Cybercriminals are increasingly targeting the information assets of some of the world's most well-known organizations, according to the findings of a recent global study by McAfee and Science Applications International Corp. (SAIC) entitled "Underground Economies: Intellectual Capital and Sensitive Corporate Data Now the Latest Cybercrime Currency.". With firewalls, antivirus and other security mechanisms protecting corporate networks, how do attackers manage to penetrate enterprise computer systems? Simply by exploiting the weakest link in the security chain. One of the newest methods is tunneling in via employees' browsers using an attack known as "Man-in-the-Browser" (MitB). The link for this article located at Network World is no longer available. . Explore the ways in which Man-in-the-Middle threats breach business environments and compromise confidential information.. Man-in-the-Browser, cybersecurity threats, corporate data security, employee risk, enterprise protection. . LinuxSecurity.com Team
You can't manage what you can't see. So it's not surprising that with corporate networks congested more and more by P2P, streaming media, and other "leisure" traffic, network admins are increasingly turning to specialized network management software packages and appliances to . . . . You can't manage what you can't see. So it's not surprising that with corporate networks congested more and more by P2P, streaming media, and other "leisure" traffic, network admins are increasingly turning to specialized network management software packages and appliances to give them the information they need to take back control of their bandwidth. Of course, if your network is uncongested, network logons are quick, and users find all their business applications are running at top speed, then you're probably not too concerned about a handful of people using KazaA somewhere in your organization. Sadly, though, this ideal state of affairs is rarely witnessed, except perhaps in administrators' dreams. The truth is that most corporate networks carry far more network-clogging leisure traffic than they can cope with. That's because leisure apps are often particularly aggressive bandwidth users. The link for this article located at CrossNodes is no longer available. . Optimize your data usage smartly through dedicated applications as business systems face saturation from recreational browsing.. Bandwidth Management Tools, Corporate Network Control, Network Traffic Analysis. . Anthony Pell
At a time when protecting corporate networks is paramount, many users are steering clear of a feature of IP Security VPNs called split tunneling, a move that can give a false sense that remote-access networks are more secure than they really are, experts say. . . .. At a time when protecting corporate networks is paramount, many users are steering clear of a feature of IP Security VPNs called split tunneling, a move that can give a false sense that remote-access networks are more secure than they really are, experts say. Split tunneling was created to allow Web surfing and corporate VPN access simultaneously from remote PCs. The benefit of split tunneling is that corporations can conserve bandwidth needed for Internet access at VPN hub sites and reduce the load on VPN gateways. The link for this article located at IDG is no longer available. . As corporate cybersecurity gains importance, many employees hesitate to use split tunneling, uncertain about its security risks while working remotely. Corporate Network Security, IP Security VPN, Remote Access Solutions, Split Tunneling Risks. . Anthony Pell
'Warspammers' are taking advantage of unprotected wireless LANs to send out millions of junk emails. The proliferation of insecure corporate wireless networks is fuelling the growth of drive-by spamming, a security expert warned on Thursday. . .. 'Warspammers' are taking advantage of unprotected wireless LANs to send out millions of junk emails. The proliferation of insecure corporate wireless networks is fuelling the growth of drive-by spamming, a security expert warned on Thursday . Speaking at the First International Security Users Conference in London, Adrian Wright, managing director of Secoda Risk Management, warned that junk emailers are taking advantage of unprotected wireless local area networks to bombard email users with unsolicited and unwelcome messages. "These people simply drive up to a building armed with their pornographic email, log into the insecure wireless network, send the message to 10 million email addresses and then just drive away," said Wright. The link for this article located at ZDNet UK is no longer available. . 'Spam Raiders' are taking advantage of unsecured Wi-Fi networks to distribute countless unsolicited messages, representing a major risk.. Wireless Attacks, Email Exploitation, Network Security, Junk Email. . Anthony Pell
Last January, Adrian Lamo awoke in the abandoned building near Philadelphia's Ben Franklin Bridge where he'd been squatting, went to a public computer with an Internet connection, and found a leak in the Excite@Home's supposedly airtight company network. Just another . . . . Last January, Adrian Lamo awoke in the abandoned building near Philadelphia's Ben Franklin Bridge where he'd been squatting, went to a public computer with an Internet connection, and found a leak in the Excite@Home's supposedly airtight company network. Just another day in the life of a young man who may be the world's most famous homeless hacker. More than a year later, Lamo is becoming widely known in hacker circles for tiptoeing into the networks of companies like Yahoo and WorldCom -- and then telling the corporate guys how he got there. The link for this article located at Wired is no longer available. . Adrian Lamo lived a dual life between homelessness and hacking, excelling in uncovering corporate vulnerabilities while advocating for digital ethics and transparency. Adrian Lamo, Ethical Hacking, Cybersecurity, Corporate Security. . LinuxSecurity.com Team
Products designed to boost security for mobile devices and on corporate networks are two of the main themes here at RSA Conference 2001 this week, with Motorola, Japan's Matsushita Electric Industrial, and the Internet division of Nokia all announcing new security . . . . Products designed to boost security for mobile devices and on corporate networks are two of the main themes here at RSA Conference 2001 this week, with Motorola, Japan's Matsushita Electric Industrial, and the Internet division of Nokia all announcing new security moves and partners. Motorola announced that VeriSign is providing it with an alternative technology to digital certificates for use in mobile phones and other wireless devices. The processing power available in wireless gadgets is limited, so devices cannot always check to see if a digital certificate has been revoked, the companies said. VeriSign has developed a system that issues a new digital certificate every 24 hours, which makes it easier to secure transactions on mobile devices, the companies said. The link for this article located at InfoWorld is no longer available. . Investigate protective measures for handheld gadgets and organizational infrastructures aimed at strengthening user security and confidentiality.. Mobile Security Solutions, Network Safety, Corporate Device Protection, Secure Transactions. . LinuxSecurity.com Team
A new technique for disguising programs aimed at cracking corporate networks could raise the stakes in the heated battle between hackers and security experts. During a seminar last week at the CanSecWest conference in Vancouver, British Columbia, a hacker named "K2" . . . . A new technique for disguising programs aimed at cracking corporate networks could raise the stakes in the heated battle between hackers and security experts. During a seminar last week at the CanSecWest conference in Vancouver, British Columbia, a hacker named "K2" revealed a program he created that can camouflage the tiny programs that hackers generally use to crack through system security. The cloaking technique is aimed at foiling the pattern-recognition intelligence used by many intrusion detection systems, or IDSes, known as the burglar alarms of the Internet. "Trust me, this will blow away any pattern matching," said K2, who would not reveal his real name because he also works as a security consultant. When a security hole is found on a corporate network, hackers usually will find several ways to exploit it. To manage the onslaught, the makers of intrusion-detection systems continually update their own software to keep track of new variants of an already familiar theme. The link for this article located at ZDNet is no longer available. . Unveil a novel strategy for camouflaging applications designed to infiltrate business systems and its potential ramifications.. Cloaking Techniques, Corporate Cybersecurity, Cyber Threats. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.