Vulnerabilities / Threats
03:42 PM
Connect Directly

Cisco Security Report Sees Social Media Risk

Bad passwords, inconsistent patching, excessive information sharing, and outdated AV software are key ingredients in what Cisco calls a security "nightmare formula."

Lovers and haters of the color-coded Department of Homeland Security Advisory System can now extend their passions toward Cisco's Global ARMS Race Index, the networking giant's attempt to convey the state of cybersecurity using the color spectrum.

ARMS in this context stands for "Adversary Resource Market Share."

On a scale of green -- cyber attacks are barely noticeable -- to red -- the bad guys own the Internet and no connection can be trusted, Cisco's 2009 Annual Security Report paints the current online environment in a light orange hue. That's 7.2 on a scale of 1 to 10 for those who prefer numbers to a continuum of color.

Cisco characterizes the situation thus: "Enterprise networks are experiencing persistent infections. Consumer systems are infected at levels capable of producing consistent and alarming levels of service abuse."

Cisco does its best to find some rays of hope amid the gloom. It notes that vendors are patching like mad. That's a bit like crowing about the number of combat medics in the field during a war.

From September through October 2009, Adobe, Cisco, Microsoft, and Oracle "released updates to patch more than 100 vulnerabilities in their respective products," the report says. Not only that but a vulnerability exploited by the Conficker botnet was patched and both Firefox and Internet Explorer received security upgrades.

But as far as good news goes, that's pretty anemic.

Far more impressive is the bad news: While the number of vulnerabilities remained about the same in 2009 as it has been in recent years, "the exploit and attack threat levels increased by 57%."

Social media represents a particular trouble spot because people tend to trust communication from supposed social network friends. Based on data from Cisco's 4000-plus security customers, as much as 2% of all Web traffic for businesses comes from accessing social sites like Facebook, MySpace, and LinkedIn.

In the report, Christopher Burgess, a senior security advisor to Cisco's CSO, argues that while this may not seem like a lot, it underscores the need to educate employees about the risk arising from social network usage.

A case in point is the Koobface worm, which has plagued Facebook and Twitter, affecting as many as 3 million computers.

Cisco sees risk not only in social networks but in the technology that has arisen to support them: URL shortening services. "The problem with short URLs is that they eliminate the user's ability to read the real Web address and decide if a link is save to follow," the report states.

There's plenty more bad news: Cisco projects a 30% to 40% increase in spam volume in 2010 and the continued proliferation of online banking Trojans.

The report also notes that 1 out of every 3000 Flash files, 1 out of every 2000 JavaScript files, and 1 out 600 PDF files contain malware.

Of course for security companies, bad news is good for business.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Current Issue
E-Commerce Security: What Every Enterprise Needs to Know
The mainstream use of EMV smartcards in the US has experts predicting an increase in online fraud. Organizations will need to look at new tools and processes for building better breach detection and response capabilities.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio