Connect with us

E-Business

Websense Discovers 1Bn PCs @ Risk

Published

on

Kindly share this post

Intelligence report has sent a remarkably alarming warning: as many as 1 billion networked Personal Computers across the globe are allegedly at risk because Windows Error Reporting (aka Dr. Watson) sends its report in the clear, according to Websense® Security Labs™.

Websense recently processed a sample data set from the Websense ThreatSeeker® Intelligence Network to investigate the security risk from popular applications and services.

“We determined enterprise and public sector networks are inadvertently leaking information, which could be used by a threat actor as intelligence to craft specific attacks and compromise networks.

“One troubling thing we observed is Windows Error Reporting (a.k.a. Dr. Watson) predominantly sends out its crash logs in the clear. These error logs could ultimately allow eavesdroppers to map out vulnerable endpoints and gain a foothold within the network for more advanced penetration,” the report read.

On why it is a concern, “80 percent of all network-connected PCs use it – that’s more than one billion endpoints worldwide”.

Dr. Watson reports information that hackers commonly use to find and exploit weak systems such as OS, service pack and update versions.

Crashes are especially useful for attackers since they may pinpoint a new exploitable code flaw for a zero-day attack, ‘Information is also sent for common system events like plugging in a USB device’

“Now it is true that this information is hugely valuable to Microsoft MSFT +0.35% and also to the rest of us. For it’s what is used to try and make the operating system, Windows, work better over time and given the number of us that still use it that’s a highly desirable outcome.

“However, there are a number of problems with it being sent in clear. For a start, anyone gaining access to that flow of information obviously has a great deal of information about where Windows is currently failing. That’s a great start to finding the vulnerabilities and flaws that allow the design of exploits,” the report contained.

It’s not entirely simple to gain access to that error reporting traffic but it most certainly can be done with a variety of man in the middle methods. Or, more importantly, if, just as an example of something unlikely, a spy agency had fibreoptic links into the backbone it could deliberately sniff for such traffic.

And this would give it a lovely database of those machines that haven’t been updating their service packs and thus have known vulnerabilities.

It’s a rather large and gaping hole that much of this traffic is moving unencrypted. Websense, thus suggested that computers on any network should be sending their reports to a local server, within the network, there to be encrypted before being sent off to Microsoft.

 

                           


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

NITDA, NIMC Partner for Seamless Data Exchange Capabilities

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA) and the National Identity Management Commission (NIMC) have announced a collaboration on National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI) to enhance synergy between digital identity, payment ecosystems and secure seamless data exchange capabilities for Nigeria.

NITDA, NIMC Partner for Seamless Data Exchange Capabilities

l-r: Kashifu Inuwa, Director General of NITDA, and Bisoye Coker-Odusote,  Director General of NIMC, during the meeting at the NIMC headquarters in Abuja..

NITDA, which made the announcement on its X handle, said that the collaboration was to further strengthen Nigeria’s digital economy in line with President Bola Tinubu’s Renewed Hope Agenda,

During the meeting, Kashifu Inuwa, director general of NITDA, and Bisoye Coker-Odusote, director general of NIMC, with some management staff of both organisations, discussed various initiatives, which include building DPI stacks for a secured and seamless data exchange and forming partnerships to transform the national identity system.

This collaboration also aims to harness the potential of the innovative ecosystem and emphasise the use of public-key infrastructure (PKI) to drive digital transformation in Nigeria.

To ensure a smooth implementation, a 12-man committee was set up.

This committee will play a crucial role in kickstarting and harmonising the initiatives and is expected to deliver a comprehensive implementation report within the next 4 weeks.

 

 


Kindly share this post
Continue Reading

E-Business

Expert Urges FG to Harmonise NIN, BVN to Tackle Crimes

Published

on

Kindly share this post

Noble Ajuonu, head, Sydani Technologies Ltd., has urged the Federal Government to harmonise National Identification Number (NIN) and Bank Verification Number (BVN) to tackle crimes and insecurity in the country.

Expert Urges FG to Harmonise NIN, BVN to Tackle Crimes

Ajuonu made the call at a media roundtable, organised by Sydani Group in Abuja.

The News Agency of Nigeria (NAN) reports that the roundtable focuses on driving sustainability through a comprehensive analysis of Nigeria’s key development areas.

Ajuonu said that Nigeria could overcome its security challenges and pave the way for a safer, more secure future for all Nigerians by embracing technology and implementing practical solutions,

“We need to harmonise data, prioritise seamless integration of databases like NIN, BVN, and security agency records, establish clear protocols for data sharing and access, with robust safeguards against misuse,’’ expert said.

According to him, the unified data pool will empower intelligence gathering and targeted operations.

He also called for investments in smart surveillance, intelligent video analytics software, training of personnel in data analysis, interpretation of data in real-time to combat crimes.

“There is need to implement a legal framework for call interception in criminal investigations, with strict oversight to prevent abuse, encourage community cohesion, training of tech savvy security personnel with tech-enabled tools.’’

Ajuonu also urged the government to address infrastructure deficit in technology, saying that technology was all encompassing to address insecurity.

“According to the National Identity Management Commission (NIMC), as of December 2023, only 104.2 million Nigerians had been enrolled for the National Identity Number (NIN).’’

Ajuonu added that over 122.2 million citizens left uncaptured for NIN were people in rural areas where enrolment centres, digital services were limited.

“Most crimes are being perpetuated from rural communities and this lack of comprehensive identification creates a gap where elements not captured in the national database can constitute public nuisance, crimes.

“There is the inadequacy in the integration of NIN, BVN and Voters Identification Number (VIN).

“Advanced call interception and analysis tools, used successfully in other countries, could provide invaluable insights into criminal networks and operations but infrastructure is lacking,’’ he said.

Also, Mr Godfrey Petgrave, the Agricultural Expert, Sydani Group, called for empowerment of smallholder farmers with access to finance and training to enhance productivity.

According to Petgrave, Nigeria requires policy reform and institutional strengthening to improve agricultural practices and embrace digital agriculture solutions to address food insecurity.

Mr Akolade Jimoh, another expert of the group on health, advocated for expanded community-based health insurance programmes for rural and underserved areas.

Jimoh added that the country needed to encourage Public Private Partnership to revolutionise products design and quality improvement on health services.


Kindly share this post
Continue Reading

E-Business

Konga launches Infinix Brand Week with Incredible Deals

Published

on

Kindly share this post

Konga, Nigeria’s leading composite e-commerce group, is thrilled to announce the launch of amazing deals at its Infinix Brand Week. Infinix, a leading global smartphone brand known for its innovative products and cutting-edge technology promises exclusive discounts and special offers on select smartphones, marking an exciting milestone in the realm of online shopping.

Shoppers can expect nothing short of extraordinary deals on a wide range of Infinix products, all available exclusively on the Konga online platform. With discounts of up to 30% off, this partnership between Konga and Infinix aims to redefine the shopping experience for tech enthusiasts across Nigeria.

Konga Brand Week has become synonymous with excitement and unbeatable deals, and this year’s edition is no exception. In addition to exclusive discounts on Infinix smartphones, shoppers can explore a diverse array of products across various categories, including electronics, fashion, home essentials, and more.

“At Konga, we are dedicated to providing our customers with the best shopping experience possible,” said Rita Ohaedoghasi, VP Marketing at Konga. “The Infinix Week during Konga Brand Week allows us to continue delivering on that promise by offering incredible discounts and special offers on some of the most sought-after smartphones in the market.”

To stay updated on the latest developments and exclusive deals during Konga Brand Week, shoppers are encouraged to connect with Konga across all platforms, including social media and the Konga website. Don’t miss out on this opportunity to score big savings and elevate your tech game with Infinix and Konga.


Kindly share this post
Continue Reading

Trending