Author name: Megan Augustine

JavaScript from Unfamiliar Sites Can Be A Bridge for Malware

The popularity of JavaScript, a dynamic programming language in widespread use, makes it a tool that hackers and other unscrupulous programmers can use to hack into a system. JavaScript makes the web experience very dynamic, enhancing the interactivity of many websites – you’ll see it everywhere, from Facebook to the most obscure sites on the web. Another reason it’s popular is that it’s compatible with all browsers, from Internet Explorer to Mozilla and even Mac’s Safari. Unfortunately, this popularity and wide range of use also makes JavaScript a tool that hackers and other unscrupulous programmers can use to infiltrate and hack into a system. The attacks can be simple or complicated, ranging from simple spam to more elaborate scams. The degree simply depends on the purpose of the script’s designer. What’s more, a quick visit to an infected website can trigger an attack, if your browser is enabled to allow JavaScript to execute from that site. The good news is that you can protect yourself from these kinds of attacks. Simply block JavaScript from executing from sites you aren’t familiar with – better safe than sorry. For Internet Explorer , go to Tools > Internet Options > Security, and set your bar to High. You can also input a list of trusted sites. For Firefox users, a free application called NoScript gives you control over which websites can execute JavaScript on your browser. Google Chrome users can select a universal disabling of JavaScript from all sites, and then add a list of sites exempted from the ban. Other browsers also have options to either disable JavaScript execution or prompt you for permission before the script is run from any website. You should also be particularly wary of JavaScript attacks originating from malicious PDF files. Antivirus and security firm Symantec reports that almost half of all web-based attacks come from infected PDF files. You can disable JavaScript in Adobe Acrobat Reader by selecting Edit > Preferences > JavaScript, and then removing the check on “Enable Acrobat JavaScript”. It might seem inconvenient to guard yourself from these sorts of attacks, but in the long run it pays to keep your system secure. If you want to know more about keeping your system clean and safe from attacks, give us a call and we’ll be happy to help you develop a customized plan that meets your particular needs.

JavaScript from Unfamiliar Sites Can Be A Bridge for Malware Read More »

Putting VoIP to Work for your Business

Small businesses can now put VoIP to work for their business. The same network that handles the flow of data such as web access and email can also accommodate voice as well. A few years ago, Voice-over-IP (VoIP), or Internet telephony, was touted as the next big wave in technology. For many businesses – especially geographically distributed ones – VoIP provides a way to dramatically reduce the cost of communications and maximize investments already made in their network infrastructure. In addition to saving money and using resources more efficiently, VoIP lets employees be more productive and efficient by giving them the ability to receive and make calls anywhere with a data connection. VoIP also reduces the complexity associated with managing multiple networks and devices for communication. Companies can set up their office network so that each employee can use a single device, such as a computer or a smart phone, to handle everything from email, chat, messages, fax, and more. Finally, VoIP enables real-time collaboration when used with video conferencing and screen sharing applications. All this used to come with a big price tag, but that’s no longer the case. With the great strides made in technology the last few years, VoIP is now easily within reach for many businesses – large or small. The range of choices include free, downloadable software that allows users to make free calls over the Internet from PCs or mobile devices, as well as services that can be used and accessed from your web browser, your favorite email service or software, and even old-school analog phones as well! VoIP is certainly a technology that has come of age. It’s cheap, ubiquitous, and easy to use, and all businesses would do well to add VoIP to their toolset for substantial cost savings and greatly improved efficiency and productivity. Looking for some guidance in adding VoIP to your toolset? Give us a call – we have answers!

Putting VoIP to Work for your Business Read More »

How Can Managed Services Help Increase Productivity – and Your Bottom Line

With the constant developments in IT, it’s difficult for small to medium-sized business owners to keep up with the latest technology. By using Managed Services, not only are you up to date, you also are free to focus on the aspects of your business that bring in more income. The term Managed Services is defined as “the practice of transferring day-to-day related management responsibility as a strategic method for improved effective and efficient operations”. ( https://en.wikipedia.org/wiki/Managed_services ) While large corporations regularly choose this technology solution, many owners of small and medium-sized businesses are still hesitant to go this route. Here are some reasons Managed Services can benefit all sizes and types of business: 1. IT is an integral part of most businesses. Especially in recent years, the business world has become increasingly dependent on IT. Almost all businesses rely on some sort of technology. With this increased use of IT comes an increase in problems and outages – and even loss of data – all of which result in loss of productivity. 2. Faulty or under-supported IT causes costly downtime. Small, in-house IT departments of one or two people are usually not able or equipped to handle occasional IT breakdowns, and employees must call on somebody else for help, sometimes resulting in hours or even days of lost productivity. This downtime greatly affects the bottom line of your business. 3. Technology is constantly improving. Improvements in technology are continuing at a rapid pace. Equipment is upgraded and new specialties in IT are emerging. Small to medium-sized businesses are not equipped to keep up with these constant changes. 4. IT Managed Services provide state-of-the-art solutions. Managed Services providers are experts in the field of technology, and bring knowledge and experience in the latest solutions to your business. And taking advantage of scale of economies, the Managed Services model gives you access to affordable state-of-the-art technologies previously only available to large enterprises. 5. Many businesses involve special compliance requirements. Even small to medium-sized businesses can have complicated compliance requirements, but most owners do not fully understand how to comply with these regulations. Many Managed Services providers stay current on these regulations and requirements, and can help you translate them to your technology needs in order to stay compliant and avoid fees – and possibly worse. 6. IT Managed Services cost less in the long run. With today’s economic downturn, IT budgets have been slashed in most companies. But bear in mind that businesses still depend heavily on IT, and work increases as resources diminish. This can bring about low morale for employees and lost productivity – and ultimately customer satisfaction suffers. While IT Managed Services may cost more in the beginning, lost productivity and lost customers cost a lot more. The question is, are you an expert in IT? Most entrepreneurs aren’t. If you want to concentrate on your company’s core competencies without having to worry about your IT infrastructure, outsource your IT services to a reputable Managed Services provider.

How Can Managed Services Help Increase Productivity – and Your Bottom Line Read More »

RealPlayer Users Beware

RealNetworks , developers of RealPlayer, a popular real-time streaming media player, recently released an advisory about vulnerabilities that when exploited could trigger remote code execution attacks. The firm reports at least 11 critical vulnerabilities that expose Windows, Mac, and Linux users to malicious hacker attacks. RealPlayer is a favorite target for malware and fraudware writers, and users are advised to download the latest software update. If you don’t use RealPlayer, you’re best advised to uninstall it immediately. Need help in making sure your applications are safe to use? Contact us today. Related links: Bogus IQ test with destructive payload in the wild (zdnet) Tor project suffers hack attack (zdnet) RealPlayer Exploit Infecting Windows Machines (eweek)

RealPlayer Users Beware Read More »

Tabnabbing Exploits Vulnerabilities in Tabbed Browsing to Steal Passwords and Sensitive Information

Tabnabbing, a new phishing technique, poses new security threats to people who use tabbed browsing by changing the appearance of a tab to resemble a familiar website and prompts you to re-enter sensitive login information. Dubbed as “tabnabbing”, the vulnerability was discovered by Aza Raskin, the creative lead for the Mozilla’s Firefox browser and co-founder of Songza, a music search engine and jukebox. Tabnabbing fools users into entering passwords and other sensitive information when an unselected tab in your browser appears to transform itself into a lookalike for a familiar website. You are then prompted you to re-enter a username and password, which in turn passes that information along to the hacker. Incidentally, Raskin’s blog post on the topic ( https://www.azarask.in/blog/post/a-new-type-of-phishing-attack/ ) demonstrates how the website can “change” into a lookalike. Both Mozilla Firefox and Google are vulnerable to this type of attack, which is classified as “phishing” – a scam where users are tricked into entering login information into fraudulent websites masquerading as legitimate ones. Fortunately, there have been no instances – yet – in which tabnabbing has been used in phishing attacks, but Raskin says that he is “aware of other researchers and toolkits extending and expanding tabnabbing”. However, it’s very likely that phishers will be looking for ways to exploit tabnabbing soon, and are currently no fixes or patches released. One way you can protect yourself from tabnabbing is to make sure that your browser has the proper anti-phishing features installed. It’s also important that your website is updated with the latest security features since many phishers like to exploit websites running old version web software, which they use to host phishing sites. If you want to know more about keeping your system secure from the latest malware and security threats, please don’t hesitate to get in touch with us and we’ll be happy to sit down and discuss security options that fit your needs and requirements.

Tabnabbing Exploits Vulnerabilities in Tabbed Browsing to Steal Passwords and Sensitive Information Read More »

Scroll to Top