Connect with us

Featured

How BB PRIV sets privacy bar

Published

on

BlackBerry Chief Security Officer, DAVID KLEIDERMACHER outlines how BlackBerry PRIV offers a no-compromise user experience to privacy-minded consumers and enterprises.

If you use an Android device today, chances are very good that it’s not protecting your privacy. According to a recent study by Cambridge University researchers, nearly 9 out of 10 Android devices are exposed to a critical vulnerability that puts your communications and personal data at risk.

It’s not a good situation. However, we at BlackBerry think we can do better. PRIV by BlackBerry will bring BlackBerry mobile privacy, security and productivity to the Android world. With full access to Google Mobile Services, the Google Play app store, the latest hardware specs, and a revolutionary slide-out, touch-enabled keyboard, PRIV offers a no-compromise user experience to privacy-minded consumers and enterprises.

But what does privacy really mean for BlackBerry and the PRIV? The BlackBerry secure and private smartphone experience is built on the following principles:

1. Deliver a comprehensive, state-of-the-art technical security approach through all layers of the smartphone stack.

While the PRIV user interface is simple and beautiful, BlackBerry has performed extensive surgery under the hood to augment Android’s privacy and security capabilities. BlackBerry also brings its patented picture-login to Android, representing the best combination of security strength and ease of use for any smartphone authentication scheme available on any mobile device today.

2. Ensure users have a rich choice of private communication and collaboration applications.

Starting with BBM, which has served billions of private messages and offers security and productivity features evolving from many years of user feedback, PRIV also supports innumerable third-party options from Google Play as well as a wide range of BlackBerry-authored communication and collaboration applications aimed at business users, including WatchDox private file sharing, BBM Meetings private conferences, and SecuSUITE private voice calls. BlackBerry’s communications suites have no back doors and use certified cryptography from BlackBerry Certicom.

3. Give users maximum visibility and control over their privacy-related posture and configuration.

BlackBerry has built privacy monitoring hooks deep within Android that provide users with powerful feedback and control over how applications make use of security-critical device resources. This includes the exclusive DTEK™ by BlackBerry warning system app, as well as other features. Privacy health is communicated in a simple and elegant manner, resulting in confidence instead of complexity.

4. Commit to user privacy beyond the hardware and software.

Android privacy and security is about much more than just the device. And it’s about more than the end-to-end infrastructure for reliable communication and over-the-air updates. BlackBerry’s world-renowned security incident response and research teams offer nation-state level sophisticated vulnerability assessment that helps us find and fix problems before they impact users. Android is a complex, rapidly changing, massively popular, open-source product, which makes it an attractive and fertile target for attackers. Such an environment demands world-class security incident response, and BlackBerry has a long history delivering that to customers with the highest value resources under their (and hence our) protection. BlackBerry’s vulnerability patch program is second to none in the industry.

As we get closer to launch, the PRIV by BlackBerry security and privacy blog series from myself and Alex Manea will dive deeper on these topics and more. Also visit our Android Security site to keep up-to-date about Android vulnerabilities, hacks, breaches, management tips and more.

Featured

Lenovo unveils world’s smallest desktop PC

ThinkCentre M90n-1 Nano is powered by 8th generation Intel processors and SSD storage, catering to flexible working

Published

on

Lenovo has introduced the world’s smallest desktop PC, the ThinkCentre M90n-1 Nano, to the South African Market. It says it is designed to support diverse workplaces with the power of a full-size desktop and the space-saving convenience of a laptop.

“The ThinkCentre M90n-1 Nano is further proof of Lenovo’s commitment to helping small businesses drive efficiency in their operations,” says Thibault Dousson, General Manager at Lenovo South Africa. “In South Africa, SMEs make up a third of the country’s GDP and play an integral part in boosting the economy and creating jobs. Lack of capital, investment, resources or support are among the major challenges faced by our country’s entrepreneurs. 

“Lenovo wants to help entrepreneurs grow their businesses through giving them better access to critical tools and services, such as our financial services offering and leasing option. The ThinkCentre M90n-1 Nano is ideal for small business owners as it is reliable and powerful yet compact and easily transportable.”

Delivering powerful performance in an ultra-portable size, the ThinkCentre M90n-1 Nano is the most compact commercial desktop series in the world. Compact models are one-third the size of the ground-breaking ThinkCentre Tiny, at just 0.35L in volume.

With fully functional USB Type-C Gen2 and USB 3.1 Gen2 ports located on the front and back of the device, multiple displays, docks and other hardware options can further boost productivity. The ability to be powered using just one cable to a USB Type-C monitor makes the M90n-1 Nano ideal for a clutter-free workspace, whether it be placed behind a screen or under a desk.

The ThinkCentre M90n-1 Nano is MIL-810G SPEC tested – built to withstand extreme conditions including shocks, drops, dust and humidity. The desktop’s HW TPM 2.0 chip encrypts data to keep sensitive data secure, while its Kensington lock slot enables users to physically secure the device to an immovable object, protecting it from theft.

With its Modern Standby feature, users can receive emails, VoIP calls and instant messages while remaining in standby mode. When ready to commence work, the M90n-1 Nano resumes full functionality in under one second.

These features make the ThinkCentre M90n-1 Nano an easy fit across all office environments, or wherever space is limited, and staff are mobile. The ThinkCentre M90n-1 Nano also reduces energy consumption by as much as 30 percent annually over the ThinkCentre Tiny. 

Powered by the 8th generation Intel processors and backed by SSD (solid state drive) storage, the ThinkCentre M90n-1 Nano offers diverse connectivity and multi-user options to keep users connected.

Continue Reading

Featured

Hackers target hotels

Published

on

Kaspersky’s research of the RevengeHotels campaign aimed at the hospitality sector, has confirmed over 20 hotels in Latin America, Europe and Asia have fallen victim to targeted malware attacks. Even more hotels are potentially affected across the globe. Travelers’ credit card data, which is stored in a hotel administration system, including those received from online travel agencies (OTAs), is at risk of being stolen and sold to criminals worldwide.

RevengeHotels is a campaign that includes different groups using traditional Remote Access Trojans (RATs) to infect businesses in the hospitality sector. The campaign has been active since 2015 but has gone on to increase its presence in 2019. At least two groups, RevengeHotels and ProCC, were identified to be part of the campaign, however more cybercriminal groups are potentially involved.

The main attack vector in this campaign is emails with crafted malicious Word, Excel or PDF documents attached. Some of them exploit CVE-2017-0199, loading it using VBS and PowerShell scripts and then installing customised versions of various RATs and other custom malware, such as ProCC, on the victim’s machine that could later execute commands and set up remote access to the infected systems.

Each spear-phishing email was crafted with special attention to detail and usually impersonating real people from legitimate organisations making a fake booking request for a large group of people. It is worth noting that even careful users could be tricked to open and download attachments from such emails as they include an abundance of details (for instance, copies of legal documents and reasons for booking at the hotel) and looked convincing. The only detail that would reveal the attacker would be a typosquatting domain of the organisation.

phishing email sent to a hotel impersonating a booking request from an attorney’s office

Once infected, the computer could be accessed remotely not just by the cybercriminal group itself — evidence collected by Kaspersky researchers shows that remote access to hospitality desks and the data they contain is sold on criminal forums on a subscription basis. Malware collected data from hospitality desk clipboards, printer spoolers and captured screenshots (this function was triggered using specific words in English or Portuguese). Because hotel personnel often copied clients’ credit card data from OTA’s in order to charge them, that data could also be compromised.

Kaspersky telemetry confirmed targets in Argentina, Bolivia, Brazil, Chile, Costa Rica, France, Italy, Mexico, Portugal, Spain, Thailand and Turkey. However, based on data extracted from Bit.ly, a popular link shortening service used by the attackers to spread malicious links, Kaspersky researchers assume that users from many other countries have at least accessed the malicious link – suggesting that the number of countries with potential victims could be higher.

“As users grow wary of how protected their data truly is, cybercriminals turn to small businesses, which are often not very well protected from cyberattacks and possess a concentration of personal data. Hoteliers and other small businesses dealing with customer data need to be more cautious and apply professional security solutions to avoid data leaks that could potentially not only affect customers, but also damage hotel reputations as well,” comments Dmitry Bestuzhev, Head of Global Research and Analysis Team, LatAm.

To stay safe, travelers are recommended to:

  • Use a virtual payment card for reservations made via OTAs, as these cards normally expire after a single charge
  • When paying for a reservation or checking out at hotel desks, use a virtual wallet, such as Apple Pay or Google Pay, or a secondary credit card with a limited amount of debit available

Hotel owners and management are also advised to follow these steps to secure customer data:

  • Conduct risk assessments of the existing network and implement regulations regarding how customers data is handled
  • Use a reliable security solution with web protection and application control functionality, such as Kaspersky Endpoint Security for Business. Web protection helps to block access to phishing and malicious websites while application control (in white list mode) allows to make sure that no application except the white listed ones can run on hospitality desk computers.
  • Introduce staff security awareness training to teach employees how to spot spear-phishing attempts and show the importance of remaining vigilant when working with incoming emails.

Read the full report, RevengeHotels: cybercrime targeting hotel desks worldwide, on Securelist.

Continue Reading

Trending

Copyright © 2019 World Wide Worx