Recent News – Page 2

Another Data Breach, This Time At The Pentagon

October 20, 2018 by Joseph Martin

As many as 30,000 people made up of a mix of both civilian and military personnel have had their personal and financial information exposed. This exposure is what has been reported as a major security breach of the Pentagon.

This is proof positive that no organization is safe from watchful hackers scattered all around the world.

The Associated Press report on the incident includes:

“The department is continuing to gather additional information about the incident, which involves the potential compromise of Personally Identifiable Information (PII) of DoD personnel maintained by a single commercial vendor that provided travel management services to the department. This vendor was performing a small percentage of the overall travel management services of the DoD…The department is continuing to assess the risk of harm and will ensure notifications are made to affected personnel.”

While there’s no good time for a data breach like this, it couldn’t have come at a worse time. The Government Accountability Office (GAO) had issued a scathing report of critical vulnerabilities in virtually all of the weapons systems programs the agency currently runs.

A small excerpt of the report reads as follows:

“One test report indicated that the test team was able to guess an administrator password in nine seconds…Multiple weapon systems used commercial or open source software, but did not change the default password when the software was installed, which allowed test teams to look up the password on the internet and gain administrator privileges for that software.”

It gets worse. When confronted with the findings of the report, Pentagon officials dismissed the report as being unrealistic.

Clearly, there was something to the report, or this breach would not have happened. The hope is that it will be sufficient to cause Pentagon officials to do some soul searching and reevaluate their positions. If not, you can bet that something like this will happen again.

Joseph Martin

President & CEO
I hope you enjoyed this article. My mission is to take your stress away from dealing with IT problems. Call (252) 565-1235 or send me a message at our contact us page if you have a question, comment or want help.

New Windows 10 Update Pulled For Unintended Data Deletion

October 19, 2018 by Joseph Martin

Microsoft is having problems, and those problems are spilling out onto the company’s massive user base. In a highly unusual move, the company pulled its latest Windows 10 update after receiving numerous complaints from users about missing files.

Unfortunately, this isn’t the first time the company has had problems with updates to their OS. Back in April, the company delayed a planned update because at the last minute, Blue Screen of Death issues were discovered. In another instance, they had to rush out a patch after an update to fix Chrome and desktop freezing issues that impacted more than half a billion machines.

These issues have led many to begin questioning the company’s QA/QC process. It’s a fair question, because the issues described above are far from trivial, and should have been caught.

At the core, it appears that the main problem is communication. Research has revealed that these issues were caught, they simply weren’t flagged for review because they didn’t get a sufficient number of upvotes by the beta testing user community.

Windows 10 represents a significant departure from the company and a new era of openness. While Windows 8 was designed with little to no user input, Microsoft opted to open the Windows 10 development process up, relying on more than ten million beta testers to try out their new features and solicit feedback on.

Unfortunately, there appears to be a few gaps in their process, and those gaps are allowing serious problems to go un-noticed until they are in the wild.

Another problem is that because the company is relying so heavily on their massive beta test group, they phased out their dedicated Software Test Engineering staff. This was during a massive round of layoffs that came about a year ahead of the Windows 10 release.

Apparently, the decision to remove the STE group from the equation was premature, and given the recent flood of problems, the Windows 10 feedback program appears to be in need of a serious overhaul.

Joseph Martin

Newest WiFi Version Will Be Called WiFi 6

October 18, 2018 by Joseph Martin

Most people don’t know what the latest version of WiFi is called. That’s the fault of the Wi-Fi Alliance, the group that manages the implementation of WiFi. Since their earliest days, the group has insisted on a highly unconventional version numbering scheme.

If you’re curious, the current version is 802.11ac. The group’s numbering system isn’t very user friendly, which makes WiFi support fairly user un-friendly too.

All that is changing, however. The next version of WiFi will simply be known as “WiFi 6.” Going forward, the alliance will be using a conventional version numbering scheme that should make everyone’s lives easier.

Even better, they’re retroactively changing the names of all previous WiFi versions too, so it will be faster and easier to identify exactly what you’re working with.

Here are the old/new version names, as a handy reference:

802.11b = Wi-Fi 1

802.11a = Wi-Fi 2

802.11g = Wi-Fi 3

802.11n = Wi-Fi 4

802.11ac = Wi-Fi 5

The next standard to be released was originally to be named 802.11ax, but again, per the Wi-Fi Alliance, will be rebranded as simply WiFi 6. This will make it much easier for users to not only identify exactly which version they’re using, but also to keep their devices up to date.

In addition to that, the Wi-Fi Alliance has created a series of images that manufacturers can use on their products to provide an easily understood symbol with the WiFi version number the device is running. This will allow users to make better purchasing decisions when it’s time to buy new equipment.

User groups and manufacturers alike have signaled their strong support of the change, and it’s seen by an overwhelming majority as being a very good change on a variety of fronts. Kudos to the Wi-Fi Alliance Group for taking the step, and making all of our lives easier.

Joseph Martin

Major Facebook Breach May Have Affected Your Account

October 16, 2018 by Joseph Martin

Facebook got hit hard by a currently unknown group of hackers. If you recently found yourself inexplicably logged out of the social media site, Facebook did it in response to the breach.

The breach resulted in the theft of data pertaining to more than fifty million of the site’s users.

Here’s what we know so far about the attack:

The hackers pulled off their heist by taking advantage of three different vulnerabilities.

Facebook detected the breach after spotting an unusual spike in traffic.

Your password has not been compromised, but unfortunately, the hackers don’t need it.

The hackers stole more than fifty million access tokens. These tokens can be used to take over Facebook accounts without passwords, even if you have two-factor authentication enabled.

If you were in the compromised group, the hackers have every scrap of personal information you’ve entered into the social media site.

If you use the “Logged in as Facebook” feature on other websites, those accounts are also at risk. The hackers can use the stolen tokens to access any site you log into with your Facebook credentials.

The reason you got logged out was because Facebook reset access tokens for everyone they suspected may have had their data stolen.

To find out if you’ve been hacked, you can check “Active Sessions” on Facebook. If you see an unknown IP address, or a location in some other country, that’s a sure sign that you’ve been hacked.

This breach is not connected in any way to the hacker who pledged to delete Mark Zuckerberg’s personal Facebook page.

In addition to that, you should know that Facebook is now facing a class-action lawsuit over the hack. The suit alleges that the company failed to protect their personal data from falling into the wrong hands due to the company’s lack of proper security practices.

While the vulnerabilities have been fixed, the class-action lawsuit has a good chance of succeeding. The investigation is still in its early stages, and there may be updates to this story as we learn more.

Joseph Martin

Apple IOS12 Users’ Photos And Contacts May Be Vulnerable

October 13, 2018 by Joseph Martin

Jose Rodriguez, a Spanish Apple enthusiast, has discovered a new security flaw to be aware of. He posted a Proof of Concept video showing the exploit in action.

We’ll say upfront that this is a highly convoluted attack involving more than two dozen discrete steps. A hacker would need to be in possession of the phone to pull it off, so it’s not something that’s likely to become a major threat.

Even so, we’ll provide the details below.

Apple has built in security measures that are designed to prevent someone from tricking Siri into allowing unauthorized access to the phone. Unfortunately, by using a complex series of steps involving both Siri and Apple’s Notes application, it’s possible for a hacker to bypass those security measures, access images stored on the phone, and then change the image associated with a contact or the owner of the phone.

This method is effective on both iOS12 and the iOS 12.1 beta, which means that Apple’s recent patch to their OS does not and will not prevent this exploit from working. Worse, the company has yet to comment on the matter, so at this point, there’s no timetable for a fix.

The independent news site Threatpost has been able to replicate the attack, so we have third-party confirmation.

Fortunately, there’s a simple way to negate the attack entirely while we’re waiting for a patch to close the loophole once and for all. Simply go to Settings – Face ID & Passcode – Touch ID & Passcode, and disable the “Allow access when locked” option for Siri.

Again, it’s important to reiterate that this is a highly complex attack that involves having both physical access to the device and more than two dozen steps, so this is not an issue that’s likely to be widespread. Even so, it pays to take precautions until Apple can roll out a fix.

Joseph Martin

Microsoft Is Changing How Searches Will Work

October 11, 2018 by Joseph Martin

Change is coming to the way Microsoft handles search across its ecosystem. If you use the home edition of Office, you’re not likely to notice, but if you use Office 365, the changes will be significant.

Here’s what’s happening:

First of all, the search bar will get bigger, taking a more prominent and visible place on your screen’s real estate.

Second, anywhere the company utilizes a search box (from their Bing search engine, to the OS itself, to Teams, Office and more), the plan is to provide a unified and consistent look that is intended to improve the overall user experience.

The box itself is getting a makeover and will soon start offering suggestions based on your previous search behaviors. For instance, it may present you with a list of frequently used email contacts or documents that you’ve recently edited, with the list updating dynamically as you begin typing a term into the search field.

In addition to that, you’ll soon be able to search for commands within a given application, so instead of hunting around on the menu bar for the function you’re looking for, the search box will take you right to it, showing it among the search results.

If you’re signed into your Office 365 account, the search results will also include any documents you have saved in OneDrive or SharePoint and relevant conversations in Yammer and Teams if you use those. It also may feature contacts from your company directory.

Most significantly, since the Bing search engine is itself a search box, those results will be displayed alongside relevant webpages.

If you’re curious to see it in action, it is currently available today as an opt-in beta/preview mode for corporate users. It’s also available in both Outlook and SharePoint mobile apps. The general public will be able to see it in action as soon as the second quarter of 2019, when the new functionality will be expended to Office Home, Office Desktop and Windows 10 itself.

Joseph Martin

Google May Be Getting Rid Of Google Plus

October 11, 2018 by Joseph Martin

If you’re one of the relatively few people who use Google+ in something other than an Enterprise setting, be advised that the clock is ticking. Google has just announced that they’re sunsetting the service. It will be going offline for consumers at some point over the next ten months.

The reasons for their decision are complex. In part, it stems from the fact that the company readily acknowledges that it has “low usage and engagement,” which is underscored by the fact that 90 percent of Google+ user sessions last less than five seconds.

Another major component driving the decision is that the company suffered serious pushback when it revealed a previously undisclosed security flaw that exposed users’ profile data. The company patched the issue in March of this year (2018), but the company’s long delay in going public with the flaw didn’t sit well with Google+’s user base.

Note that the company plans to continue offering Google+ for Enterprise customers to facilitate intra- and inter-company communications. In fact, they plan to roll out a raft of new features in the year ahead.

Google also recently announced other changes. Pending API changes, one new feature will limit developers’ access to data on Android devices and user Gmail accounts. Also, contact interaction data will soon be off limits, as will call logs and SMS permissions.

There are changes coming to Gmail itself as well, where developers will be sorely limited in how much access they have to user emails.

As Ben Smith (the company’s VP of engineering) explains, “Only apps directly enhancing email functionality–such as email clients, email backup services and productivity services (e.g., CRM and mail merge services)–will be authorized to access this data.”

Any developer who currently has this level of access can expect a security assessment and agree to the company’s new rules. We’ll provide more details as they become available, but broadly speaking, these are good changes that will enhance data security for the company’s legions of users.

Joseph Martin

Payment Pages Are Being Compromised To Steal Data

October 10, 2018 by Joseph Martin

Symantec’s most recent statistics have revealed a disturbing trend. Malware designed to compromise checkout pages is seeing a big spike in use, with the company reporting a staggering 248,000 attempts since August 13th of this year, with more than a third of them (36 percent) between September 13th through September 20th. As disturbing as those numbers are, that’s just the tip of the iceberg.

As Symantec notes on their website:

“If we compare the week of September 13 to 20 to the same week in August, the number of instances of formjacking attacks blocked by Symantec more than doubled, jumping from just over 41,000 to almost 88.500 – a percentage increase of 117 percent.”

Leading the surge is a particularly nasty strain of malware known as “Magecart.” Magecart campaigns are quite robust that begin by breaching the target website, then injecting malicious scripts into it that are designed to scrape card details and other customer information provided during the checkout process. This is an attack that’s alternately known as formjacking, payment card scraping, and web-based skimming.

Symantec isn’t the only company to take note of the trend. RiskIQ has been sink holing domains associated with Magecart infrastructure for much of the month and alerting companies compromised by Magecart attacks as they find them.

Kevin Beaumont, an independent security researcher, had this to say via Twitter :

“#TrackingMagecart I’ve updated the IoCs to double the number of domains, now tracking over 1000 objects – some of the domains have now been sink holed. Recommend InfoSec vendors block/flag domains.”

Magecart isn’t new. Security researchers have been tracking it since 2015, and independent researcher Willem de Groot has created a malware scanning website called MageReport, which allows business owners to check to see if their Magento-based webshop is vulnerable to this type of attack. If you think you might be, it certainly bears making use of.

At present, the one thing that’s not known is the reason behind the sudden spike. Only that it’s happening.

Joseph Martin

Windows 10 Adoption Continues To Grow

October 5, 2018 by Joseph Martin

Windows 10 is far and away the fastest growing version of the OS in the company’s history. It recently hit an installation base of a staggering 700 million devices after about three years on the market.

Note that these installation figures include installs not just on PCs, but also on Surface Hubs, Xbox, HoloLenses and smartphones.

Unfortunately, as impressive as that number is, it falls well short of Microsoft’s original estimate of a billion installs in three years.

The smaller than expected number of smartphone installations is the key reason behind the shortfall. Initially, the company had envisioned these devices adding several hundred million installations to the total count. However, when Microsoft switched gears and decided to abandon the smartphone market, it was inevitable that they would fall well short of their original target.

It matters because part of Microsoft’s pitch to developers was the massive (projected) size of the Windows 10 market. Now that the official numbers are in, and the final count is some 30 percent lower than anticipated, part of that appeal is understandably gone.

Even so, a market made up of 700 million devices is certainly nothing to sneeze at and developers are heavily invested in the platform, so it would make little sense for them to abandon it now. Not to mention the fact that the number of installations is expected to continue to grow at a healthy clip for the foreseeable future.

Inside the Windows ecosystem, 43 percent of Windows PCs are currently running Windows 10, with another 45 percent still running Windows 7. Given that support has officially ended for Windows 7, it’s all but guaranteed that Windows 10 will ultimately reach one billion installations. It will probably reach a bit more than that as users continue to slowly migrate away from Windows 7.

At the end of the day then, although Microsoft’s time frame was a bit too aggressive, it looks like they’re going to hit the magic number.

Joseph Martin

Government Payment Processor Exposes Data On Millions Of Americans

October 4, 2018 by Joseph Martin

If you use the GovPayNet portal, be advised that your personal information is currently at risk. Although at this point, there’s no indication that any hacker has made use of it. The portal is run by Government Payment Service, and is used by many Americans to pay fines, fees and bills generated by more than two thousand different government agencies operating in 35 states.

Unfortunately, the way the website is configured, when it issues a receipt for a payment, it numbers those receipts sequentially. All a hacker would have to do would be to change the receipt number in the URL to see any previous receipts, and all of the information it contains.

When the flaw was discovered by journalist Brian Krebs, more than fourteen million old records were exposed in this manner. He contacted Government Payment Service to inform them of the flaw, and the agency moved quickly to address the issue. They said in a formal statement that they “did not adequately restrict access to only authorized recipients.”

They went on to assure their users that there’s no indication that any data had been improperly accessed. They added that the receipts generated don’t include any information that could be used by a hacker to initiate any type of financial transaction.

Unfortunately, the reality was a bit different. The receipts contain the names, addresses and phone numbers of the person paying the fee in question, along with the last four digits of whatever credit or debit card was used to make payment. That is more than enough information to enable a hacker to initiate a phishing attack to get the rest.

Nick Bilorgoskiy of Juniper Networks had this to say about the matter:

“Online payment providers…should take special care to protect their customers’ receipts by using HTTPS and checking that the user is logged in and has permissions to view them. To avoid information disclosure and directory traversal issues, I also recommend denying anonymous web visitors the ability to read permissions for any unnecessary files from web-accessible directories.”

It’s good advice, and here’s hoping that Government Payment Service will take it. If you use the service, there’s nothing for you to do. You don’t need to change your password, since it was never exposed. Just be mindful that someone may have seen any data your receipts contain before the site was secured.

Joseph Martin

Another Data Breach, This Time At The Pentagon

New Windows 10 Update Pulled For Unintended Data Deletion

Newest WiFi Version Will Be Called WiFi 6

Apple IOS12 Users’ Photos And Contacts May Be Vulnerable

Microsoft Is Changing How Searches Will Work

Google May Be Getting Rid Of Google Plus

Payment Pages Are Being Compromised To Steal Data

Windows 10 Adoption Continues To Grow

Government Payment Processor Exposes Data On Millions Of Americans

Contact Info

Navigation