Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

12/13/2017
03:45 PM
50%
50%

80% of Americans Admit to Risky Cybersecurity Behaviors

Nearly half of survey respondents use unsecured WiFi networks and a third open unsolicited email attachment, a report finds.

A majority of Americans acknowledge they engage in behavior that puts their cybersecurity at risk, a new report from Netsparker reveals.

Based on an online survey of 2,006 US adults, the 2017 Cybersecurity Survey finds 80% admit to risky cybersecurity practices that touch on a number of areas:

  • 40% use open, unsecured networks
  • 35% click on unfamiliar links on social media
  • 31% download third-party sourced files
  • 31% open unsolicited email attachments
  • 28% fail to install Web-based security software

Survey respondents' password protection practices are also lacking, the report finds. Thirty-four percent of respondents use the same password for all logins, while 58% admit to using fewer than four passwords for all of their online accounts.

Read more about the survey results here.   

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio
 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
12/15/2017 | 9:02:13 AM
No surprise
Most Americans - and that includes MANAGEMENT for that matter - have zero idea of cyber-security risks and how to be infected.  Searching from THE GREAT GOD GOOGLE is always safe, right?   And yet bitcoin mining apps can run in the background of Yahoo without anybody knowing it.  True.  The belief that all attached PDF files are somehow safe? That seems still around (see State of North Carolina).  So while people admit to know knowing good behavior, they don't even know what bad behavior is.
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
12/15/2017 | 9:02:16 AM
No surprise
Most Americans - and that includes MANAGEMENT for that matter - have zero idea of cyber-security risks and how to be infected.  Searching from THE GREAT GOD GOOGLE is always safe, right?   And yet bitcoin mining apps can run in the background of Yahoo without anybody knowing it.  True.  The belief that all attached PDF files are somehow safe? That seems still around (see State of North Carolina).  So while people admit to know knowing good behavior, they don't even know what bad behavior is.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
12/18/2017 | 7:06:03 PM
And the another 19% are either lying or don't know the difference?
I'm particularly interested in this stat:

"28% fail to install Web-based security software"

Considering the success of a lot of faux antivirus software packages that are really malware, I suspect that number is potentially a lot higher. People think they're protected, and they're not.

I'd be interested, incidentally, to see the split between Mac users and non-Mac users -- considering the very false marketing propaganda of "Macs don't get viruses."
arkasafebox
100%
0%
arkasafebox,
User Rank: Apprentice
12/20/2017 | 4:54:54 AM
Re: And the another 19% are either lying or don't know the difference?
i agree with you dear
COVID-19: Latest Security News & Commentary
Dark Reading Staff 6/1/2020
Stay-at-Home Orders Coincide With Massive DNS Surge
Robert Lemos, Contributing Writer,  5/27/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: "Well I dont run on MacOS, so I need to take extra precautions"
Current Issue
How Cybersecurity Incident Response Programs Work (and Why Some Don't)
This Tech Digest takes a look at the vital role cybersecurity incident response (IR) plays in managing cyber-risk within organizations. Download the Tech Digest today to find out how well-planned IR programs can detect intrusions, contain breaches, and help an organization restore normal operations.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-13659
PUBLISHED: 2020-06-02
address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.
CVE-2020-10703
PUBLISHED: 2020-06-02
A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its target path. In more detail, this flaw affects storage pools created without a target path such as network-based pools like ...
CVE-2020-10739
PUBLISHED: 2020-06-02
Istio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contain the following vulnerability when telemetry v2 is enabled: by sending a specially crafted packet, an attacker could trigger a Null Pointer Exception resulting in a Denial of Service. This could be sent to the ingress gateway or a sidecar, ...
CVE-2020-10136
PUBLISHED: 2020-06-02
Multiple products that implement the IP Encapsulation within IP standard (RFC 2003, STD 1) decapsulate and route IP-in-IP traffic without any validation, which could allow an unauthenticated remote attacker to route arbitrary traffic via an exposed network interface and lead to spoofing, access cont...
CVE-2020-13757
PUBLISHED: 2020-06-01
Python-RSA 4.0 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing exces...