55 percent indicating their belief that their companies' remote workers are becoming less diligent toward security awareness, an 11 percent increase from the year before.In addition to the growing number of threats being hosted on social networking sites like MySpace, Gray said that the personal data that people share about themselves and their employers on the sites poses a significant risk for the creation of targeted attacks.If an attacker can go to a site like LinkedIn and get a firm grasp on someone's role in an organization and figure out who they might communicate with in the firm, it could be fairly easy for them to create an attack that easily tricks the individual into opening an infected e-mail, according to the expert.However, it would appear that even suspicious e-mail arriving from unknown senders, long the favorite delivery channel for malware and links to phishing sites, continues to stand as a problem.While the numbers of workers in the United States who are willing to open strange e-mails and attachments is far lower at 27 percent, than in places like China (62 percent) and even the United Kingdom (48 percent), many people are still capable of falling for the time-honored ruse.In one interesting twist on the issue of corporate device use, Cisco's report found that more people than ever are also using personal devices that are not under the control or management of their IT departments to access their companies' networks and electronic files. Some 49 percent of those people responding to the survey admitted using their own machines to do so, an increase from 46 percent one year ago.Perhaps the only way to improve the situation will be for companies to enact stricter usage policies for their remote works regarding corporate-owned devices and embracing continued education for end-users about the nature and prevalence of threats, Cisco officials maintain."We need to continue to highlight the problems, companies are doing a much better job than they used to, but with all the blended threats, they need to reload and strengthen the human firewall, which is really the last line of defense," Gray said. "The companies that do the best job have ongoing continuing education for users that tells them that their computer is a business tool and who use monitoring tools to ensure that their security policies are being followed."
321816
Many small-business applications that offer templated tools for business owners often fly under the radar, widely unknown to larger businesses.
130163
Users of the popular QuickBooks small-business accounting software run the risk of losing data and control of their PCs to hackers, according to an advisory.
56532
People have long been the weakest link when it comes to protecting computers. The same applies to mobile phones, a security expert says.
183785
PCs on council tips and other security no-nos Large UK businesses are crap at securely disposing old PCs and mobile devices.â¦
356771
While corporations are monitoring ports and using advanced security tools to fend off infection and attack, home users -- who have less technical sophistication -- are left more susceptible, sometimes
716989
Already entrenched in smaller companies, the trend of grouping security resources into a "single box" is gaining ground in larger enterprises.
612254
A tiny deal may be a sign of grander ambitions for the security market.
286377
Organisations are risking seeing sensitive information ending up in the wrong hands, because they are failing to ensure that their unwanted PCs are properly datawiped.
509718
InfoWorld - To judge from the number of announcements made at this week's RSA Conference, IT managers may need a defense against security software and hardware salespeople.
25491
A bank that guarantees its online users safety and security has direct evidence that its Web-based banking system is not bullet-proof. Should that bank tells its users?
311572
Consultant reveals how even banks ignore security The conventional wisdom that banking organisations are more diligent with security was skewered in a presentation at the RSA conference this week.â¦
598708
com September 20, 2004, 12:05 PM PT. Most IT Managers won&#39;t question the importance of security, but this priority has been sliding between the third and fourth most important focus for companies.
74526
These companies want to buy something -- why not themselves?
573702
Knowing a few people at a company doesn't mean you know what happens there.