Posted by Fred Wilson on August 31, 2010 · Leave a Comment
Walking into work through the South Lobby this morning I passed three monitors that normally have traffic, weather and footage from a traffic camera. The traffic monitor displays traffic information from WTOP normally, but today it showed cgidoctor.com. This page advised the user on how to remove fake antivirus infections. Links to remove fake antivirus went to a second site containing malicious code.
The monitor is a touchscreen so I checked the history to see if anyone had been accessing something other than WTOP.com. While that wasn’t a in-depth check I think its safe to say that yet again WTOP served up a banner advertisement that contained Fake AV social engineering.
That normal sites will could attempt to send you malware via banner ads is not surprising to most people reading this site. Using URL filters and antivirus is necessary. A dose of common sense when the attack is trying to trick you into installing the virus rather than performing an exploit.
Posted by Fred Wilson on August 30, 2010 · Leave a Comment
ESET: Flexibility key to pre-empting malware attacks
Security solutions need to be efficient and flexible to counter attacks, says ESET, whose APAC headquarters officially opens in Singapore.
Read more on ZDNet Asia
Posted by Fred Wilson on August 28, 2010 · Leave a Comment
Adobe has released a security bulletin for Shockwave.
Version 11.5.8.612 fixes multiple vulnerabilities that could be used for code execution.
Posted by Fred Wilson on August 24, 2010 · Leave a Comment
This week saw a large number of Microsoft patches
Additionally Adobe released updates for Flash and Adobe Air. Acrobat and Reader updates expected for this week will occur next week.
Apple patched the iPhone and released an update for QuickTime. iTunes users were not given the QuickTime update as of this post.
To stay up on all these updates, home users should install something like te Secunia Personal Software Inspector. Sysadmins should wave the dead chicken and hope for the best make plans to deploy these updates if the software is present in the work environment.
Posted by Fred Wilson on August 20, 2010 · Leave a Comment
Good released a minor update to their app for the iPhone. Release notes are on their site.
Companies that don’t want to use ActiveSync but still feel pressured into making the iPhone an option are looking to Good to do so.
From the release notes:
• Complete landscape view – Including email list view, calendar, contacts and attachments.
• Conference dialer – quickly and easily dial into a conference bridge without having to memorize the conference pass code.
• Maps integration – quickly find the location of your meeting on a map and even get driving directions.
A change not mentioned is that when I receive a signed message instead of no indication the message is signed, I now get a message:
The sender has digitally signed the message with a personal certificate. To verify the signature you can read this message on your desktop computer.
I can still read the message on the device, as I could before the update. Without signature verification, I feel like this update only provides a false sense of message source identity verification.
Its my understanding that full S/MIME support is on the roadmap.
Posted by Fred Wilson on August 19, 2010 · Leave a Comment
Since it’s not obvious, the blog title is an allusion to Jules’ big speech in Pulp Fiction.
I read a couple interesting blog entries on Friday. John Pescatore asks “Are Security Professionals Like Stephen Slater.” In another blog, Foilball asks us to look in the mirror and see if we’re more Sullenberger or Slater.
Slater is the air-raging flight attendant who let the frustrations of life take over, stole a couple of beers and headed down the emergency slide. He made Joanna’s method of quitting Chotchkie’s in Office Space look quite reasonable.
Pescatore doesn’t actually compare Slater and information security personnel. Rather than anything specific to this situation, he compares infosec people to the typical condescending flight attendant who does not explain the rules and only gives you a half can of Pepsi.
Is it really necessary for the flight attendant to explain that you need to leave the seatbelt on so you don’t become a human projectile mid-flight. Or that your laptops need to be stowed not just for dubious electronic interference problems but so they don’t smack someone in the head during take off and landing. Why does the sun visor need to be up during take off and landing. I don’t know, but I have enough sense to know that having that discussion as we’re first in line for take off isn’t a good idea.
You can get 20 years for interference with flight crew attendants and members. Don’t even think of disabling the smoke detector. I wonder if I can arrange similar penalties for disabling the antivirus or interference with infosec personnel.
The foilball article caused deeper thought. Going through life, there are days when you’re hit in the head by luggage or cursed out by a passenger. There are days when you want to escape down the slide and it takes every ounce of control not to. I’ve heard it said you can’t control your circumstances, but you can control how you react to them. I look in that mirror and I see more Slater than I’d like to admit. But I’m trying real hard to be a Sullenberger.
Posted by Fred Wilson on August 17, 2010 · Leave a Comment
Kaspersky Internet Security 2010 software automatically in real time to protect your family’s Internet safety – whether you are working, using online banking, online shopping or online games.
Kaspersky Internet Security 2010 software components for a complete escort you to surf the Internet.
Kaspersky Internet Security 2010 included all the features and technologies of Kaspersky Anti-virus software 2010
Kaspersky Internet Security software , real-time protection against malicious programs on your computer and the threat of illegal access, comprehensive protection for your computer data safe.
1. Strengthen the function of Protect your money and privacy information security
2. Protect the safety of bank account password
3. Online shopping threat defense
4.hacker hijack your computer
5.protection of children online safety
6. Protect your files from hackers damage Enhanced!
7. Protect your computer running smoothly
8.protect the security of wireless Internet (Wi-Fi)
9. Two-way personal firewall
Kaspersky Internet Security 2010 offers more unique tools to protect users of computer security:
1.the safe environment to run suspicious programs and Web sites NEW!
2.Use more secure virtual keyboard to enter a user name and password new features!
3.Open the Parental Controls to protect children’s health online NEW!
4.enable game mode to pause the program update, scanning and other tasks the new features!
5.protected areas in the protection of private information important files and folders feature enhanced!
6.Scan operating system and installed application vulnerabilities
7.real-time monitoring activities and customize the application to run rules
8. Set the operating system and browser settings to provide greater security
9.remove the malicious software can set the system back to normal
10.Emergency Disk to burn the infected system to restore function to strengthen!
11. Remove Internet records (Internet history, cookies, etc.)
Award-winning security technologies to protect you from the following IT threats:
1. viruses, Trojans, worms and other malicious software, spyware and adware
2. Root kits, boot kits and other sophisticated threats
3.Adoption of key loggers, screen shots and other malicious software and network privacy theft
4.using bonnets and illegal ways to hijack your computer
5.zero-day attacks, rapid spread of new threats
6. Web page linked to horses, network attacks and hackers
7. adult sites, spam
Please note: In Microsoft Windows XP x64 does not work in safe environment, work in Microsoft Windows Vista x64 also limited.
Complete installation of the system requirements
1. 375 MB of available hard disk space (depending on the specific capacity of anti-virus database size)
2.CD-ROM drive (for installation from a CD-ROM)
3. computer mouse
4.nternet connection (for activation procedures)
5.Microsoft Internet Explorer 6 or higher (for downloading updates)
6.Microsoft Windows Installer 2.0 or higher
short of all, Kaspersky Internet Security 2010 as one of best protection software gives people a very impressive security solution. Kaspersky Internet Security 2010 defends your PC against viruses, spyware, bots, worms, and more without slowing you down or getting in your way. The protection level is second to none. More than just popularity, Kaspersky delivers solid performance and protection
About Author
Harry Bowers
Posted by Fred Wilson on August 17, 2010 · Leave a Comment
The 2010 “model year” for security suites got an early start out, with a couple of solutions already out in June of 2009. The February 2010 releases of McAfee Complete Safeguard 2010 and Norton 360 Edition 4.full the selection, at least as far as key security vendors are concerned. We’ve reviewed sixteen security suites for 2010; study on to see which will maintain you safe and which to avoid.
Of the early-birds Panda Internet Security 2010 produced a decent displaying, but eScan Internet Security Suite for House Users Edition 10 isn’t ready to supply significant competition for any of the greater-recognized contenders in the U.S.marketplace. Significantly the identical is true of K7 TotalSecurity Edition 10.: It’s common in Japan, but doesn’t live up to the standards set by other key products here-at least it didn’t bog down my test techniques.Through the summer the suites kept rolling in, preserving me busy with all-out evaluations.
Kaspersky Internet Security 2010 and BitDefender Complete Security 2010 arrived just about simultaneously in August (despite the fact that Kaspersky released its European variation really a bit earlier). Each present potent security, but BitDefender has the edge in most places, specially antispam and parental restrain.But both suites did have a measurable effect on method efficiency in testing, possibly due to getting crammed to the gills with bonus features that in fact enhance security.
F-Safeguarded Internet Security 2010 and Trend Micro Internet Security Pro (variation three) also came via the gate together. F-Secure up-to-date its interface, enhanced its detection, and additional explicit exploit safeguard to its firewall.Trend Micro changed little from its previous incarnation.They can get away with standing still this time, but I hope for some innovation in the following Trend Micro suite.
The anti-malware scores for Norton Internet Security 2010 blew aside the competition at the time, and it has shored up two notorious (if much less crucial) traditional weak spots for Norton.Parental regulate now comes from the total-featured OnlineFamily.Norton, and the new spam filter component is pretty correct (a enormous improvement).It remains our Editor’s Alternative, along with Norton 360 v four. which provides the very same level of security and adds PC Tuneup and a potent and flexible backup technique.
Previous year ZoneAlarm 2010 combined their ZoneAlarm suite with ForceField virtualization technologies and threw in backup, method tune-up and additional to develop a new item: ZoneAlarm Severe Security.I was impressed adequate to rate it Editor’s Selection, shared with Norton’s 2009 suite.I took a harder look at ZoneAlarm Intense Security 2010 and discovered a couple of minor flaws. Absolutely nothing large, and it provides some hot characteristics like entire disk encryption, but I’m not calling it Editor’s Option at this time.
I was excited to understand about FortiClient Endpoint Security Common Edition 4.1, a completely free complete security suite from Fortinet, improved regarded for their Enterprise solutions.
However it’s not actually free – you shell out in decreased security. In certain its anti-malware scores had been the lowest I’ve witnessed.And if you want direct tech assist or anti-spam you shell out extra.
CA Internet Security Suite Plus 2010 got a total facelift, a brand new user interface, but below that very surface its security safety was unimpressive.AVG Internet Security 9.2010, avast! Internet Security 5., and PC Tools Internet Security 2010, three suites from vendors greater recognised for their standalone anti-malware solutions, all produced a superior displaying. In unique, PC Tools scored even increased than Norton in the anti-malware category.
McAfee Complete Safeguard 2010 appeared on McAfee’s web website past fall, but the actual totally-current suite didn’t arrive out until months later.It was worth the wait-it’s an remarkable suite general with an particularly strong antispam module. The Editors Decision designation goes to the two Norton suites, but you won’t go wrong picking McAfee, ZoneAlarm, or BitDefender.
As often, click on the blurbs beneath to examine the total reviews.Note that although this roundup covers the vast majority of crucial security suites offered for 2010, it’s not an exhaustive list; if we appear across another suite that merits inclusion, it’s usually feasible we’ll add it.
About Author
* Windows XP: Documents and SettingsYour UsernameMy DocumentsMy Music
* Windows Vista and 7: UsersYour UsernameMusic
* Mac Os X: UsersYour usernameMusic