Archive for the ‘Websense’ Category

How Singapore IT practitioners perceive mobility risks

Thursday, March 1st, 2012

Singapore was one of 12 countries surveyed in a new “Global Study on Mobility Risks” conducted by Ponemon Institute. Out of the overall 4,640 IT and IT security practitioners surveyed, 259 respondents were from Singapore.

Perception of mobile phone use as a threat and presence of security controls to mitigate the risks.

Perception of mobile phone use as a threat and presence of security controls to mitigate the risks.

The study was sponsored by content security provider Websense Inc, and is designed to help IT security professionals plan for an increasingly mobile workforce.

“We asked thousands of IT security professionals and found mobile devices were overwhelmingly important to business objectives,” said Dr Larry Ponemon, chairman and founder of the Ponemon Institute.Corporate mobile devices and the bring-your-own-device (BYOD) phenomenon are rapidly circumventing enterprise security and policies.

In Singapore, 45 percent of respondents say that their organizations experienced a data breach due to insecure mobile devices, and 22 percent are unsure.

“However, mobile devices put organizations at risk — risks that they do not have the necessary security controls and enforceable policies to address. It’s also clear that employees are deliberately disabling security controls, which is a serious concern,” Dr Ponemon addedThis is slightly less than the overall proportion of 51 percent for all 12 countries.

Fifty-five percent say that their employees circumvent or disengage security features such as passwords and key locks – versus the overall 59 percent.

Below is the Executive Summary for the survey of IT & IT Security Practitioners in Singapore, which was extracted from the “Global Study on Mobility Risks”.

(more…)

BYOD causing security breaches

Thursday, March 1st, 2012

51 percent of organizations lose data through mobile devices, while 59 percent of employees dodge security controls, according to a new  “Global Study on Mobility Risks” unveiled at the RSA Conference in San Francisco, USA.

The “Global Study on Mobility Risks” by Ponemon Institute.

The “Global Study on Mobility Risks” by Ponemon Institute.

Mobile devices help business, but security is needed to prevent costly data loss.

Corporate mobile devices and the bring-your-own-device (BYOD) phenomenon are rapidly circumventing enterprise security and policies. This survey defines mobile devices as laptops, USB drives, smartphones, and tablets.

“IT has spent years working on desktop security and trying to prevent data loss over web and email channels—but mobile devices are radically changing the game,” said Tom Clare, senior director of Product Marketing Management.Seventy-seven percent of more than 4,600 respondents in 12 countries (Australia, Brazil, Canada, France, Germany, Hong Kong, India, Italy, Mexico, Singapore, United Kingdom, and the United States) surveyed agree that the use of mobile devices in the workplace is important to achieving business objectives.

But 76 percent also believe that these devices put their organizations at risk—and only 39 percent have the necessary security controls to address the risk.

The study was conducted by the Ponemon Institute and sponsored by content security provider Websense Inc, and is designed to help IT security professionals plan for an increasingly mobile workforce.

“Tablets and iOS devices are replacing corporate laptops as employees bring-their-own-devices to work and access corporate information. These devices open the door to unprecedented loss of sensitive data. IT needs to be concerned about the data that mobile devices access and not the device itself,” Clare added.The research shows that organizations often don’t know how and what data is leaving their networks through non-secure mobile devices.

Traditional static security solutions such as antivirus (AV), firewalls, and passwords are not effective at stopping advanced malware and data theft threats from malicious or negligent insiders.

To safely permit corporate use of mobile devices, Websense has released its new Websense TRITON Mobile Security solution.

Sixty-five percent of respondents are most concerned with employees taking photos or videos in the workplace—probably due to fears about the theft or exposure of confidential information.

Other unacceptable uses include downloading and using internet apps (44 percent) and using personal email accounts (43 percent).

Twitter reaches 500 million users

Thursday, February 23rd, 2012

Twitter now has more than 500 million users, according to twopcharts.com, although only 100 million are active accounts.

Websense illustrates “some of the not-so-high Twitter highlights of the last 5 years”.

Websense illustrates “some of the not-so-high Twitter highlights of the last 5 years”.

Started in 2006, Twitter had hit 300 million users back in May 2011.

Commenting on the situation, Mr. Carl Leonard, Senior Manager, Websense Security Labs said: “… what’s in a number? Twitter is free to use, easier to abuse and is constantly targeted by malware authors and spammers. It’s nothing new; not all Twitter users are who they claim to be. Let’s see this more than just a numbers game and focus on keeping users safe in real-time so they are not just another statistic.”Twitter estimated that only ten percent of its active users have sent more than 100 tweets, while only 20 percent of users have sent more than ten tweets.

Facebook hit 500 million ACTIVE users back in July last year.

Launched in 2004, Facebook now has more than 845 million monthly active users, according to its statistics.

The number of DAILY active Facebook users is roughly half that number, at 483 million.

The popularity of Twitter has made it a fertile hunting ground for abuse by spammers and bot networks.

Kelihos spam engine lives on

Wednesday, February 22nd, 2012

The Websense Security Labs Spam Trap system has detected a variant of Kelihos that is apparently still active.

Google Maps showing geographically how widespread the Kelihos command and control and peers infrastructure is, and therefore how well protected the botnet is.

Google Maps showing geographically how widespread the Kelihos command and control and peers infrastructure is, and therefore how well protected the botnet is.

“Kelihos is yet another example of how botnets shut down and reappear. Malware authors have a motive to get them up and running again. Websense Labs detected this new variant of Kelihos as we are constantly monitoring web and email exploits. More importantly, we are able to join the dots between these different attack vectors and protect against cybercriminals achieving their ultimate goal – stealing data,” said Carl Leonard, Senior Security Research Manager (EMEA), Websense Security Labs.Over the last half a year, the spam engine Kelihos has attracted the attention of many people, including security company researchers and analysts.

Microsoft had partnered with Kyrus Tech Inc. and Kaspersky Lab to take down the Kelihos botnet in September 2011.

However, Microsoft has recently confirmed, on its official blog, a new generation of Kelihos variants derived from the original Kelihos botnet.

Websense Security Labs has written up a detailed account of their investigations into this resilient nuisance.