New Linux Flaw Can Give Hackers Full Access

Users of Linux should be watchful for the security flaw that is called Dirty Sock, which has been classified as CVE-2019-7304. It was Chris Moberly, a security researcher, who discovered this crucial security flaw. He immediately reported the details of his discovery to Ubuntu makers last month. The problem lies in the Snapd service’s REST API. If you are not sure what this is, you should call an IT consultant.

It is a universal Linux packaging unit that is responsible for creating applications that work well with Linux across different distributions, and with no changes to the executable needed. However, it also means that Ubunti is not the only build that is affected by the newly discovered flaw. Virtually all flavors of Linux is at great risk.

Moberly’s comment on the flaw:

"Snapd versions 2.28 through 2.37 incorrectly validated and parsed the remote socket address when performing access controls on its UNIX socket.  A local attacker could use this to access privileged socket APIs and obtain administrator privileges."

If there is any silver lining to the discovery made by Moberly, it is that the nature of the problem hinders the hacker from taking advantage of it remotely. They would need physical access to the unit or perhaps trick or force the user to do something that will initiate a program that will escalate privileges that will grant the hackers access. Even so, this flaw should not be ignored especially since it can be used to obtain complete access as well as control to a target unit. It is best to seek the help of an IT consultant Myrtle Beach for your home or business now.

Fortunately, the makers of Ubuntu, Canonical, moved quickly and have rolled out an update that deals with the flaw, with other leading Linux distributions following their lead as well. So, if it is been quite some time since you have updated last, now is the best time to do so. Always remember that it is better to be safe than sorry.

Call SpartanTec, Inc. if you are looking for a reliable and reputable IT consultant to help make sure that your computers are safe and secure.

SpartanTec, Inc.
Myrtle Beach, SC  29577
843-418-4792
https://www.spartantec.com/

Two new critical flaws have been discovered in Adobe Acrobat and Reader that require your urgent attention. These flaws could compromise your information security if your computer is left unprotected.

In fact, the flaws were rated as so severe that the company broke with its tradition of releasing security updates around the middle of the month in coordination with Microsoft's "Patch Tuesday".

They released an update sooner this time, in order to make sure that these issues were resolved, and ensure the fixes were in the hands of their users.

The first issue, listed as CVE-2018-16011, is an exploit that takes advantage of the software's 'Use-After-Free functionality that allows a hacker to craft a special, poisoned PDF embedded with code that could allow them to take full control of the system targeted by the attack.

The second, identified as CVE-2018-16018 bypasses the JavaScript API restrictions in place on Adobe Reader. This greatly increases the risk of overriding the computer security in a given OS.

The flaws can be found in all versions of Windows, macOS Acrobat DC, and Reader 2019.010.20064 and older. The company recommends updating to version 2019.010.20069 to address the flaws and be sure your system is protected.

The company has listed both of these as critical flaws with a rating of two, which is about as serious as it gets.

In related news, we have learned that Adobe's regularly scheduled security patch will address a total of 87 security flaws across a range of the company's products, with 39 of the issues patched being rated as critical.

Kudos to Adobe for breaking with their tradition and addressing both of these flaws ahead of their regularly scheduled update.  It's a sad testament to the times we live in that such actions are becoming increasingly necessary. However, it's always good to see instances of prominent tech companies rising to the occasion and looking out for the best interests, particularly in the computer security Myrtle Beach of their user base.

Be sure to grab these updates and apply them as soon as feasible if you use either of the products mentioned above.

Not sure about your computer security? Call SpartanTec, Inc. today to keep your computer safe at all times.

SpartanTec, Inc.
Myrtle Beach, SC  29577
843-418-4792
https://www.spartantec.com/

Windows 7 Support Ends In 2020, So Plan To Upgrade

If you are among the shocking number of people who are still using Windows 7, then there’s some bad news for you. Microsoft is offering only one year of full support for Window 7 users. They will no longer offer important security updates by January 14, 2020. With this in mind, it is necessary that Windows 7 users take precautions to improve their information security.

The support will end only for individual users, which could deal a blow to their computer security. Businesses that use Window 7 will continue to receive support beyond the said date.

But, they need to register to the Windows 7 Extended Security Update program once the date listed above has passed. They also need to pay a fee, which increases annually.

Discounts will be offered to enterprise users that have volume licensing agreements. However, support will still be discontinued completely by January 2023. Microsoft will likewise provide ESU’s for free to clients who buy the Microsoft Windows Virtual Desktop service, letting users virtualize Windows 7 and Windows 10. This will improve computer security Myrtle Beach of who choose to upgrade.

Additionally, Microsoft will also cease offering support for Office 365 ProPlus plugin for Windows 7. The company will also end offering support to several other products.

The news is no longer surprising since the tech giant has made public its support timeline long before this announcement. However, there are still a number of companies that are using legacy applications, which depend a lot on Windows 7 and most of them have not yet established any migration plans. If your company is among these firms, you still have time to make the necessary plans. But keep in mind that you have a limited time to do so. Disregarding this will cost you in the end and will have a huge impact on your bottom line.

Microsoft has drawn a hard line at this point, and it’s highly unlikely for the company to give in to the pleas of consumers for a longer extension. So, you better start planning to switch or upgrade now.

Call SpartanTec, Inc. for more information on how you can switch or upgrade to a different operating system.

SpartanTec, Inc.
Myrtle Beach, SC  29577
843-418-4792
https://www.spartantec.com/

Hackers Hit Dunkin Donuts Accounts For The Second Time

After getting hacked three months back, Dunkin’s information security took another hit. Hackers, once again, gained access to an undetermined number of DD Perks user accounts.

What’s more bothersome is that the hackers breached their system through the exact same way they did a few months back. They used a hacking technique that is referred to as Credential Stuffing.

Even though it isn’t a complex kind of attack, it is extremely effective. Generally, hackers will use combinations of user names as well as passwords from their previous data breaches. They will try to use them and see if they work on other websites.

It is very effective, since until this day, an appalling percentage of individual use the exact same password for different websites. That is even if they have user names that have a slight different from one another. The problem is that once a hacker gets access to a DD Perks account, all the details of the user’s profile will be exposed. These include the first name, last name, email address, and well as the code for their DD Perks account.

Although that is not enough to steal anybody’s identity, these details surely has value when they go to the Dark Web, and is most likely being sold there while you are reading this post. Of course, it likewise lets the hackers, or anybody who purchases the account information, to begin using the victim’s DD Perks points, enjoying freebies, and denying all the good things to the rightful owner of the account.

According to a Dunkin’ Donuts representative, "Dunkin' continues to work aggressively in combatting credential stuffing attacks, which have become increasingly prevalent across the retail industry given the massive volume of stolen credentials now widely available online." The spokesperson also said that what happened wasn’t a breach of their system. Obviously, that is a tiny consolation to all account holders whose information has been compromised. Whether you have a big or small business, information security is a much. If you are unsure what to do, talk to an IT consultant for expert assistance.

Call SpartanTec, Inc. if you want to know how to keep your company’s confidential information safe and secure.

SpartanTec, Inc.

Myrtle Beach, SC  29577

843-418-4792

https://www.spartantec.com/

10 Tips to Block Off Malware From Your Computer

A virus or malware infection is something that a lot of computer users have experienced at some point. It is particularly frustrating to figure out a way to remove these intrusive applications with the least damage to personal files and programs. Most of us turn to anti virus software to resolve these issues. That’s the most common approach that most people would take. But it is also important to understand the root cause of the problem and start from there.

We quickly put the blame on computer viruses and that’s no coincidence. However, it’s not the viruses that are at fault at all times. There are instances that malware is to blame.     Here are 10 tips that will help you remove these malicious programs off your computer and how to prevent them from coming back:

Install an anti-virus / anti-malware software

It’s a no brainer. This is one application that all computer should have regardless if they are personal or used for work. To avoid any nasty consequences of a malware attack, be sure to have anti-malware software installed. The added protection will decrease your chances of malware infection almost entirely.

Don’t let virus/malware definitions go outdated

Every day, there are new viruses and malware that are uploaded over the internet. Once your anti-virus software company finds this new malware, they add it to their list of known infections. They then send over these updated malware definitions to their subscribers to protect their customer’s computer from new malware. However, in some instances, anti-malware applications are not set to automatically update, which leaves the computer and personal information vulnerable to attacks. Always make sure that your software is always up to date.

Do regular scans

If you want tight information security on your computer, do regular scans. If your anti-virus software is up to date, the next thing you should do is regularly scan your computer, especially if you’re on the internet most of the time.

Keep your operating system up to date

Some operating systems have more support than others. Be sure that you are running your computer on the most recent OS. There are a lot of developers that focus on computer security, which means you are less likely to be infected on a more recent operating system than on an older one.

Add another level of network security

Today’s devices make use of wireless connectivity. However, there is a lot that could go wrong with the wireless printer that you wouldn’t want to happen. For all of your devices that connect to the internet, add a secure password. Your Wi-Fi also needs secure passwords, keeping your SSIDs safe from prying eyes.

Never click on anything dubious

If you receive an e-mail that contains an attachment of some sort, don’t be too quick to click on it. Make sure that the e-mail comes from reputable sources. Double check the sender before you open anything. Some phishing schemes make use of this method. Spending 5 minutes more on double checking will do a great deal for your security.

Be wary of what of sharing information on the internet

A lot of hackers hijack your information primarily because it’s just lying out there in the open. Be careful of what information you share over the internet. What you put out there could be used to steal your identity.

Never use open Wi-Fi

While the idea of getting free Wi-Fi sounds pretty tempting, never go on anything that doesn’t have any encryption. This could potentially be dangerous. Your data or anything that you open up while on that open Wi-Fi can be stolen.

Don’t leave your files without proper backup

If you’ve got a lot of important files on your computer, the first thing that you should do is to create a backup. Regardless of whether your primary files get infected or not, your backup will always be there. Cloud storage is most common nowadays and it’s done in real time. It’s also a cheaper alternative.

Don’t use one password on all accounts

A lot of us are guilty about this. Password1234 just won’t cut it anymore. Don’t use passwords that would typically be used and can be guessed quite easily. Use strong passwords with a combination of special characters. This will be harder to decipher and access your information.

Want to have total information security but don’t know how to? Call SpartanTec, Inc. today to get protected.

SpartanTec, Inc.
Myrtle Beach, SC  29577
843-418-4792
https://www.spartantec.com/

Large Increase In Business Email Hacking Incidents

With the rapid increase in the number of incidents of hacking attacks, it was forecasted that 2018 would set new record highs. That came with the rising numbers of hack attacks as well as more successful attacks compared to what was recorded the previous year, 2017. Unfortunately, the prediction came true and the information security of several business has been breached.

What some individuals had anticipated, on the other hand, was how massive the increase was.

Although the number of hacking attacks went through the roof in 2018, there are certain areas that saw massive growth than Business Email Compromise or BEC attacks. These hacks were responsible for the staggering 476% increase between the last quarter of 2018 and the fourth quarter of 2018. To provide that figure with some context, in comparison, email fraud attempts against commercial businesses surged by 226% during the same time, which even though still staggering, is measly by comparison.

Business Email Compromise attacks rank first when it comes to the security risk that is growing rapidly on the existing threat matrix, and the most common kind of attack that companies will most likely experience. There is a great need for firms to improve their information security Myrtle Beach.

These are, to be more specific, social engineering attacks targeting certain staff members of a particular firm, usually in the finance division of a certain company. The main objective is to convince them that they are in contact with a vendor that the firm does business with on a regular basis and to persuade them to send out significant amounts of cash. This is usually through wire transfers to given accounts which look like the real vendor accounts at first look, but the truth is, they are being controlled by the hackers.

Even though less complicated attacks depend on infected URLs or files to do their damage, these particular attacks depend on psychology and trust. Because of that, they will be harder to spot, which is among the several reasons why they could be extremely devastating. When the time comes that the victim realizes what they have done and what happened, it is just way too late.

Vigilance is just the only want to fight this kind of attack, so just make sure that your staff members know the risk and should always be on their guard. Finally, heck any significant transfer of money personally. You may also seek out the help of a professional IT consultant. It is always better to be safe than sorry later on.

Call SpartanTec, Inc. if you want to know how to keep your company information secure at all times.

SpartanTec, Inc.
Myrtle Beach, SC  29577
843-418-4792
https://www.spartantec.com/

Download Your Data From Google Plus Before It Gets Deleted

Google never kept it a secret that it plans to discontinue their social media experiment, Google+. If you are not updated about the company’s announcement about this particular service, then you need to know that Google+ will no longer be available on April 2, 2019. Now that the deadline is drawing near, the company has released more details about how the shutdown will take place.

Just so you know, shutting down Google+ is more than just switching off access as well as freezing posts or preserving them for eternity. It will involve the deletion of everything related to Google Plus all throughout the internet. This means all your posts, even your comments to the posts of other people, as well as your Google+ comments on blogging sites like Blogger will all be deleted. If there are certain materials that you want to preserve, then you should begin archiving or find a way to backup your files. You still have time but you have to hurry. Depending on the volume of data you wish to save, you have move as fast as you can.

Google Plus is not as popular as Facebook and other mainstream social media sites. Its release was more of a panic reaction to Facebook’s meteoric rise in popularity, with the added fear that Facebook may kill search in case everybody just asked their friends for recommendations.

Nothing like that took place however, it was of great concern when the company rolled out the service and it was what forced them to include Google+ in all aspects of their product ecosystem, even if there were instances when it was no longer sensible.

Given that Google+ has been integrated deeply, shutting the service down will not be easy nor quick. But that won’t stop the company from terminating it. Please note that consumers will only be the ones affected by the showdown. Enterprise users that use Google+ will still have access to it using G Suite.

Call SpartanTec, Inc. if you want to know how you can keep a backup of your Google+ files.

SpartanTec, Inc.
Myrtle Beach, SC  29577
843-418-4792
https://www.spartantec.com/