Who’s Got Your Backups?

By Geoff Duncan Published July 25, 2005

The nonprofit SANS Institute has released its survey of the top 20 critical security vulnerabilities for the second quarter of 2005, and alongside more than 400 new significant vulnerabilities—including run-of-the-mill entrants like Internet Explorer, Exchange Server, and RealPlayer—are some potentially alarming products: backup software from Computer Associates and Veritas.

Since backup products are used by individuals and companies to safeguard valuable data; as such, they typically have access to the most sensitive and critical data on user’s machines or networks, making them prime targets for attackers seeking personal data, financial information, or other important information. Moreover, the SANS Institute reports that while users and system administrators are gradually responding more quickly to security issues with commonly-vulnerable software like Web browsers and media players, the same people take longer to upgrade or secure backup software and other behind-the-scenes software which hasn’t been commonly exploited in the past.

Recommended Videos

Information about the vulnerabilities—and how to correct them—is available from the SANS Institute as well as the software vendors.

Former Contributor

Geoff Duncan writes, programs, edits, plays music, and delights in making software misbehave. He's probably the only member…

Computing

Deepfake bosses are crashing video calls, and researchers are trying to expose them

Seeing your boss on video no longer proves they are real

Researchers at Fraunhofer SIT are fighting against deepfake meeting video calls

Entering into a meeting with your boss and several familiar coworkers inside a video conference is the next area vulnerable to cybercrimes, and it's all because of deepfake technology. Researchers at the Fraunhofer Institute for Secure Information Technology SIT are working on a real-time warning system designed to identify attempted fraud during corporate video conferences.

The report states that criminals are increasingly targeting video meetings for identity theft and financial scams, taking advantage of the trust people place in familiar faces and voices. The intention is to flag suspicious activity while the meeting is still taking place. This gives an employee a chance to stop before following an expensive instruction from an AI-generated executive.

Computing

Apple will finally stop making iPhone-to-Windows copy-paste such a chore

Your iPhone may finally copy and paste with a Windows PC like it should

Apple Universal Clipboard feature

Copying something on an iPhone and pasting it onto a Windows PC should be one of the least remarkable features imaginable. While this simple process seems effortless between an iPhone and Mac, Windows users are still left waiting.

Now, Microsoft is formally asking Apple to provide interoperable clipboard access through the company’s European Union interoperability process. The request, submitted on March 25, argues that iOS restrictions prevent third-party platforms from creating an experience comparable to Apple’s Universal Clipboard. Apple has now reached Phase III and committed to developing a solution.

Computing

Chrome wants more extension reviews, but good ratings won’t keep malware out

Google is testing built-in extension review prompts, but good ratings can still hide malware

malicious-google-chrome-extensions-on-web-store

Google is preparing to add extension review links directly inside Chrome, putting feedback closer to the menus people already use to manage their add-ons.

A Chromium change, first spotted by Windows Report, points to review options in the Extensions menu, the chrome://extensions management page, and extension context menus. Only eligible Chrome Web Store extensions in good standing would qualify, and the feature is still under development.