How to Overcome the Pitfalls of Using Tor
Posted on by marketheedCategories Blurb, Computer Security, How To, Light Point Web, Security, Web SecurityLeave a comment on How to Overcome the Pitfalls of Using Tor

The idea of surfing the web without leaving a trace using tools like Tor may sound great at first. But for all the benefits that Tor brings to the table, there are still several ways that it falls short.

The Onion Router, commonly known as Tor, provides anonymity by bouncing your web requests off of several relays which will cause slow response times, and in turn lead to a bad user experience. Tor network is also susceptible to common attacks including browser fingerprinting. And using certain browser plug-ins, like Flash, may compromise anonymity while browsing in Tor. Furthermore, anonymity is not always guaranteed, especially if you violate the rules spelled out on the Tor website and/or do not follow the outlined best practices.

In an article posted on The Windows Club, author Pavithra Bhat explores several alternatives to Tor that can protect users’ privacy better than a standard browser, while also allowing them to surf the web at faster speeds. Read the full article here.

In the blog, Pavithra recommends options like I2P, FreeNet, and Disconnect, however, they too come with their own drawbacks, the most significant of which is that they may seriously fall short of protecting the user’s online security. For example, none of those alternatives can fully protect the user against malware, ransomware, zero-day or other web-based threats. Once the user’s machine is compromised, the user’s privacy gets tossed out the window, thus defeating the purpose of using such tools in the first place.

Anonymous web browsing has very real use cases for corporate users and the good news is that there is a solution that can provide corporate users the security they need while maintaining high standards with the browsing experience that users have come to expect.

Remote Browser Isolation offers the best of both worlds – it reliably protects your identity, makes getting to all your users’ favorite web destinations fast and easy, and  guarantees that your corporate network will not be exposed to any web-based threats. It accomplishes this by running a full browser outside of your network in an isolated virtual environment. This keeps any website resources from ever entering your network, which not only hides your identity, but also ensures you are never infected with malicious website content.

While the Tor browser has its place in the world of online privacy, alternatives like Remote Browser Isolation are a simpler, more effective way of protecting a large number of enterprise users, all packaged into a single, easy to manage solution.

 

Learn more about Remote Browser Isolation

Newly Discovered Chrome Vulnerability Could Lead to Full System Compromise with No User Interaction
Posted on by Beau AdkinsCategories Blurb, Computer Security, Light Point Web, Security, Web SecurityLeave a comment on Newly Discovered Chrome Vulnerability Could Lead to Full System Compromise with No User Interaction

Google ChromeRecently it was announced that the Tencent Blade Team found a severe vulnerability in SQLite that could lead to Remote Code Execution. SQLite is an open-source lightweight database library used in a very large number of other applications that need some sort of database functionality.

One such application is the Chrome web browser. Chrome includes an implementation of a non-standard web technology called WebSQL, which is basically just a Javascript interface to SQLite. So an attacker could use this vulnerability to pass a carefully crafted SQL statement to SQLite through WebSQL to compromise any person using an affected browser that visited their malware site or viewed their malicious ad. Just loading the infected website would be enough for full system compromise, the victim wouldn’t have to click anything at all.

This is a great example of how powerful Light Point Web and Remote Browser Isolation are. Who knows how long this vulnerability has been out there, and how many cyber-criminals or nation-states had found it before the Tencent Blade team’s announcement. But for users of Light Point Web, it doesn’t matter. Even if they were using the affected versions of Chrome to browse sites that were actively exploiting this vulnerability, they were never in any danger from it. How great is that?

This is a pretty serious vulnerability, but luckily the issue has been fixed in SQLite, and Chrome has been updated to use this fixed version of SQLite as of version 71. However, what are the odds that this is the last browser vulnerability left, and browsers are now actually safe to use without Light Point Web? Spoiler Alert: the answer is 0%.

How To Protect Your Business From Ransomware Without Restricting Employees
Posted on by Zuly GonzalezCategories Blurb, Security, Web SecurityLeave a comment on How To Protect Your Business From Ransomware Without Restricting Employees

The internet has seen a lot of different malware variants pop up over the years, but few of them have had quite the financial and technical impact as the one on every security professional’s lips in 2018: Ransomware. But what is ransomware exactly, and what makes it so much more devastating to businesses than any other malware that has come before it?

According to a recent blog post from IBM’s SecurityIntelligence division, ransomware is defined as “…malware that holds your data hostage and demands payment for release”. In the post IBM talks about the various attack vectors that ransomware can use to infiltrate a corporate network, including phishing emails and web-based infection pathways. Read the full article here.

IBM suggests that the best ways to protect against ransomware threats is to constantly update your network with the latest security patches, teach employees how to spot potential scam emails or links, and have a threat response team trained and ready to go in case the first two lines of defense fail. However, the author also suggests limiting the functionality of your users’ workstations, such as disabling Flash (that may be necessary for some business web apps to function properly), which can result in lost productivity and continued headaches for your network security team if implemented improperly or with too many restrictions.

This is exactly where solutions like Remote Browser Isolation (RBI) can help. RBI allows your employees to retain many of the same freedoms they’ve become accustomed to when it comes to how they use and browse the web, while also securing your network against the threat that major ransomware variants like WannaCry pose.

RBI is both simple to implement and highly effective against the threat vectors that bad actors rely on most frequently to deliver ransomware infected payloads to enterprise networks. RBI also offers a host of additional features that help protect your users’ privacy and security in the era of rapidly evolving ransomware threats.

Learn more about Remote Browser Isolation

Endpoint Security Solutions Challenged by Zero-Day and Fileless Attacks
Posted on by Zuly GonzalezCategories Computer Security, Security, Web SecurityLeave a comment on Endpoint Security Solutions Challenged by Zero-Day and Fileless Attacks

As the world of malware continues to evolve at a relentless pace, IT departments globally are struggling to keep up. Today, fileless attacks and zero-day exploits are appearing more frequently, and traditional AV solutions and detection methods are failing to prevent infections the way they used to.

According to a recent article posted by Help Net Security, the challenges that endpoint security specialists face in this fight are significant. In a survey by the Ponemon Institute and Barkly that polled 660 IT and security professionals, they found that 64 percent of organizations experienced a successful endpoint attack in 2018, which represented a 20 percent increase from the same 12-month period last year. Furthermore, 63 percent of individuals surveyed stated that the frequency of endpoint attacks has increased in the past 12 months. Read the full article here.

Most importantly, respondents estimated that the current AV implementations active on their networks were only capable of blocking 43 percent of incoming attacks.

In response to this problem some organizations have resorted to focusing more on quickly detecting and responding to attacks instead of preventing them. However, the prospects of this solution working are bleak at best, given the results of the 2018 Cost of Data Breach Study by Ponemon, which found that the average time to detect and contain a mega breach was 365 days – almost 100 days longer than a smaller scale breach (266 days).

This begs the question: what potential solutions are out there which can mitigate the threat that zero-day and fileless attacks pose without affecting employee productivity or adding unnecessary burden on the on-site IT staff? Options like Remote Browser Isolation present a secure alternative to traditional antivirus detection methods.

Remote Browser Isolation can help close the gap between post-infection detection techniques, which may not detect all attacks, and the proactive threat hunting approach that may leave the corporate network vulnerable for weeks before the threat is detected and neutralized. By isolating an employee’s browser activity in an external virtual environment that exists outside of your corporate network, any breach attempts that are launched against that user via a web browser, whether they are zero-day, fileless, or run of the mill attacks, can be stopped before they can even enter the corporate network. By implementing Remote Browser Isolation, your IT department can reduce the management overhead while simultaneously making it easier for your users to browse the web safely, securely, and without the limitations that other protection methods might place on their daily browsing habits.

Learn More About Remote Browser Isolation

How to Balance Employee Freedom With the Needs of Corporate Security
Posted on by Zuly GonzalezCategories Computer Security, How To, Web SecurityLeave a comment on How to Balance Employee Freedom With the Needs of Corporate Security
balancing stones on white background

Today’s employees prefer to use a wide range of web apps in the office in order to get the absolute most out of their workday. For example, they manage their calendar with Google Calendar, check their emails through Office 365, chat with fellow employees using Slack, watch videos over YouTube, have conference calls over Zoom or store and share files using Dropbox.

The idea of allowing employees access to various web applications they need to maximize their productivity may sound like a good one at first, but often this level of freedom can create a host of headaches for a company’s security department. The problem is further exacerbated when security teams have to worry about securing access to such web apps over multiple web browsers for every employee on every device.

Web Browsers Are a Necessary Evil

Gartner estimates that 98% of all external information security attacks happen over the public internet, and 80% of those attacks are carried out through end users’ web browsers. With browsers at the center of so much corporate activity, it’s no surprise that browsers are the most likely place for cyber-attacks to happen.

Oftentimes, to keep things simple, the IT department will block entire categories of websites, including many of the essential sites that employees need to do their job effectively. Contrary to popular belief, no good comes out of being so heavy handed with blocking sites. First, the inability to access sites to do their job leads to employee productivity loss, and second, enterprise networks are still vulnerable since blocking sites doesn’t eliminate the threat of web-based malware that can be introduced through typically “safe” sites. To make matters worse, some organizations even take the extreme measure of blocking internet access altogether, which has obvious productivity concerns.

Then what is the best way to mitigate the threat of browser-based attacks while still providing employees with all the flexibility they need to be productive on a daily basis?

Remote Browser Isolation Provides a Solution

The solution to keeping your network safe while allowing unrestricted access to the web and work flexibility is Remote Browser Isolation. Remote isolated web browsing brings the best of both worlds into one seamless, easy to use solution that lets employees browse the web with complete freedom while also protecting your network from any browser-based threats.

Remote Browser Isolation moves your web browsing activity off the corporate network entirely, and into a remote virtual environment. This means that no web content ever enters the corporate network, so if any infected links or files are encountered, they are unable to cause any damage.

Furthermore, Remote Browser Isolation enables truly anonymous browsing capabilities that protect a user’s identity when browsing the web.

Conclusion

Today, the internet is the go-to source for information, productivity tools, commerce, socialization and business communication. The rapid emergence and use of social media, news sites, web apps and other business sites in the workplace, whether for personal or business use, have made the web browser one of the most likely places for cyber-attacks to happen. Every new website that is allowed into the corporate network potentially introduces a whole new range of attack vectors that security teams need to worry about. Remote Browser Isolation alleviates these security concerns while still allowing employees access to a wide range of websites and web applications in the office in order to get the absolute most out of their workday.

Learn More About Remote Browser Isolation

If You Use Your Web Browser’s Incognito Mode We’ve Got Bad News
Posted on by Zuly GonzalezCategories Computer Security, Security, Web SecurityLeave a comment on If You Use Your Web Browser’s Incognito Mode We’ve Got Bad News

We place our trust in simple browser features like Chrome’s ‘incognito browser mode’ with an expectation that it will work as advertised and protect our privacy. Sadly, it doesn’t.

The incognito browsing mode, or the ‘private browsing mode’ as it is also known, has become the go-to method that amateurs rely on to protect their privacy and keep their internet browsing history a secret. But while the private browsing mode is good enough for preventing local cookie tracking or saving of autofill details, it falls short in dozens of other ways that matter most in keeping your information truly private and secure. For example, the private browsing mode cannot prevent browsers from giving away your geographical location, nor can it prevent viruses and malware from infecting your computer.

In an article posted on IFLScience.com, Aliyah Kovner blames the major browser providers for not doing a good job with their disclosures, which makes it difficult for their users to comprehend what these features actually can and cannot do. Read the full article here.

Though the article doesn’t offer a solution, it does bring up two very important points – (1) the majority of users out there want an easy, convenient and reliable way to protect their privacy while browsing the web and (2) even if the major browser providers improve their disclosures, people are not likely to read them, which means that they will likely still not understand the limitations of these features..

This poses a big challenge for companies that not only need to protect their users’ privacy, but also need to ensure that their corporate network is secure from threats like malware and ransomware.

Enterprises need a solution that can address both the privacy concerns of their users and the security concerns of their security teams. What they need is a solution called Remote Browser Isolation (RBI) that can not only enable truly anonymous web browsing, but can also ensure the security of their network against web-based malware threats, and much more.

Learn more about Anonymous Web Browsing with Remote Browser Isolation

Light Point Security CEO to Speak at the Techno Security & Digital Forensics Conference
Posted on by JudyCategories Events, Light Point Security Update, Security, Web SecurityLeave a comment on Light Point Security CEO to Speak at the Techno Security & Digital Forensics Conference

I’m happy to share that Light Point Security CEO, Zuly Gonzalez, will be speaking at the 2018 Techno Security & Digital Forensics Conference about how malware can infiltrate an organization’s network and how to protect against these threats. This is Zuly’s second year presenting at this conference and we are looking forward to another great show of making new connections and learning from the best.

The Techno Security & Digital Forensics Conference will be held June 3-6, 2018 in Myrtle Beach, SC. Zuly’s presentation is scheduled for Monday, June 4, 2018 10:30am – 11:20am. If you’d like to join us at the conference and attend Zuly’s presentation, you can register here. We hope you’ll join us!

Presentation Information

Don’t Let the Hunter Become the Hunted – Protect Your Online Research Network Intelligently

Online research of publicly accessible websites is a source for a practically infinite amount of data. But who knows what sorts of malicious software (malware) is lurking on the other side of every link you click. A malware infection in your research lab’s network can have devastating effects for your organization, ranging from data theft and leakage, ransomware infections, or simply destruction of your data and equipment. If your data is stolen and leaked to the wrong people, it may be you that is being investigated by your targets! This session will discuss the malware risks you are exposed to when doing online research as well as some cutting edge new ways to protect your network from online malware threats.

Webinar: How to Prevent WannaCry and Other Web Threats
Posted on by JudyCategories Events, Light Point Web, Security, Web SecurityLeave a comment on Webinar: How to Prevent WannaCry and Other Web Threats

Light Point Web prevents WannaCry and other ransomwareIn a matter of days, the WannaCry ransomware outbreak infected more than 230,000 computers in 150 countries. It impacted healthcare organizations, universities, government agencies, and many others, including FedEx. If you are concerned about the WannaCry ransomware and other similar attacks, join us for this informative webinar.

Light Point Security is hosting a joint webinar with partner, ELEVI Associates, today May 18 at 1pm EST. This educational webinar will explain the causes of ransomware and the devastating effects it can have on an organization. Learn about remote browser isolation technology and how it protects organizations from ransomware and other web-based threats.

Join us by signing up for the webinar here.

Register Now

Ransomware’s Devastating Effects on the Healthcare Industry [Infographic]
Posted on by Zuly GonzalezCategories Resources, Security, Web Security1 Comment on Ransomware’s Devastating Effects on the Healthcare Industry [Infographic]

healthcare ransomware effects infographicRansomware has taken its toll on the healthcare industry. With new attacks seemingly every week, are you prepared to fight back, and protect your organization and your patient’s protected health information (PHI)?

As we mentioned previously in Why Ransomware Gangs Love the Healthcare Industry, ransomware is projected to grow 670%, and the healthcare industry has the highest cost per record stolen of any industry at $363 per stolen record. And with your patient’s lives in your hands, the stakes couldn’t be higher.

This infographic highlights the devastating effects ransomware and security breaches have had on the healthcare industry. (Click on the image for a full-sized version.) Are you protected?

Please share to spread the word!

Not into sharing infographics? Tweet these statistics instead:

  • The cost of cyberattacks to U.S. health systems over 5 years is $305 billion. [tweet this]
  • Cyber criminals to collect $1 billion in ransomware payments in 2016. [tweet this]
  • The cost per stolen healthcare record is $363. [tweet this]
  • Healthcare is 4 times more likely to be impacted by advanced malware than the avg industry. [tweet this]
  • Healthcare is 4.5 times more likely to be impacted by ransomware than the avg industry. [tweet this]
  • There are 340% more security incidents and attacks in healthcare than the average industry. [tweet this]
  • Ransomware attacks are projected to grow 670%! [tweet this]
  • Healthcare records are 10 times more valuable than credit card details on the black market. [tweet this]

Looking for more? Check out this article for more interesting statistics and information on ransomware in the healthcare industry.

Embed This Image On Your Site (copy code below):

Will You Be the Next Health System Held for Ransom?
Posted on by Zuly GonzalezCategories Events, Security, Web SecurityLeave a comment on Will You Be the Next Health System Held for Ransom?

This is going to be a great panel! I’ll be moderating a panel for the 2016 CyberMaryland Conference on the topic of preventing ransomware in healthcare. We have a dynamic and engaging group of panelists comprised of CISOs and CIOs with decades of experience in the healthcare industry. They’ll be sharing stories and best practices to help you protect your organization from ransomware and other cyber threats. Come ready to learn!

The 2016 CyberMaryland Conference will be held Oct 20-21, 2016 in Baltimore, MD. Our panel is scheduled for Friday Oct 21, 2016 1:45pm – 2:45pm. I hope you’ll join us as this promises to be an engaging panel.

If you haven’t registered for the conference yet, use our discount code TCMdGuest for a 25% discount.

If you have any topics or questions you’d like our panel to discuss, send them our way. You can email your questions or topic suggestions to info@lightpointsecurity.com, or tweet us at @LightPointSec and use the hashtag #CyberMD2016.

Panel Information

Will You Be the Next Health System Held for Ransom?

All healthcare organizations should have anti-virus and firewalls in place – but that’s just not enough in today’s ever evolving world. As attackers grow more and more sophisticated, and ransomware becomes the new normal, healthcare organizations are struggling to keep up.

Hear from an expert panel of healthcare CIOs and CISOs on best practices for keeping ePHI out of the wrong hands, as well as innovative technologies that can be used to avoid becoming the next ransomware victim. Together they have decades of experience managing and securing healthcare networks, and will share practical ways you can secure yours.

Moderator
Zuly Gonzalez, Co-founder and CEO, Light Point Security

Panelists
Chad Wilson, Director of Information Security, Children’s National Medical Center
James Parren Courtney, SSSE Certified Chief Information Security Officer, University of Maryland Medical System
Darren Lacey, Chief Information Security Officer, Johns Hopkins University
Chris Panagiotopoulos, Chief Technology Officer, LifeBridge Health

Healthcare Ransomware Prevention CyberMaryland 2016 Panel

 

Categories
Archives