Saint_Michael
Nov 26 2007, 08:48 PM
Well I saw this article and after reading it all just to find the top 10 security problems I thought I share them and give my thoughts about them. I know I know its horrible but what can I say, its me  . 1.) Data BreachesFor the most part I am not surprise especially the big stories of 2007 which include the TJ Max breach of 45 million credit/debit cards; I believe that has been the biggest hack job ever in terms of stolen cards and id theft (somewhat). Oh lets not forget the all the VA Hospital data being stolen and all that fun stuff. I know there are other stories of college getting hit, and some medium and large businesses get hit as well but these two stand out hte most for me, especially the way the Tj Max job was done. 2.) Windows VistaI don't get this one really even though they mention the 16 patches that have come out so far in the last 11 months (12 if you get it in December). Heck I think XP had more then that in it's first year being on the market, but most likely when XP support is killed off sometime next year I think resources will be move to vista and see how much damage can be done. Of course if I were a betting man I would see the surge coming after SP 1 comes out for vista and for us who will be sticking with XP for a few more years SP 3. 3.) SpamOk after seeing this I was somewhat shocked, although I think in this list that if spam was in the bottom 5 some other serious stuff has been happening. However, I would say Spam should be number 2 and if I wanted to push it and I could, put it in the number 1 spot. Spam won't go away and in some ways spam does lead into number as well, thus my argument why it would be up there. Spam is spam and the only way to get rid of it is deleting it because if one person gets nailed and sent to prison for 40 years the next person will take over, and its been obvious with some big stories of elite spammers getting nab. 4.) Attack KitsThis one puzzled me at first but after reading it a bit further you can see where Rootkits, and as mention in this article phishing kits. I can't say much about this since nothing big in the news about them jumped out of me; MPack I remember somewhat but I think that was like 4-5 months ago give or take. 5.) Phishing6.) Exploitation of Trusted Brands7.) BotsWell the way the article put these three I comment on this group together as well. One thing I have to say though Bots could replace #2 any day because there were some big stories on bots this year, especially when it came to the Rootkits and zombie computers. With #5 I haven't heard to much about it, but usually when you hear about spam phishing is right next to it. Number 6 is a new one me but it just seems a fancy way of saying they got phished or hack so that one is up for interpretation. 8.) Web Plug-In VulnerabilitiesWell with the popularity of firefox in the last 2 years I would say its reasonable in it spot on trends, of course again nothing stood out really as Active X controls were a big thin in the mid to late 90's. People learn what can you can say and I think the Mozilla boys having been keeping tabs on that, and I do remember an article awhile back mentioning about the potential threat on the firefox plug ins causing some problems. Memory escapes me at the moment on what it was about s sue me. 9.) The Creation Of A Market For Security VulnerabilitiesThis one I have particular interest in since news started showing up about this, and what can I say people would pay anything to keep this security problem quite hush hush and not leaked out for every cracker, hacker, phreaker, and phracker from doing their magic on those computer systems. So it should be interesting what news in 2008 brings about this type of crime of extortion. And FINALLY 10.) Virtual Machine SecurityYeah I am not going to bother trying to explain this one, I have a brief idea on the concept behind this, but I know nothing really stood out news wise about this, and so here is a direct quote what it is somewhat about. QUOTE Finally, the last item on Symantec's list is virtual machine security. Virtualization is all the rage, because of perceived benefits in terms of cost and flexibility of management. Security is in there too, but there's some debate about whether virtualization creates security problems, too. Symantec expects malware writers will give the skeptics some ammunition as they find ways into virtualized systems. Well before I give my perception of the top 10 I would say that computer virus industry and even the term hacker and identity theftwere not on the list, as viruses old and new have been popping up like the Storm Worm that i made a topic about during the summer. For the most part some of the trends are going be around until we design a neural network that connects our minds to net (yeah right), and with some of the newer ones it should be a interesting 2008 especially with Linux on the rise and scaring Microsoft quite a lot. As for my top 10 this is how I would list it. 1. Viruses, Data breachers, Spam 2. Hackers 3. Identity Theft 4. Operating Systems 5. Bots 6. Kits 7. Phishing 8. Web Plug-In Vulnerabilities 9. Creation Of A Market For Security Vulnerabilities 10. Anything Else I can't think of it. I think some people will agree with my list compared to the one the security guru's posted up. SOURCE
Reply
GaMeRrEmAg
Dec 8 2007, 10:48 PM
why did you post this? most people know that symantics software is useless. AVG is a much better application for anyone viewing this that has symantic
Reply
Saint_Michael
Dec 8 2007, 11:22 PM
If you read the topic its not about the software itself its about what they have been dealing with this year and if you read the post a bit more you would understand why I posted it.
Reply
crazyfray
Dec 9 2007, 06:55 PM
Plus I think that Symantec's knowledge base of virus threats is pretty good - I used it to weed out a vundo threat on my brother's machine recently. Have a look http://www.symantec.com/norton/security_response/index.jsp The big antivirus companies all tend to maintain similar things, and are often more useful than the programs themselves if you are already infected (your computer that is, not you  ).
Reply
Similar Topics
Keywords : symantecs 10 internet security trends 2007- Web Browsers
- Safest Internet Web Browsers (59)
Ok there is a big topic going around about web browsers. The facts are web browsers are made to
browse the web and bring back anything you tell it to no matter whats inside. This is why so many
people get viruses. The important thing to do is learn how to use your browsers internet settings.
If you learn the settings for your browser they apply to all. However there are safer web browsers
the best are (Firefox) which is also faster than Internet Explorer. Then there is (Opera), this is
the fastest and safest browser on the web. However some sites and things you do on ...
Did You Know How Hard Workers Are Doing
- to keep the internet safe? (3)
Windows Xp Restarts When Using The Internet
- (0)
Hi Guys, I've had a problem with my computer. I thought it restarted only when using the
internet but I was wrong. I found out that isn't the denominator. I tried disabling the internet
to run a virus scan and the scan can't complete as the computer restarts too often. I followed
the following instructions to read the dmp file the restart error generates. 1) Download and
install the http://www.microsoft.com/whdc/devtools/deb...installx86.mspx Debugging Tools from
Microsoft 2) Locate your latest memory.dmp file- C:\WINDOWS\ Minidump\Mini0...
Broadband Internet Connection Restriction
- Prompt user for username and password (5)
I have broadband internet connection and DI-704P router, Right now all users can connect to the
internet. Is there any possible ways to make the internet connection be password protected? user
must supply their username and password first to connect to internet. Is this possible? Tnx for
any suggestion and tips /smile.gif' border='0' style='vertical-align:middle' alt='smile.gif' /> ...
Cpanel Exploit
- security hole in cPanel to hack the servers of a hosting company (8)
A pair days ago I read this new on Slashdot: cPanel Exploit Used to Circulate IE Exploit
QUOTE "In a dangerous combination of unpatched exploits, hackers have used a previously
undiscovered security hole in cPanel to hack the servers of a hosting company and use hundreds of
hijacked sites to infect Internet Explorer users with malware using the unpatched VML exploit.
cPanel, whose hosting automation software is used by many large hosting companies, has issued a fix.
It's a local exploit, meaning the attacker must control a cPanel account on the target hosti...
White Paper: Security Threat Report: 2008
- (0)
I saw this white paper and I thought I bring down some interesting information that has come from
2007 and leading into 2008. I have to say though that the information on this white paper is pretty
darn mind blowing as I bounce some facts to everyone. Of course since I been getting into this
since last year it is not all that surprising since I posted many topics about it as well.
-Sophos currently sees 6,000 new infected webpages each day -One infected page every 14 seconds
-Only about 1 in 5 of these sites is a hacker site -83 percent are hacked sites, or legitima...
Security Warning 2008: Top 11 Malware Threats To Watch Out For
- (0)
Before I go into this topic I have to say, stop making up these crazy names. I know I just getting
into the security side of things but still as long as there are computer problems and ways to sucker
someone into downloading the stuff, the crazy names will still live on. QUOTE Lieware
ADVERTISEMENT In 2007, there was a lot of "rogue anti-virus software," which is sometimes also
referred to as "fake anti-virus software." But these terms are confusing because there's too
much negation going on. Fake anti-virus software is not anti-virus software at all. So what ...
New Security Hole Discovered In Excel
- (0)
Well I have to same I am bit surprise on this security flaw especially what it can do; in which all
a user has to do is open a malicious Excel document and it allows the hackers to execute remote code
on to your system. As far as how wide spread this vulnerability is, it hits every excel software
from Excel 2000 to Excel 2003 SP2, and it also includes the Mac Version of Excel 2004 as well. OF
course with the disappointment of Office 2007 by some people will still be running the 2003 versions
on their computers. Right now the attacks are minimal and the question for t ...
Security Commom Sense
- (0)
A very good article titled "Security Common Sense" in gnucitizen.org Below is the link to that
article http://www.gnucitizen.org/blog/security-common-sense Website Link
http://www.gnucitizen.org "We basically train a bunch of monkeys to click the yes button for
every security warning." Don't you think many of us fall under the category? because most of
the time we do not see what the dialog says, but press Yes, which might not treat you well
sometimes... A good read....
Linux Security Tools
- (5)
Hi, I've posted some security tools and links in my last posts,I preferd to post new topic and
send he extra here : Network Sniffers # DSniff http://www.monkey.org/~dugsong/dsniff/ #
Ethereal - full network protocol sniffer/analyzer http://www.ethereal.com/ # IPTraf - curses based
IP LAN monitor http://iptraf.seul.org/ # TcpDump - network monitor and data acquisition
http://www.tcpdump.org/ # KISMET - 802.11 wireless network detector, sniffer and intrusion
detection system http://www.kismetwireless.net/ Online Tools # AutomatedScanning.com - commer...
Security Firm Kaspersky Lab Creates Ipod Virus
- (1)
With the flood of news coming about the .ani exploits it seems the tech world is recieve more news
about new hacks, viruses and other bad stuff these days. Today Kaspersky Lab created a virus that
is able to affect the Ipod, however, it is only affecting Ipod's that have linux installed and
not the standard OS that comes with Ipod. The virus goes by the name of Podloso, although they say
it doesn't show a current threat this virus does show the possiblity to install malware into
devices such as the Ipod. They also mention that the virus does not copy it self...
Security Guidelines For Internet Users
- (6)
Security Guidelines for Internet Users 1. Install an anti-virus software, you can free ones like
AVG Free . Ensure that it's regularly updated - this is of the utmost importance. 2.
Anti-virus software is not enough, the security can be tightened using a firewall software which
will help you prevent unauthorized incoming and outgoing communications from your computer while
connected to the Internet. 3. Disconnect your computer from the Internet when not in use. The
longer you are connected to the Internet, the more opportunity you give for persons to gain un...
Php Security Vulnerability - Beware From Spammers
- If you notice your site becoming really slow, you may be a victim (1)
QUOTE PHP Security If you are using PHP on your website we ask that you please read the
following carefully. We have noticed a significant number of PHP websites are being compromised
due to vulnerable PHP code. Spammers are scanning millions of websites on the Internet looking for
PHP scripts that can be exploited to send spam. When they find a script that has a loophole they
send thousands of email messages through the script, often taking down the website or severely
impacting website performance. Generally these loopholes exploit code using paramet...
Major Flaw In .ani File Found In Windows 98 Through Vista Creates Major Security Risk
- Vista Aint that Secure at all (9)
I was able to browse around this and found it interesting since this vunerability is found in 4
Microsoft Operating Sytems, Windows 2000, Windows XP, Windows Vista, Windows 2003 Server. From the
article Microsoft stated that their is a hole in the .ani files, which happen to be related tothe
mouse cursor, when the mouse icon changes depending on what you do. They only mention that with
this flaw it always hackers to break into someone computer and do their thing. But in another
article relating to this attack it was mention that in order for this to happen a user has ...
Brand New Security Holes Found And Patch On This Month Updates And Office Exploits
- (0)
Even though the fiasco with the .ANI exploit is still going strong microsoft released it's month
updates this time they found 4 more critical breaches in it's systems (XP), most people should
have gotten the update pop up screen yesterday. So here is the info on these critical flaws.
http://go.microsoft.com/fwlink/?LinkId=84687 http://go.microsoft.com/fwlink/?LinkId=85130
http://go.microsoft.com/fwlink/?LinkID=85163 http://go.microsoft.com/fwlink/?LinkID=85164
http://go.microsoft.com/fwlink/?LinkId=80251 I don't know how reliable vista will be af...
Javascript Botnet Code Leaked To Internet
- Big time warning (1)
Well lets start off by saying these 2 people are complete morons. The first guy who had this thing
loaded up on the internet so it could be shown on how it works and not securing it so it
couldn't be downloaded. Does a home server ring a bell? guess not. second guy for downloading
it and then uploading it to his site with the excuse that "he thought it would be useful to other
security professionals looking for ways to illustrate just how dangerous a scripting attack can be."
Now this code has been found on several websites and now could be use to hijack web brow...
Shieldsup! Internet Vulnerability Test
- free test to see how vulnerable you are (17)
Gibson Research Company (GRC) has a number of free tests available and their ShieldsUp! is one
of the best I've seen around. QUOTE Without your knowledge or explicit permission, the
Windows networking technology which connects your computer to the Internet may be offering some or
all of your computer's data to the entire world at this very moment! Using this online
utility, you can check on your Windows file sharing, probe common ports and service ports, see what
Windows Messenger is doing in the background, check up on Internet Explorer and muc...
A Very Simple Security Tip
- for Windows 2000/XP (13)
We all know the difference between a limited user and an administrator user under Win2k/XP - you
can't/can install major software, perform system maintainence, and other stuff. But using a
limited user on a day-to-day basis also provides you with decent protection from a bunch of threats:
if the malware is running under your limited-rights user, it can only do as much as you can. For
instance, a limited rights user can't edit the HKLM hive of the Registry, so any malware running
under the same user won't be able to touch that area. It's extremely simple t...
List Of Security Sites
- (7)
List of security sites, I'll try to update the list as soon as I can . with compilations of
recent security threats, Global Incident Analysis Center (GIAC), GIAC training, and Reading Room
http://www.sans.org/ http://www.infragard.net/ http://www.cert.org/security-improvement/
CERT Security Improvement Modules,including general information on firewalls and intrusion
detectors. excellent set of papers on firewalls, viruses, e-commerce, etc. http://www.icsa.net/
http://www.gocsi.com/ (Source of the annual "CSI/FBI Computer Crime and Security Su...
Uno's Role In Internet Laws
- (2)
Its time for UNO to come forward to make a universally accepted Internet Laws. As sites can be
accessed from anywhere in the world, so there should be a single governing body, which will make
laws and these laws should be followed in every country, which are part of United Nations. I know
few years back it was impossible for a 10 year child in a well educated family of India to know the
meaning of porn, but now, with the rising of internet, all these things have came to his desktop. If
a child is served with these type of things, then 7 out of 10 child will be indulge i...
Security Not Safe
- (2)
Hi everyone!!!!!!! This is the last one!! /tongue.gif"
style="vertical-align:middle" emoid=":P" border="0" alt="tongue.gif" /> Ok guys, I heard
somewhere that if we protect some page with password, it is steel not safe at all, if we dont hace a
secure connction (http s ://...) How is it true? is there a posibility that some one can see a page,
even if it is protected by password? (the scrit in tha page don't allow IDs that didn't past
from the login page) is that script sufficent? thanks a lot to every one /biggrin....
Rootkits
- the security threats that no one's heard of (2)
a security threat to be concerned with is the increasing prevalence of viruses containing advanced
rootkits to hide their actions or data on the computer. even from the anti-stuff tools. a
rootkit was originally a name for tools that hackers/crackers would use to maintain root on
unix/linux machines. root is the uber user with all the permissions on a linux box. on windows
these tools can be used to hide data on the harddrive and in the registry by manipulating the way
the data is stored. THe windows api(the thing windows uses to communicate to the hardware) read...
Internet Scams And Their Victims
- (3)
I was on MSNBC.com and read this article QUOTE YONKERS, N.Y. - The State of the Net survey by
Consumer Reports projects that American consumers lost more than $8 billion over the last two
years to viruses, spyware and various schemes. Additionally, it shows consumers face a 1-in-3
chance of becoming a cybervictim -- about the same as last year. According to the survey, consumers
lost $630 million over the past two years to e-mail scams. They also spent at least $7.8
billion for computer repairs, parts, and replacement over the past two years to co...
Light To Heavy Security Tips
- Some (helpful?) Suggestions (4)
(excessively long intro, skip to 'suggestions' for immediate tips) Its almost 2 am and I
just finished an email detailing some ideas I had to keep systems a little more secure than usual (
tips that can be applied to most any Windows users system ). I dont feel like re-editing it so it
doesnt sound I copied and pasted it from my email, cause I did, and its late. Please note THIS IS
NOT SPAM. I did write all of this, just in an email before I copied and pasted it here. These are
entirely valid and ( I hope ) helpful tips for most anyone. Of course I hate just yap...
Help Boost My Modem Internet Connection - 56k
- My Modem Will kill me (14)
Buddies please suggest me how to Boost my Internet connection. Me having a problem that my internet
connection Dissconnect frequetly /sad.gif" style="vertical-align:middle" emoid=":(" border="0"
alt="sad.gif" /> while the internet connection is established. It is very awfull for me to write
that almost my modem disconnected 3 to 5 times in just interval of 15 minutes . And if this not
occur then I can’t browse more than 2 sites a time . me having 56k modem and using Windows Xp. Few
days back I downlaoded a software “Virtual Modem” , but the worse is that it has an EXTE...
Microsoft Ships First Vista Security Patches
- yup, got that right -- VISTA (9)
Microsoft Ships First Vista Security Patches http://www.eweek.com/article2/0,1895,1911406,00.asp
QUOTE Microsoft Corp. has shipped the first critical security update for Windows Vista, the
next version of its flagship operating system. Over the weekend, the company released patches for
beta testers running the Windows Vista December CTP (Community Technology Preview) and Windows Vista
Beta 1, and warned that the new operating system was vulnerable to a remote code execution flaw in
the Graphics Rendering Engine. A Microsoft spokesperson told eWEEK that the Vi...
Manual Virus Removing And Security.
- (0)
Talking about manual removals of viruses I thought I better be a pioneer of this by sharing my
knowledge about a virus. I would like to tell the effects and manual removing technique of a very
common and irritating virus, that is HTML Redoff. First I would like to discuss its effects, HTML
Redoff virus infects kernel32.dll file which is installed in your “WINDOWS\SYSTEM” directory in
case you have Windows 98 and “WINDOWS\SYSTEM32” directory in case you have Windows XP and all
the .htm, .html, folder.htt and desktop.ini files on your PC thus it slows down your...
Serious Mac Os Flaws
- Serious security flaws (1)
On the end of February was discovered that the first trojan (Leap) to target Apple Computer's
Mac OS X, it was published on a new worm that exploits an 8-month-old vulnerability in the operating
system, its know by the name of Inqtana, the worm use Bluetooth to propagate, once it infects a
computer it searches for other Bluetooth-enabled devices and sends itself to those it finds, this
may not be very alarm, but the source code could be easily modified by a future attacker to do
damage like Symantec said, Symantec also says it believes the two pests were developed on...
Internet Vulnerabilities
- (7)
Ok, I was doing some research on the net on various flaws and vulnerabilities that hackers use to
warm our computers, and i've made a list of some interesting points (some of them i've never
heard) and decided to post here: As i said, i've made a big research and to each vulnerabilitie
i´ve included links to additional information useful for correcting or preventing the security
flaws. Top Vulnerabilities in Windows Systems 1. Windows Services MSDTC and COM+ Service
Print Spooler Service Plug and Play Service , see this too Server ...
Email Clients
- Which One Do You Trust For Security? (23)
Many people don't care about email account security and just go for a Hotmail account because
it's automatically MSN compatible or a Gmail account because it has lots of space. But out of
those of you who choose your email based on safetey and security, which client do you recommend?
There are tons out there. Personally, I use GMX.net, it's a German service with extremely high
security. They have a password meter to check your password for how easy or hard it might be to
guess, encouraging you to use upper and lower case letters along with numbers. They veri...
Looking for symantecs, top, 10, internet, security, trends, 2007
|
|
Searching Video's for symantecs, top, 10, internet, security, trends, 2007
|
advertisement
|
|