Modern networks now go beyond traditional walls to include data centers, endpoints, virtual, mobile and the cloud. These extended networks and their components constantly evolve and span new attack vectors including: mobile devices, web- enabled and mobile applications, hypervisors, social media, web browsers, home computers, and even vehicles.. The barriers that have traditionally separated The link for this article located at Security Ledger is no longer available. . Explore how contemporary networks transcend the confines of classic infrastructures, encountering fresh security hurdles and varied attack pathways.. Network Security Strategies, Mobile Security Threats, Cloud Protection Measures, Extended Network Vulnerabilities, Data Protection Techniques. . Dave Wreski
Security researchers have spotted spam emails that point at URLs featuring embedded Quick Response codes (QR codes).. QR codes are a two-dimensional matrix barcode that can be scanned by a camera phone to link users directly to a website that can host any type of content, malicious or otherwise. By using QR codes (rather than links) as a jump-off point to spamvertised sites, spammers can disguise the ultimate destination of links as well as improving click-through rates. In particular, the approach helps when it comes to targeting mobile users. Spam messages spotted by Websense look like traditional pharmaceutical spam emails, with the twist that they link to a legitimate (but abused in this case) website, 2tag.nl. The legitimate web service allows users to create QR codes for URLs but has in this case been abused to create links that ultimately point to Canadian Pharmacy penis pill sites. The link for this article located at The Register UK is no longer available. . Scammers utilize QR codes within messages that direct users to harmful websites, aiming at mobile device owners with hidden URLs.. QR Code Spam, Mobile Vulnerabilities, Phishing Tactics. . LinuxSecurity.com Team
The Pwn2Own hacking contest next month will feature its largest-ever crew of contestants, including past winners, a French security firm armed with a bagful of bugs and an iPhone jailbreak expert who has been sued by Sony.. "The major difference this year is the sheer number of interested parties," said Aaron Portnoy, manager of TippingPoint's security research team. "Either the contest is becoming more popular or more people are comfortable exploiting mobile devices this year." TippingPoint is again sponsoring Pwn2Own, a hacking challenge now in its fifth year. The contest will kick off March 9 at the CanSecWest security conference in Vancouver, British Columbia. The link for this article located at Computer World is no longer available. . The latest Pwn2Own cybersecurity competition has seen an unprecedented influx of participants, alongside a rising fascination with vulnerabilities in mobile technology.. Pwn2Own Contest, Mobile Exploits, Hacking Challenge, Security Research. . Anthony Pell
Smartphone security has been a major focus at ShmooCon in the last couple years, with talks about flaws in BlackBerry and iPhone devices. This year, two researchers targeted all their firepower on the Android. Here's what they found.. Presenters at the ShmooCon security conference have spent much attention on mobile vulnerabilities in the last couple years, and several attendees this year say it's a topic of major importance to them. Last year, a talk focused on weaknesses in the iPhone. This year, two researchers have targeted all their firepower on the Android. In this morning's presentation, Jon Oberheide, CTO of DUO Security, and Zach Lanier, a senior consultant with the Intrepidus Group who specializes in network and web application penetration testing, walked attendees at ShmooCon 2011 through a series of weaknesses they discovered in the device at the kernel, platform and application levels. The link for this article located at CSO Online is no longer available. . Speakers at ShmooCon 2011 highlighted significant mobile concerns regarding Android weaknesses that pose risks to user security.. Mobile Security, Android Flaws, Penetration Testing, ShmooCon Insights. . Anthony Pell
Hot on the heels of the ikee worm, a second piece of iPhone-related malware has appeared, which enables hackers to connect to any device that has been jailbroken and still has an unchanged root password. Jailbreaking is a term used to define iPhones that have been hacked by users to enable software other than that available through the App Store to be installed. . The new malware takes advantage of the same vulnerability in the iPhone as the ikee worm and has been dubbed iPhone/Privacy.A by Mac security software house, Intego, which first discovered its existence. The company explained on its blog that hackers use the tool by installing it on either their own or compromised third-party Macs, PCs, Unix and Linux-based machines - or even on iPhones themselves. The program scans networks that are accessible to it and, when it finds a jailbroken iPhone, breaks into it, steals data including email, contacts and music files, and copies them.. The new malware takes advantage of the same vulnerability in the iPhone as the ikee worm and has bee. heels, second, piece, iphone-related, malware, appeared, which. . LinuxSecurity.com Team
The No. 1 threat to the sensitive data stored on your handheld device or smart phone remains physically losing the device, but other threats are looming on the handheld horizon. "When you send a defective PDA to the manufacturer for tech support, they usually give you a new one and then resell the old one," said John Girard, vice president and research director at Gartner Inc. "Buying dead machines is an ideal method of pursuing identity theft." What's more, 90% of mobile devices lack the protection necessary to ward off hackers, according to a recent strategic planning assumption conducted by Stamford, Conn.-based Gartner. . . .. The No. 1 threat to the sensitive data stored on your handheld device or smart phone remains physically losing the device, but other threats are looming on the handheld horizon. "When you send a defective PDA to the manufacturer for tech support, they usually give you a new one and then resell the old one," said John Girard, vice president and research director at Gartner Inc. "Buying dead machines is an ideal method of pursuing identity theft." What's more, 90% of mobile devices lack the protection necessary to ward off hackers, according to a recent strategic planning assumption conducted by Stamford, Conn.-based Gartner. "Most devices have IrDA, Bluetooth and wireless connections, and many of them aren't set up properly. You can just walk around with a connected device of your own and see what you can find," Girard said. Even if there are security settings activated by default on a device, users will often turn them off if they find them unintuitive to use, he said. "Security needs to be as transparent as possible to users," Girard said. Malicious Code While security researchers have developed "proof of concept" viruses for handheld devices and smart phones, nothing has been seen yet "in the wild," said David Perry, global director of education at antivirus developer Trend Micro Inc. in Cupertino, Calif. "E-mail is easier. It's universal, and PDAs aren't." The link for thisarticle located at computerworld.com is no longer available. . Delve into the primary risks facing your mobile devices and learn strategies to safeguard valuable information efficiently.. Handheld Security, Mobile Device Protection, Identity Theft Risks, Smart Phone Security, Data Safety. . Anthony Pell
Telecommunications companies spend as much as $8 billion a year fixing phones with programming errors, faulty mechanics and other problems. Now some are scrambling to prevent virus attacks that could cost carriers millions of dollars more in repairs and lost business.. . .. Telecommunications companies spend as much as $8 billion a year fixing phones with programming errors, faulty mechanics and other problems. Now some are scrambling to prevent virus attacks that could cost carriers millions of dollars more in repairs and lost business. As more consumers begin surfing the Web and sending e-mail messages on cellphones and handheld devices, along comes a new worry: worms and viruses spread via Internet-enabled equipment. The problem is still small, with only a few cases reported globally so far. But as operating systems in cellphones become standardized, hackers are likely to begin focusing on vulnerabilities in those systems as they have with personal computers. And as cellphones and personal digital assistants connect to the Internet at ever faster speeds, more users will be able to download files with attachments, some of which may be infected. Asia, where high-speed networks and text messaging on mobile phones are common, is the most vulnerable to these threats. As carriers in Europe and North America adopt similar technology , they will confront similar hazards. The link for this article located at TechNewsWorld is no longer available. . Mobile network providers invest up to $8 billion annually to rectify devices affected by software bugs and emerging security vulnerabilities.. Telecommunications Security, Mobile Malware, Network Safety. . Anthony Pell
Cyber guerillas are the newest breed of hackers. They love to hunt and sniff the air for signals emitted from the wireless handheld devices that you use to connect primarily with the WLAN. They then exploit the vulnerable network to launch . . . . Cyber guerillas are the newest breed of hackers. They love to hunt and sniff the air for signals emitted from the wireless handheld devices that you use to connect primarily with the WLAN. They then exploit the vulnerable network to launch an attack. In this article, Judith talks about who the cyber guerillas are and where you will most likely meet them. Additionally, she'll cover the various wireless security issues and describe how they use the tools of the trade to intercept, intrude upon, and attack the unprotected wireless traffic. Finally, a brief discussion about the VPN support, followed by a list of the shortcomings of mobile devices -- with suggested solutions to overcome them, of course. They are cyber spies that were the stuff of fiction you read a decade ago, but now they can spring right at you out of Jack's proverbial box if you are not careful -- especially when you use your Palm or other wireless mobile device on the road. They are the cyber version of the urban guerillas you read about in the newspapers. Cyber guerillas intend to deny or destroy wireless services for legitimate users, and as such, are more of a danger, even, than hackers. Hackers, or intruders, know ahead of time where the signals emanating from wireless networks (WLAN and mobile) are (see C. C. Palmer's "Ethical Hacking"). They use the trade tools to listen to actual packet flow in a vulnerable network and then break into the intended system targets. Cyber guerillas, on the other hand, search for signals in the spectrums and then use hacking tools to decrypt the transmissions. The link for this article located at IBM is no longer available. . Explore the realm of digital saboteurs, the new wave of cybercriminals targeting Wi-Fi systems. Uncover their tactics and learn how tosafeguard your networks. Wireless Security, Network Exploitation, Mobile Threats, Cyber Guerillas, VPN Solutions. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.