Language Selection

English French German Italian Portuguese Spanish

Hackers aren't just picking on Microsoft - study

Filed under
Security

Online criminals turned their attention to antivirus software and media players like Apple Computer Inc.'s iTunes in the first three months of 2005 as they sought new ways to take control of users' computers, according to a survey released on Monday.

While hackers continued to poke new holes in Microsoft Corp.'s popular Windows operating system, they increasingly exploited flaws in software made by other companies as well, the nonprofit SANS Institute found.

As more Windows users agreed to receive security upgrades automatically, hackers looked to take advantage of other software programs that might not be patched as frequently, the head of the cybersecurity training and research organization said.

"Operating systems have gotten better at finding and fixing things and auto-updating, so it's less fertile territory for the hackers," said SANS Chief Executive Alan Paller.

Malicious hackers exploit security holes to lift credit-card numbers and other sensitive personal information from a user's computer, or commandeer it to send out spam and pornography.

More than 600 new Internet security holes have surfaced in 2005 so far, SANS found.

Of those, 20 were deemed most dangerous because they remain unfixed on a large number of Internet-connected computers even though software makers quickly made patches available.

As always, Microsoft products were a popular target.

Hackers found ways to take control of a user's computer by tunneling through Microsoft's Web browser, media player and instant-messaging software, as well as Windows software for servers and personal computers.

But software by Oracle Corp. and Computer Associates International Inc. also made the list, along with media players like Apple's iTunes, RealNetworks Inc.'s RealPlayer, and Nullsoft's Winamp.

Anti-virus products from Symantec Corp.. F-Secure, TrendMicro and McAfee Inc. proved vulnerable as well, a prospect Paller found particularly discouraging.

"We ought to do better in our industry -- we should be a model for others," he said.

The complete list can be found at sans.org.

Source.

More in Tux Machines

Linux Kernel News

  • Linux: Why do people hate systemd?
    systemd has caused an almost unending amount of controversy in the Linux community. Some Linux users have been unyielding in their opposition to systemd, while others have been much more accepting. The topic of systemd came up in a recent thread in the Linux subreddit and the folks there did not pull any punches when sharing their thoughts about it.
  • PulseAudio 10.0 Linux Sound System Released, Offers OpenSSL 1.1.0 Compatibility
    Today, January 19, 2017, sees the official release of the PulseAudio 10.0 open-source sound server for Linux-based operating systems, a major version that introduces many exciting new features. PulseAudio 10.0 has been in development for the past seven months, since the June 22, 2016, release of PulseAudio 9.0, which is currently used by default in numerous GNU/Linux distributions.
  • Linux is part of the IoT security problem, dev tells Linux conference
    The Mirai botnet? Just the “tip of the iceberg” is how security bods at this week's linux.conf.au see the Internet of Things. Presenting to the Security and Privacy miniconf at linux.conf.au, embedded systems developer and consultant Christopher Biggs pointed out that Mirai's focus on building a big DDoS cannon drew attention away from the other risks posed by insecure cameras and digital video recorders.
  • The Linux Foundation Brings 3 New Open Source Events to China
    LinuxCon, ContainerCon, and CloudOpen will be held in China this year for the first time, The Linux Foundation announced this week. After the success of other Linux Foundation events in the country, including MesosCon Asia and Cloud Foundry Summit Asia, The Linux Foundation decided to offer its flagship LinuxCon, ContainerCon and CloudOpen events in China as well, said Linux Foundation Executive Director Jim Zemlin. “Chinese developers and businesses have strongly embraced open source and are contributing significant amounts of code to a wide variety of projects,” Zemlin said. “We have heard the call to bring more open source events to China.”

Dell Has Sold ‘Tens of Millions’ Dollars’ Worth of Linux Laptops

So popular Linux personality Bryan Lunduke, who recently took an hour out to talk to Dell’s Senior Architect in the office of CTO — try saying that with a mouthful of doughnut — Barton George. What did he learn? Well, for one, Dell says it has ‘no plans’ to start shipping its Linux-powered developer laptops with anything other than Ubuntu. Read more

Open-source voting is the answer to hacking concerns

Will we ever have a voting system that is completely error-proof and impenetrable from malicious forces? Not likely. But the security breaches that are increasingly a part of daily life serve as a call to action. Every day brings a new report of hacking or suspicious activity, and increasingly with fingers pointing to international actors. Whether it is statewide voter registration databases (Illinois and Arizona; some say more); national party organizations (the Democratic National Committee); utilities (Vermont’s Burlington Electric); or Russia’s state-run television station (RT) suddenly interrupting C-SPAN last week — the incident is still under investigation and not confirmed as a hack — it is all very unsettling and leaves us feeling vulnerable. Read more

The Many, the Humble, the Ubuntu Users

I have never been much of a leading-edge computing person. In fact, I first got mildly famous online writing a weekly column titled “This Old PC” for Time/Life about making do with used gear — often by installing Linux on it — and after that an essentially identical column for Andover.net titled “Cheap Computing,” which was also about saving money in a world where most online computing columns seemed to be about getting you to spend until you had no money left to spend on food. Read more