Vulnerabilities / Threats
12/8/2009
03:42 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Cisco Security Report Sees Social Media Risk

Bad passwords, inconsistent patching, excessive information sharing, and outdated AV software are key ingredients in what Cisco calls a security "nightmare formula."

Lovers and haters of the color-coded Department of Homeland Security Advisory System can now extend their passions toward Cisco's Global ARMS Race Index, the networking giant's attempt to convey the state of cybersecurity using the color spectrum.

ARMS in this context stands for "Adversary Resource Market Share."

On a scale of green -- cyber attacks are barely noticeable -- to red -- the bad guys own the Internet and no connection can be trusted, Cisco's 2009 Annual Security Report paints the current online environment in a light orange hue. That's 7.2 on a scale of 1 to 10 for those who prefer numbers to a continuum of color.

Cisco characterizes the situation thus: "Enterprise networks are experiencing persistent infections. Consumer systems are infected at levels capable of producing consistent and alarming levels of service abuse."

Cisco does its best to find some rays of hope amid the gloom. It notes that vendors are patching like mad. That's a bit like crowing about the number of combat medics in the field during a war.

From September through October 2009, Adobe, Cisco, Microsoft, and Oracle "released updates to patch more than 100 vulnerabilities in their respective products," the report says. Not only that but a vulnerability exploited by the Conficker botnet was patched and both Firefox and Internet Explorer received security upgrades.

But as far as good news goes, that's pretty anemic.

Far more impressive is the bad news: While the number of vulnerabilities remained about the same in 2009 as it has been in recent years, "the exploit and attack threat levels increased by 57%."

Social media represents a particular trouble spot because people tend to trust communication from supposed social network friends. Based on data from Cisco's 4000-plus security customers, as much as 2% of all Web traffic for businesses comes from accessing social sites like Facebook, MySpace, and LinkedIn.

In the report, Christopher Burgess, a senior security advisor to Cisco's CSO, argues that while this may not seem like a lot, it underscores the need to educate employees about the risk arising from social network usage.

A case in point is the Koobface worm, which has plagued Facebook and Twitter, affecting as many as 3 million computers.

Cisco sees risk not only in social networks but in the technology that has arisen to support them: URL shortening services. "The problem with short URLs is that they eliminate the user's ability to read the real Web address and decide if a link is save to follow," the report states.

There's plenty more bad news: Cisco projects a 30% to 40% increase in spam volume in 2010 and the continued proliferation of online banking Trojans.

The report also notes that 1 out of every 3000 Flash files, 1 out of every 2000 JavaScript files, and 1 out 600 PDF files contain malware.

Of course for security companies, bad news is good for business.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading December Tech Digest
Experts weigh in on the pros and cons of end-user security training.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-1421
Published: 2014-11-25
mountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount utility, which allows local users to bypass intended access restrictions via unspecified vectors.

CVE-2014-3605
Published: 2014-11-25
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6407. Reason: This candidate is a reservation duplicate of CVE-2014-6407. Notes: All CVE users should reference CVE-2014-6407 instead of this candidate. All references and descriptions in this candidate have been removed to pre...

CVE-2014-7839
Published: 2014-11-25
DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.

CVE-2014-8001
Published: 2014-11-25
Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

CVE-2014-8002
Published: 2014-11-25
Use-after-free vulnerability in decode_slice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Now that the holiday season is about to begin both online and in stores, will this be yet another season of nonstop gifting to cybercriminals?