![]() |
||
Web Threats WeeklyOnline Threats "Exponentially Greater" Than A Few Years AgoWhen you've got a website, protecting your organization from liability is clearly tied to protecting your customers. This is true whether you've got 200 customers or 20 million. This week, we've asked travel and medical insurance providers MEDEX Global Group's Manager of Information Technology, Eddie Jenkins, to provide tips for organizations to protect your online visitors. MEDEX actually does protect 20 million customers, so they've had to incorporate some tough security into their business. "Just to give you an idea of the challenge, we've got about 500 port scans of our website that we have to review on a daily basis," Jenkins says. "The online threats are exponentially greater than what we were seeing just a few years ago. These days security is a much higher priority." They recommend a combination of security measures. "We use SSL encryption and don't collect any information except on our checkout page. Our website is scanned daily for hackers, checking for SQL injection or any holes in the code that would give a hacker access to our backend systems. " And organizations can do even more. "We suggest using policy certifications, and following certain compliance procedures, such as making sure you are Safe Harbor approved. In our case, we also use a certified ethical hacker to test out our applications and make sure they can't be hacked." Selling the idea of investing in security to business managers in the past may have been challenging for some organizations, but now most businesses recognize the critical importance of protecting end-users to ultimately protect the business, Jenkins adds. Help Beat The Hackers In 2009. Here's How You Can Help* Let us know about how your organization is helping keep your website visitors safe and your online safety tips could be featured in the next Web Threats Weekly! * PCIS is producing webinars in 2009 to help organizations better understand how to identify and prevent web vulnerabilities. If there's a topic you'd like us to address in our webinars, please let us know and we can put it into our webinar series. * Call us if your organization needs help understanding how to close off vulnerabilities to SQL injection and other hacker threats. Beat the hackers in 2009. Contact PCIS. This Internet May Harm Your ComputerA human error this weekend affecting Google’s safe-browsing functionality tagged all websites on the Internet as “This site may harm your computer", meaning all sites were allegedly infected by malware. The
people at Google fixed the problem fast. But no doubt there were
quite a few business owners, webmasters and bloggers who got a
nail-biting taste of what it looks like when the cyber-criminals
successfully manage to get past your security. |
February 4, 2009 Web Threats Weekly is distributed by: * Pacific Coast Information Systems Ltd. * Contact PCIS Toll-free 1.877.744.7558 In this issue:* Online Threats "Exponentially Greater" Than A Few Years Ago * Help Beat The Hackers in 2009. Here's How You Can Help * This Internet May Harm Your Computer * Hacker Bait * Mythbusters Tip #11 * Spam-Alot Web Threats Weekly helps organizations protect themselves and their customers from known online threats. Resources Links * PCIS / Boonbox IT Security Resources Page * Online
Protection: How To Secure Your Business and Build Consumer Trust
(Vancouver Board of Trade) * Managers' Cheat Sheet For IT Security * Subscribe/Unsubscribe Instructions below |
|
Hacker BaitThe latest Hacker Bait list contains many famous websites, including those of business, social networks and non-profit organizations that have been found to have vulnerabilities that hackers and cyber criminals could exploit. Keep in mind that this is not a complete list of all vulnerable sites on the Internet, but only represents websites where vulnerabilities were found within the past 90 days. These are only the latest additions to an ever-growing club of sites found to be insecure according to various public sources and online tools used in the web security industry. If you would like more information on our data and why these sites are listed here, please contact PCIS Hacker Bait Sites With Vulnerabilities Discovered in Past 90 Days
|
Mythbusters Tip #11“Hackers wouldn't bother with us. We aren't big enough to be worth the effort.”This myth is based on a fairly common-sense idea: if a target is small enough to be practically invisible, the attackers will go after easier prey. But the Internet doesn't work like that. If you've got a domain, it doesn't matter if you're Starbucks or No-bucks. You can be found online. As well, hackers now have access to tools that allow them to make simultaneous attacks on thousands of websites in just a few minutes. So the size of your online presence and the effort required of individual hackers to hit you are not really factors anymore. Spam-AlotSpammers are linking to blogs, profiles and other pages on these trusted sites to give victims a false sense of security that the links can be followed safely. These sites may not have been hacked, but following the spam links to these sites and clicking on links shown there can result in harm to your computer. If you would like more information on our data and why these sites are listed here, please contact PCIS Spam-Alot Websites Exploited Since Jan. 29, 2009
|
||||
Boonbox and Pacific Coast Information Systems Ltd.Boonbox is a division of Pacific Coast Information Systems Ltd., specializing in products for web security, network security, password management and data backup. PCIS is a Vancouver-based company which provides strategic consulting, application development, technology solutions and managed services to companies and government organizations throughout North America. |
|||||
|
HOW TO SUBSCRIBE/UNSUBSCRIBE SUBSCRIBE: To subscribe to Web Threats Weekly, send a blank email message with subject line "SUBSCRIBE" to informer@pcis.com UNSUBSCRIBE: If you do not wish to receive future issues of Web Threats Weekly, send a blank email with subject line "UNSUBSCRIBE" to:informer@pcis.com and we will promptly remove you from our distribution list. WE WANT YOUR FEEDBACK Our purpose for providing this free service is to keep our clients and business contacts informed of technology developments. This information can help them resolve common problems and achieve their full potential by strengthening their business processes and infrastructure. Your input is important to us and we welcome your ideas for new features and how we can continue to improve our service to you. Send your comments and suggestions to informer@pcis.com or contact us directly at 604.844.7558
|
|||||
|
Copyright © 2009 Pacific Coast Information Systems |
|||||