Proaktive IT-Sicherheit
 

Sicherheits-Center

Neuste Beiträge - Mobile und drahtlose Technologien

An approach to an organization's risk factors (part 3)

In this third and final part of our article series about risk factors, we will examine Human attack factors and Physical factors.

» mehr Informationen

An approach to an organization's risk factors (part 2)

The previous article discussed different procedures and systems that could be invoked in order to mitigate risk. In subsequent parts we will examine areas at risk, starting with Electronic factors.

» mehr Informationen

An approach to an organization's risk factors (part 1)

The aim of this type of initial risk analysis is to identify potentially vulnerable points that may be exploited if they are not sufficiently secured.

» mehr Informationen

Malicious images (codes)

The ease involved in creating QR codes that links to web pages implies that this will be a popular way to facilitate the propagation of malware for mobile devices.

» mehr Informationen

Restricting access to net resources for "good reasons"

The target should be the illegal act itself, rather than the communication mediums that may be used in planning undesired activities.

» mehr Informationen

Diversification of attack vectors

Computer systems are becoming increasingly sophisticated and complex with components that are individually computerized. This increases the attack surface for cybercriminals, and represents a challenge for users and the security industry.

» mehr Informationen

Mobile (in)security

The steps that private users and organizations can take to protect themselves, are quite similar in character to protection of traditional computers.

» mehr Informationen

Free music with an unwanted tune

Whenever malware authors find new vehicles to spread their malware, the probability for success increases immensely.

» mehr Informationen

Digital Dumpster Diving

Dumpster diving is known as examining trash to find interesting items that have been discarded. This security article's title refers to examining digital trash, which for certain purposes may turn out to be useful.

» mehr Informationen

Firesheep - an eye-opener or a tool for criminals

A little more than one week ago a new extension to the Firefox web browser was published. And it got attention for sure!
 

» mehr Informationen

Man-in-the-middle goes Mobile

The term Man-in-the-middle in a security context refers to an attack where someone/-thing is inserted between two endpoints and intercepts the communication between those. The intent is usually to obtain information and use this for illegitimate purposes. Recently the term Man-in-the-mobile, abbreviated as Mitmo, emerged.

» mehr Informationen

A plethora of malware for mobile phones to be expected soon (?)

In later years dangerous malicious software for mobile phones and other handheld devices has been predicted and expected by several analysts. Norman, however has traditionally been among those more reluctant in predicting that the explosion of if malicious software for mobile devices is imminent. In retrospective it seems safe to say that our view has proven correct (so far).

» mehr Informationen

Those Lazy Hazy Crazy Days of Summer

Indeed, summer is associated with long, lazy, relaxing days in the sun. Nothing to worry about in the world. Unfortunately everyone does not take their vacation at the same time as you. Cyber crime does not stop during summer - in fact cyber criminals have their heyday during this season.

» mehr Informationen

Upcoming? The age of the cyborgs

We should have been expecting it - some did. Late May this year a researcher in the U.K. claims to be the first person in the world infected by a computer virus.

» mehr Informationen

Data harvesting by mistake

Using wireless networks for accessing the Internet has become increasingly popular. These days you can access the Internet from virtually anywhere by connecting to a wireless network.

» mehr Informationen

Systems prime for exploitation?

We have now looked into our crystal ball and believe that we see new types of systems, which in the near future will rapidly climb on attackers' ladder of priorities.

» mehr Informationen

Dangerous device diversification

Most organizations have been experiencing an explosion in the number and types of devices that are in use in their networks. Gone are the days when traditional desktop computers, servers and printers, hard-wired together, were the available hardware in the network.

» mehr Informationen

New devices vulnerable for Internet based attacks, OR: The future is here

In our regular security articles, we have several times pointed out that security vulnerabilities and exploits are not restricted to "traditional" computers. We have predicted that several of the devices that our daily lives are filled with, may be exploited in the (near) future.

» mehr Informationen

Hot stuff: Exploitable routers - a flash of the whole iceberg

A new type of malicious software has recently been getting some media attention. The most interesting part of this is the fact that the malware's targets are not traditional computers. Rather does this malware attack different types of devices, namely routers and modems.

» mehr Informationen

Mobile phone threats - hype or (finally) truth?

So far there has been no really dangerous malicious software targeting mobile phones. The New Year 2009 started with a new, interesting threat to mobile phones, which may change this picture.

» mehr Informationen

USB-Sticks: alte Probleme in neuem Gewand

Die zunehmende Verwendung und wachsende Speicherkapazität von USB-Sticks sorgen für große Sicherheitsprobleme.

» mehr Informationen

Öffentliche WAPs: Licht und Schatten bei drahtlosen Internet Access Points

Stellen Sie sich eine harmlos wirkende Person vor, die bei einem Cappuccino im Café sitzt und vorgibt, im Internet zu surfen; tatsächlich aber sammelt sie in böswilliger Absicht Benutzernamen und Kennwörter von anderen Laptop-Benutzern im Lokal.

» mehr Informationen

Vernetzbare Geräte überall – ein Sicherheitsproblem

Für den Benutzer mag das komfortabel und praktisch sein, für die Sicherheit bedeutet das jedoch eine große Gefahr.

» mehr Informationen

Big Brother is FINDING you!

Der Norman-Artikel  "Big Brother is HEARING you" vom letzten Jahr endete mit:

Also viel Spaß mit VoIP, aber ... Vorsicht, man kann nie wissen, wer zuhört!

» mehr Informationen

Sünder unter der Sonne

Sommer, Sonne und süße Sünden verbinden die meisten Leute mit Glück und harmlosen Freuden. Die wenigsten Menschen, die unter wolkenlosem Himmel an ihren Notebooks arbeiten - ob sie nun im Park liegen, in der Cafeteria sitzen oder sich im Ferienhaus erholen -, machen sich Gedanken über Hacker und Computerspione. Doch Diebe machen keinen Betriebsurlaub! Und es gibt eine Menge Übeltäter unter der Sonne.

» mehr Informationen

Sicherheit für drahtlose und portable Geräte im Sommerurlaub

Wenn Sie Urlaub machen, haben andere Hochsaison. Für Hacker, Virusautoren und Computerdiebe bietet die Urlaubszeit eine Fülle einmaliger Gelegenheiten, wenn Sie nicht für angemessenen Schutz sorgen. Viele Computernutzer tragen im Sommer ihre kabellosen Notebooks ins Freie und genießen neben der Arbeit die Sonne. Sicherheit, Computerviren und Industriespionage sind nicht gerade die Themen, die ihnen in erster Linie in den Sinn kommen.

» mehr Informationen

Von Mobilgeräten ausgehende Gefahren

Sicherheitshinweis, Woche 21, 2005

» mehr Informationen

Sicherheit bei drahtlosen Netzwerken

Drahtlose Netzwerke (WLAN) erfreuen sich sowohl bei Privatanwendern als auch bei größeren Unternehmen zunehmend größerer Beliebtheit. Die meisten Menschen sind sich der zahlreichen Vorteile von drahtlosen Netzwerken bewusst, nicht alle wissen jedoch über die möglichen Gefahren Bescheid, die auftreten können, wenn nicht die entsprechenden Sicherheitsmaßnahmen getroffen werden.

» mehr Informationen

Proof of concept worm for handheld devices

The first worm that spreads through handheld devices, like mobile phones, is observed. This is a "proof of concept" program without malicious code.

» mehr Informationen

Attacks from the Internet on home PCs

Security Information  Week 19, 1999 One normal way to connect to the Internet from home is through a dial-up connection. The Internet Service Provider (ISP) may ...

» mehr Informationen

Neuste Blog-Einträge [EN]

The insecurity paradox

2011-08-29
The formula here attempts to explain a paradox in security analysis: If it is true that security is only as strong as its weakest link, why are not those who use insecur...
mehr >>

The 10 most insecure passcodes

2011-06-16
Earlier this week I read an extremely interesting and impressing blog item by Daniel Amitay: Most Common iPhone Passcodes. Amitay has analyzed more than 200 000 passcodes used in an app with a similar...
mehr >>

Purchasing and downloading outdated software

2011-05-23
Last week in the "JoshMeister On Security" blog, the topic was about Apple's Mac App Store, and the fact that software available from this store may not be the latest version. The blog's aut...
mehr >>