Bardissi Enterprises Blog

Wired kids. Cyber teens. The Internet Generation. There may be varied terms to describe today’s young web users, but they all have one thing in common: they grew up with PCs and are not aware of what a world before the Web was like. While children and teens may be comfortable with computer technology, they are not immune to the boundless nasties of the Internet; in fact, their online behavior may put themselves and their family members at risk.

The Web provides many benefits to young computer users; it’s an important learning and research tool, not to mention a platform for socializing and games. In fact, almost 60 percent of children three years of age and older are using the Internet, according to industry reports.

These types of statistics show that regardless of your role in a child’s life – from parent to friend to teacher – it’s important to educate them on online safety.

Like adults, young Web users face a number of security challenges every time they visit the Web. And like adults, the more knowledge children and teens have, the better prepared they will be to handle any type of online threat.

Severity: High

8 April, 2008

Cisco Wednesday issued two separate security alerts concerning its unified communications products – the third UC-related alert of this year. One of the alerts issued this week concern flaws in Cisco’s Unified IP Phone models, specifically related to the company’s Skinny Call Control Protocol (SCCP, or “Skinny”) and Session Initiation Protocol (SIP), while the other relates to an SQL Injection attack that could affect Cisco’s Unified Communications Manager – formerly CallManager. 

According to Cisco, a number of its IP phones contain multiple overflow and denial-of-service vulnerabilities. Certain phones running SCCP and/or SIP firmware are vulnerable (see the list at the Cisco advisory). SCCP- and SIP-based phones contain a buffer overflow vulnerability in the handling of DNS responses. A specially-crafted DNS response may be able to trigger a buffer overflow and execute arbitrary code on a vulnerable phone, says Cisco. The hole is fixed in SCCP firmware version 8.0(8) and SIP firmware version 8.8(0).

These new releases for our Firebox X Core, Peak, and Edge UTM appliances include extensive enhancements to the appliance and management software, providing you broader security, greater flexibility and interoperability, and better visibility into the network.

Here’s what’s in version 10 for you:

New solutions for Remote Access, Monitoring, Authentication, and Voice

• Integrated SSL VPN on the appliance. Secure remote access via an SSL VPN thin client
• SNMPv3 support. Secures device communications, with fallback to SNMPv2
• Single sign-on. Transparent Firebox Authentication via Active Directory
• Protocol support for VoIP and video conferencing. One of the most-requested new features

Improvements to proxy-based security subscriptions

• New virus outbreak detection in spamBlocker. Adds another powerful layer of malware protection for the network
• Enhanced IPS signature set and engine. Technology behind a Gateway AV/IPS subscription gets faster and stronger
• HTTPS in WebBlocker, and 54 category support. More specific surfing restrictions increase productivity and protection
• Expanded quarantine to include AV. Email caught by antivirus engine can be quarantined for later administrator review

11 December, 2007

Summary:

Today, Microsoft released four security bulletins describing vulnerabilities that affect Windows and components shipping with it. A remote attacker could exploit the worst of these flaws to execute code on your Windows PC, potentially gaining complete control of it. For a table briefly summarizing which vulnerabilities affect which versions of Windows, see Microsoft’s Security Bulletin Summary for December and expand the section, “Affected Software and Download Location.” If you manage a Windows network, you should download, test, and deploy the appropriate Windows patches throughout your network as soon as possible.

Exposure:

Microsoft’s four security bulletins detail vulnerabilities found in, or affecting, components of Windows. Each vulnerability affects different versions of Windows to a different extent. The summary below lists the vulnerabilities from highest to lowest severity.

MS07-063: Windows Vista SMBv2 Signing Vulnerability