Vulnerabilities / Threats
12/8/2009
03:42 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Cisco Security Report Sees Social Media Risk

Bad passwords, inconsistent patching, excessive information sharing, and outdated AV software are key ingredients in what Cisco calls a security "nightmare formula."

Lovers and haters of the color-coded Department of Homeland Security Advisory System can now extend their passions toward Cisco's Global ARMS Race Index, the networking giant's attempt to convey the state of cybersecurity using the color spectrum.

ARMS in this context stands for "Adversary Resource Market Share."

On a scale of green -- cyber attacks are barely noticeable -- to red -- the bad guys own the Internet and no connection can be trusted, Cisco's 2009 Annual Security Report paints the current online environment in a light orange hue. That's 7.2 on a scale of 1 to 10 for those who prefer numbers to a continuum of color.

Cisco characterizes the situation thus: "Enterprise networks are experiencing persistent infections. Consumer systems are infected at levels capable of producing consistent and alarming levels of service abuse."

Cisco does its best to find some rays of hope amid the gloom. It notes that vendors are patching like mad. That's a bit like crowing about the number of combat medics in the field during a war.

From September through October 2009, Adobe, Cisco, Microsoft, and Oracle "released updates to patch more than 100 vulnerabilities in their respective products," the report says. Not only that but a vulnerability exploited by the Conficker botnet was patched and both Firefox and Internet Explorer received security upgrades.

But as far as good news goes, that's pretty anemic.

Far more impressive is the bad news: While the number of vulnerabilities remained about the same in 2009 as it has been in recent years, "the exploit and attack threat levels increased by 57%."

Social media represents a particular trouble spot because people tend to trust communication from supposed social network friends. Based on data from Cisco's 4000-plus security customers, as much as 2% of all Web traffic for businesses comes from accessing social sites like Facebook, MySpace, and LinkedIn.

In the report, Christopher Burgess, a senior security advisor to Cisco's CSO, argues that while this may not seem like a lot, it underscores the need to educate employees about the risk arising from social network usage.

A case in point is the Koobface worm, which has plagued Facebook and Twitter, affecting as many as 3 million computers.

Cisco sees risk not only in social networks but in the technology that has arisen to support them: URL shortening services. "The problem with short URLs is that they eliminate the user's ability to read the real Web address and decide if a link is save to follow," the report states.

There's plenty more bad news: Cisco projects a 30% to 40% increase in spam volume in 2010 and the continued proliferation of online banking Trojans.

The report also notes that 1 out of every 3000 Flash files, 1 out of every 2000 JavaScript files, and 1 out 600 PDF files contain malware.

Of course for security companies, bad news is good for business.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8802
Published: 2015-01-23
The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action.

CVE-2014-9623
Published: 2015-01-23
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quote and cause a denial of service (disk consumption) by deleting an image in the saving state.

CVE-2014-9638
Published: 2015-01-23
oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.

CVE-2014-9639
Published: 2015-01-23
Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.

CVE-2014-9640
Published: 2015-01-23
oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If you’re a security professional, you’ve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.