Wired

Hackers Could Decrypt Your GSM Phone Calls

MOST MOBILE CALLS around the world are made over the Global System for Mobile Communications standard; in the US, GSM underpins any call made over AT&T or T-Mobile's network. But at the DefCon security conference in Las Vegas on Saturday, researchers from the BlackBerry are presenting
/
Verizon sells Tumblr just two years after acquiring social network

Verizon sells Tumblr just two years after acquiring social network

Verizon is selling Tumblr, just two years after buying the social network as part of its tumultuous $4.48bn Yahoo acquisition. Founded in 2007 as one of the first “microblogging” services, Tumblr has been acquired by Automattic, the web services company best known for running blogging
/

Part 1 – How Cloud Apps Are Making Businesses More (and Less) Secure

Cloud Apps Security

Today, more than ever before, employees are working while on-the-go. The ease with which a worker can enjoy a coffee-café latte in one hand and click “send” with the other is made possible by the explosion of mobile devices and mobile cloud-based applications. According to IDC, more than 96.2 million mobile employees are taking advantage of the mobility offered by today’s technologies.

Cloud-based Apps and the Mobile-Worker

To best protect these users while mobile, companies need to change their security strategy.

Traditionally, businesses have invested heavily in securing their infrastructure and endpoints— the security of the data lies within the four walls.

These walls quickly become ineffective when using cloud-based apps. Your firewall and network monitoring solutions? Traffic flies right through. Endpoint software? On a phone? Even if AV companies had software to install, will your users even install it?

Last, migration to cloud apps makes passwords (and related authentication solutions) the key to any security strategy. A loss of a password to an attacker can be detrimental. Regardless of whether they are using laptops, tablets, or phones, employees are using passwords that need to be protected. Passwords have become the key battleground for cloud-enabled organizations.

Mobile Worker Attack Methods

We’ve seen a sharp increase in two types of attacks focused on mobile workers that are trying to steal credentials. In addition, mobile devices continue to be prime targets for malware attacks.

Proximity-focused attacks: In this type of attack, a cybercriminal creates a fake wireless access point in a public area, such as an airport, in the hopes of tricking their victims into connecting. Mobile workers searching through the longlist of airport Wi-Fi options until they find one that doesn’t require a password may be susceptible to this attack method. Hackers will set up a fake network service in hopes a user will click on it, giving the attacker access to much of the sensitive information and credentials from the device.

Phishing attacks: With a phishing attack, a cyber-criminal usually generates a fake email pretending to be someone they’re not and requests money, passwords or account numbers to take over a victim’s finances, steal sensitive information or hold their account hostage until a ransom is paid. While mobile devices receive phishing attacks via email, they can also receive them from text messages, communications apps, social media and practically anywhere a mobile device can receive a message. This not only increases the number of phishing attacks on mobile devices but the susceptibility of users falling victim to this type of attack.

Malvertising and malware attacks: We have observed a sharp increase in attackers buying malicious ads and getting them placed on high-traffic websites. These ads find vulnerabilities in browser software and then exploit the system to install ransomware or more persistent malware. According to Nokia’s global Threat Intelligence Report, 2016 saw the highest level of mobile device malware infections since 2012 with smartphone malware infections rising nearly 400 percent.

The explosion of mobile workers is pushing companies to develop cloud-based security for their mobile devices. In the next article, I’ll talk about what those security strategies should look like.

By Todd O’Boyle

Todd O’Boyle

Todd is a co-founder and CTO at Strongarm, an Allied Minds company. Prior to Strongarm, Todd spent 15 years at The MITRE Corporation, providing technical support to the Department of Defense and the Intelligence Community. He also served as principal investigator for a project developing methods to improve how operators respond to adversaries.

Todd has a Bachelor of Science, Computer Science from Purdue University.

View Website
Biometric Authentication

Passwords: More Secure Than Biometric Authentication?

Biometric Authentication Biometrics has long granted or denied access to secure things like premises and vehicles. Now it is being seriously considered for the same ...
Cloud Monitoring and Data Performance Services

Cloud Monitoring and Data Performance Services

CLOUD PERFORMANCE MONITORING Monitoring and evaluation in cloud computing are essential processes. They determine whether a company’s applications on the cloud are effective, safe, and efficient ...
Glassdoor’s 10 Highest Paying Tech Jobs Of 2018

Glassdoor’s 10 Highest Paying Tech Jobs Of 2018

Glassdoor is best known for its candid, honest reviews of employers written anonymously by employees. It is now common practice and a good idea for anyone ...
Numeraire Cryptocurrency

Digital Cashless Society: Dystopian Nightmares or Utopian Dreams

Digital Cashless Society A truly digital cashless society was long the realm of dystopian nightmares (or utopian dreams depending on how you look at it), ...
Reuters news

Exclusive: Google’s jobs search draws antitrust complaints from rivals

/
BRUSSELS/SAN FRANCISCO (Reuters) - Google’s fast-growing tool for searching job listings has been a boon for employers and job boards starving for candidates, but several rival job-finding services contend anti-competitive ...
Wired

Facebook’s Voice Transcripts Were More Invasive Than Amazon’s – WIRED

/
The tail end of the Defcon hacking conference this week saw a remote car-start dongle and app that could have been hacked to steal cars, along with a drone hacking ...
Kubernetes Penetration Test Report: Insights and Twistlock Response

Kubernetes Penetration Test Report: Insights and Twistlock Response

/
The Cloud Native Computing Foundation (CNCF) late last year commissioned a penetration test to identify unknown security vulnerabilities and design weaknesses in Kubernetes. The final report is posted in the ...