Beat the January Blues by Updating and Upgrading Your Digital Technology

Posted on 1/25/2012 @ 11:40 PM in #News by RobertSiciliano 2 comments

A new year is always a welcome opportunity to start fresh, clean up, clean out, update, and upgrade. I’ve always believed that if you aren’t moving forward, you’re moving backward. Staying still in one spot really means that the people and the world around you are passing you by.This philosophy also relates to the management of your digital life. Old technology isn’t necessarily outdated, but it may need updating, while obsolete technology certainly needs upgrading.Old PCs: Thanks to “the cloud,” even an old Windows XP machine can have a new lease on life. Reinstalling the operating system and using it for cloud-based applications like mail andGoogle docscan allow a relic to function better than its old self ever did.New PCs: I have a Windows 7 desktop that drags a bit, does weird things, and makes the occasional funny noise. It’s about two years old and still in relatively good shape, despite the random glitches. It’s just a matter of time, however, until it degrades to a point where it either stops working Continued...

Cross-Device Security Means “All Access”

Posted on 1/25/2012 @ 11:32 PM in #News by RobertSiciliano 0 comments

You may have a laptop, desktop, netbook, notebook, Ultrabook, tablet, Mac, or mobile phone. You might be single, married, or have ten kids. Either way, you probably have at least one, if not six or more, devices requiring comprehensive security. My family of four has 12 devices, all of which I do my best to lock down like the digital equivalent of Fort Knox.In order to manage multiple devices “cross-platform,” wherein one device may run Mac OS X while another runs Windows, while your phone is completely different, you need a security solution that is comprehensive, affordable, and straightforward.PC Magazineselected McAfee All Access for itsEditors’ Choice Award, scoring the product with 4.5 stars out of 5 and praising the thoroughness of the protection offered, for any and all devices an individual or a household might own.McAfee All Access Wins Editors’ Choice AwardIn contrast to traditional consumer security products that only offer per-device subscriptions, McAfee All Access is the first solution that Continued...

FBI Needs Your Help to Take Down Cyber Fraud

Posted on 1/25/2012 @ 11:26 PM in #News by RobertSiciliano 0 comments

Public–private partnership(PPP) describes a government service or private business venture which is funded and operated through a partnership of government and one or more private sector companies.Here’s an example of “public-private partnerships”: Six Estonian nationals have been arrested and charged with running a sophisticated Internet fraud ring that infected millions of computers worldwide with a virus and enabled the thieves to manipulate the multi-billion-dollar Internet advertising industry. Users of infected machines were unaware that their computers had been compromised—or that the malicious software rendered their machines vulnerable to a host of other computer viruses.Beginning in 2007, the cyber fraud ring used a class of malware called DNSChanger to infect approximately 4 million computers in more than 100 countries. There were about 500,000 infections in the U.S., including computers belonging to individuals, businesses, and government agencies such as NASA.The FBI further states “A complex Continued...

Which Will Make a Bigger Splash in 2012, Mobile Wallet or EMV?

Posted on 1/23/2012 @ 9:36 PM in #News by RobertSiciliano 1 comments

During the latter half of the past decade, a heated battle has been fought around the world to determine which payment method will take center stage in the coming years. Many believe mobile payment will leapfrog what is known asEMV, which stands for Euro MC/Visa, or chip and PIN credit card technology, and that soon enough chip and PIN technology will go the way of the magnetic striped credit card.Certainly, there are many major companies that have wagered heavily on the presumed success of their chosen technology, and these companies have a vested interest in the failure of their rivals. Personally, I think there is more than enough room for bothMobile Walletand EMV.Google recently introduced Google Wallet, a mobile app that turns your phone into a wallet by securely storing your credit cards on your phone, as well as promotional offers. When you make a purchase from a brick-and-mortar store that accepts Google Wallet, you can pay and redeem offers quickly by simply tapping your phone at the point of Continued...

Safe Banking On Your Mobile Device

Posted on 1/23/2012 @ 9:28 PM in #News by RobertSiciliano 0 comments

Mobile banking has experienced rapid growth over the last three years, in the U.S., more than doubling from 5% of online adults in 2007 to 12% by June 2010. Furthermore, Forrester predicts that one in five–or 50 million–U.S. adults will be using mobile banking by 2015.However,identity theftis a major concern and studies show that many Americans are still uncomfortable with mobile banking, citing security as a top concern. In fact, 35% of US online adults said that they do not use their device to do banking for this reason.Responding to these concerns, banks have been working to improve mobile security by offering a consistent sign-on experience for both their online and mobile channels, including multi-factor authentication programs for mobile.While banks are trying to do their part, users have to take additional steps to make sure that their mobile data is protected.Consumer Reportsestimates that almost 30% of Americans that use their phones for banking, accessing medical records, and storing other sensitive Continued...

Necessary Security Updates for 2012

Posted on 1/23/2012 @ 9:18 PM in #News by RobertSiciliano 1 comments

There are changes coming in the world of security technology. Never before have so many criminals been so organized across borders as they are today. The Internet has spawned internationalcrime syndicatesof the best of the best criminal minds, who seek to take from you, your government, and all the merchants we rely on to provide products and services.Security companies have been preparing for this eventuality, and many are rolling out new and improved versions of their technologies to fight the good fight.Antivirus: Today’santivirusprotection is not the same as yesterday’s. Over the years, antivirus companies have had to upgrade their detection methods and change the way they recognize malware. And it’s no longer effective to have a free, basic antivirus program installed. Criminals are coming from all angles: attacking your PC’s operating system, various browsers, Macs, mobiles, and any website you visit. In response, antivirus companies now offer “total protection” or “all access” suites of software, to Continued...

Resolve to Be Digitally Secure This New Year

Posted on 1/18/2012 @ 12:57 AM in #News by RobertSiciliano 0 comments

Let’s get one thing straight: it’s no longer possible to deny that your personal life in the physical world and your digital life are one and the same. Meaning, while you are present here on the ground, you continue existing online, whether you know it or like it or not.Coming to terms with this reality will help you make better decisions in many aspects of your life.1. Get device savvy: Whether you’re using a laptop, desktop,Mac, tablet, mobile, wired Internet, wireless, or software, learn it. No excuses. No more, “My kids know more than I do,” or, “All I know how to do is push that button-thingy.” Take the time to learn enough about your devices to wear them out or outgrow them.2. Get social: One of the best ways to get savvy is to getsocial. By using your devices to communicate with the people in your life, you inevitably learn the hardware and software. Keep in mind that “getting social” doesn’t entail exposing all your deepest, darkest secrets, or even telling the world you just ate a tuna sandwich. Continued...

Data Theft Doesn’t Always Mean Being Hacked

Posted on 1/18/2012 @ 12:49 AM in #News by RobertSiciliano 0 comments

Recently UCLA announced 16,000 patients were potential victims of identity theft because a doctor’s home office was broken into and burglarized. This is an unfortunate example of an employee taking home a laptop or storage device from the office resulting in a seriousdata breach. The thief may have no idea what he has in his hands, but the damage is done, the data is breached.UCLA had to send letters to all 16,000 plus affected warning that there is a possibility their identities could be stolen. On top of that they had to hire an identity theft protection firm to cover each breached record in the hopes the service will mitigate the loss. Data loss like this may cost UCLA hundreds of thousands of dollars by the time the dust settles.The documents stolen were birth certificates, home addresses, medical documents and numerical medical identifiers. The information breached did not include Social Security numbers or financial information. Meanwhile reports state the data was encrypted, but the password to access Continued...

Security Beyond the Desktop

Posted on 1/18/2012 @ 12:37 AM in #News by RobertSiciliano 0 comments

A defensive posture no longer suffices for the protection of the devices and data that have become ubiquitous in today’s digital world. Rather than simply rushing to install defenses on computers, in networks, and in the cloud, we urgently need to step back and take a broader view of the security landscape, in order to take more calculated preemptive measures.McAfee Security Journalis a publication intended to keep security executives and technical personnel informed about various cutting edge topics in order to help them make better-informed security decisions. Regular, everyday computer users can increase their security intelligence by having a read. The report details the following highlights on the evolution of cyber threats and the necessity of a more inclusive security strategy:The human link: There is an ever-widening disparity between the sophistication of networks and the people who use them. When direct attacks on an organization’s defenses fail, cybercriminals often use social engineering toolkits Continued...

Securing Your Small Business Like A Bank

Posted on 1/8/2012 @ 12:45 PM in #Art by RobertSiciliano 0 comments

Banks know security. They have to, because as Willie Sutton once said “that’s where the money is”.A bank, for example, has multiple layers of security. First, consider the perimeter of the building, which is often designed to include large windows, so that passerby or law enforcement can easily see any problems occurring inside. The bank’s doors have locks. Of course, there is an alarm system, which includes panic buttons, glassbreak detectors, and motion sensors. These are all layers, as are security cameras, bulletproof glass, and armed guards. Ideally, tellers and management should have robbery response training. Many banks use dye packs or even GPS to track stolen cash.Each of these layers is designed to make it harder for a robber to do his job.TicoTimesreported“Banco Nacional installed more than 9,000 security cameras in each of its bank and ATMs this week as part of a new satellite surveillance system. The cameras will provide a live video feed from each bank and ATM location and will be watched by a Continued...

Holiday Phishers Use Social Media

Posted on 1/8/2012 @ 12:37 PM in #News by RobertSiciliano 0 comments

Every social media website in existence depends on advertising for its survival, to some extent. Criminals exploit this by mimicking these familiar platforms when sending millions of phishing emails designed to entice users into clicking malicious links or visiting spoofed websites that resemble legitimate social media. They also create pages within popular social media that are infected with malware, or malicious links designed to infect the PCs of anyone who clicks.McAfee has exposed numerous Christmas-related scams. To avoid being snared in a holiday phisher’s net, beware of:Promotional scams and contests:Scammers know that contests and free offers make attractive lures, and have sprinkled Facebook with phony promotions aimed at gathering personal information.Holiday phishing scams:Since people tend to be busy and distracted during the holiday season, phishers incorporate holiday themes into their emails and social media messages, hoping to trick recipients into revealing personal details.Coupon scams:When Continued...

2012 Threats: Are You Ready?

Posted on 1/8/2012 @ 12:29 PM in #News by RobertSiciliano 0 comments

History is said to be a good indicator of what might come in the future. If you follow trends in how things are done and what tends to gain momentum then you can get a pretty good idea of what’s ahead.McAfee Labs™ is made up of security professionals who spend all their waking hours observing and combating threats to our digital identifies. If anyone is in a position to give us a window into the future on information technology threats, it’s these guys and gals. Here’s what they are predicting we should watch out for in 2012:- Attacks on critical infrastructure and utilities—Attackers from all over the world have set their focus on critical life supporting utilities such as water and power to hold those utilities hostage for payment or to disable them to cause terror. This is the kind of industrial threat that many consumers fear. Unfortunately, many industrial and national infrastructure networks were not designed for modern connectivity, making them vulnerable.- Political hacktivism—Hactivism is the use of Continued...

Seasonal Security: A Poem

Posted on 1/6/2012 @ 7:07 AM in #News by RobertSiciliano 0 comments

It’s that time of year, for holiday cheer,to give of ourselves and ring in the New Year.But while you celebrate, please keep in mind,criminals and hackers are not far behind.Mobile malware is here; it’s increased since last year.Be sure to install mobile malware protection,so that you don’t receive an unwelcome infection.QR codes are barcodes consumers can scan.With their smartphones in hand,a digital bar can locate a great deal, near or far.But not so fast: these codes can be tricky.Bad guys can use them to slip your cell a Mickey.Before clicking that link, remember to think:Is that code okay? Or might it be sticky?Scareware pops up with frightening lies:“Your PC has a virus! Install me, or it dies!”But before you take action, be aware it’s a scam,and shut down that pop-up before you get jammed.Apples are targeted now more than ever,‘cause when Mac users hear “virus,” they say, “Not me! No way! Never!”But they ought to know, studies now showthere is plenty of malware that will plague Macs forever.So install Continued...

5 FFIEC Compliance Tips For Banks

Posted on 1/6/2012 @ 6:59 AM in #News by RobertSiciliano 0 comments

Experian’s Chris Ryan addressed five major questions about compliance with the FFIEC’s recent guidance on banking authentication. What follows are his responses, summarized:What does “layered security” actually mean?“‘Layered security’ refers to the arrangement of fraud tools in a sequential fashion.A layered approach starts with the most simple, benign and unobtrusive methods of authentication and progresses toward more stringent controls as the activity unfolds and the risk increases.”What does “multi-factor” authentication actually mean?“A simple example of multi-factor authentication is the use of a debit card at an ATM machine.The plastic debit card is an item that you must physically possess to withdraw cash, but the transaction also requires the PIN number to complete the transaction. The card is one factor, the PIN is a second.The two combine to deliver a multi-factor authentication.”Who does this guidance affect?And does it affect each type of credit grantor/ lender differently?“The guidance pertains Continued...

Home Invasion Was “The Ultimate House of Horrors”

Posted on 1/4/2012 @ 7:33 AM in #News by RobertSiciliano 0 comments

In a 2007 home invasion Steven Hayes and Joshua Komisarjevsky, the 2 men found guilty of a home invasion in Connecticut, brutally attacked and killed a mother and her daughters. The father was left for dead in the basement. Their crime began when they saw the mother (who was eventually murdered) in a parking lot and followed her home.The home was invaded at 3am. The father was immediately beaten and tied up in the basement. He was held captive for a time but he escaped alive. The kids were tied to their beds and the mother was forced to go to the bank and withdraw money.While at the bank the mother told a bank representative what was happening. The bank called the police who sent cruisers to the scene. It ended badly.Hayes was sentenced to death and the prosecution has just rested in its case against Komisarjevsky. The AP reports the prosecutor said in his closing arguments“It was shockingly brutal. It was evil. It was vicious,” adding the men created a “hellish inferno.” The prosecutor continued by Continued...

5 Quick Tips on How to Prevent the Next Data Breach

Posted on 1/4/2012 @ 7:23 AM in #News by RobertSiciliano 0 comments

You may be aware of the uber techie bad boy hackers of Anonymous/Lulz/Anti-sec/Wikileaks/ScriptKiddies and the organized web mobs of the world. Did you know they have wreaked havoc to the degree that almost a billion records have been compromised? Arecent study“gathered 3,765 publicly disclosed data breach incidents occurring in 33 countries during 2005-2010. The incidents included over 806.2 million known records being disclosed– averaging more than 388,000 records per day/15,000 records per hour every single day for the past six years.”#1 Not all data ishacked. Exercise basic to advanced premise/physical security such as access control, security cameras and alarms.#2 Limit the amount of data required from customers. If you don’t really need a Social Security number then don’t store it. If credit card information doesn’t need to be stored then don’t store it.#3 Recognize that knowledge based authentication questions as password resets can bring down the house. Many of the answers can be found in social media Continued...

Banking Security Guidelines Go Into Effect in January 2012

Posted on 1/4/2012 @ 7:07 AM in #News by RobertSiciliano 1 comments

As banking applications evolve, common attacks on banks are becoming correspondingly more sophisticated. Small businesses, municipalities, and moneyed individuals are often targeted for obvious reasons: they have hundreds of thousands of dollars, if not a few million, in the bank, but their security is often no more effective than that of an average American household.The Federal Financial Institutions Examination Council’s (FFIEC) updated security guidelines go into effect in less than a month. It is imperative that financial institutions recognize that the security precautions currently in place are ineffective in the face of new, more sophisticated attacks. Criminals have gotten around the minor hurdles posed by the tools being used to authenticate clients and prevent unauthorized transactions.Basic multifactor authentication may be relatively effective for bank accounts that generally contain only enough to pay a month’s worth of bills. But high value accounts are more prone to attacks, and require Continued...