14 septembre 2018 | International, C4ISR

Really old computer viruses are still infecting new machines

By:

The biggest cyber threats governments and businesses face may not be the cutting edge hack from China, but a 10-year-old virus that infects a little-used computer.

Some of the most well-known viruses from the past decade are still infecting machines despite their well-documented nature, according to cyber research firms. Some viruses, such as WannaCry and Conficker, are still spreading, Sean Sullivan, a security adviser at F-Secure told Fifth Domain.

“It costs hackers nothing to keep using them,” Sullivan said.

These known vulnerabilities are still effective because older machines do not receive patches for updates, which can then infect an entire network. Hackers often bundle known hacks together because it increases their success rate with no downside, Sullivan said.

“Nothing is going to be 100 percent patched across organizations,” Sullivan, said. He described a network administrator's role as “triage.”

The 2017 WannaCry hack infected users in more than 150 countries and had an economic impact of anywhere from $4 billion to $8 billion. Although progress has been made to patch computers, WannaCry is still a top malware threat for customers, F-Stream said in a September report.

The Conficker hack targeted Windows systems and was first launched in 2008. It is reported to have cost as much as $9 billion in damage.

But much work remains. More than two-billion devices have not been patched to defend against BlueBorne, a Bluetooth vulnerability that allows an attacker to take over devices, according to the cyber protection company Armis. The devices are still vulnerable because they have not been updated or because an update does not exist, according to the company.

“Whether they're brought in by employees and contractors, or by guests using enterprise networks for temporary connectivity, these devices can expose enterprises to significant risks,” wrote Ben Seri, the vice president of research at Armis.

A previous version of this article said that two million devices have not been patched to defend against BlueBorne. It is two billion.

https://www.fifthdomain.com/industry/2018/09/13/really-old-computer-viruses-are-still-infecting-new-machines

Sur le même sujet

  • French Defence Staff chief: France is making moves to guarantee its survival in the face of existential threats

    11 janvier 2021 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    French Defence Staff chief: France is making moves to guarantee its survival in the face of existential threats

    By: Jackson Schneider While I'm writing this article, the world is facing the greatest global crisis of our generation. It is worth asking what a globalized world means after the COVID-19 pandemic, and mainly in the context of the defense industry. Will it feature, as it did until recently, dynamic international trade and financial flows, globally integrated production chains, and an unprecedented flow of people and goods? Or, as many have speculated, will we see more protectionism, with countries protecting their markets and jobs, being more self-absorbed and less integrated? And how will the effects of geopolitical trends, accelerated by the current crisis, unfold in the decision-making of the military segment in a review of strategic plans? Nonstate actors, unconventional wars, terrorism, nationalism, the connection of organized crime with paramilitary movements, radicalism and rogue states are some of the topics with which we are commonly presented. Entirely unpredictable in nature, these trends have the capacity to cause even more damage, marked by new space and cyber weapons. Perhaps we will move from open partnerships, shared defense solutions and industrial integration to a more suspicious environment, where countries will develop individual defense responses, only using partnerships that supplement their ability to succeed. New technologies, communications formats, relationships, economic flows, environmental concerns and geopolitical trends will have significant consequences in our lives. And the repercussions are uncertain. In this environment, the defense sector will face new threats, such as the even more intensive use of cyber and space technology, autonomous applications, and artificial intelligence to attack, threaten, influence, or defend countries, companies and citizens. The prospect of cyber conflicts is worrisome. Software overtakes hardware, and the product is an internet of solutions that we can't truly understand. This is the new world that the defense industry must understand and ultimately act upon. Industry must seek solutions far beyond the conventional, sometimes even distant from our natural comfort zones, either by doctrine or generational conflict. This challenge also sparks opportunity, as it enables countries to form programs to protect their critical infrastructure and sensitive data by encouraging unique solutions, using complementary and controlled partnerships when necessary. This can foster the digital economy and technology of the future. To make it happen, however, a fundamental change to the definition of “defense” is necessary. If we consider the defense realm to be exclusive to the military, these advancements will be limited. The most obvious vector of the defense environment is certainly the military, but the requirements of the post-pandemic world are larger. The public and private sectors must be coordinated. The integrated efforts of various companies are necessary for supporting the implementation of a cyber protection program. Universities and research centers will also be necessary for fostering knowledge and developing critical thinking throughout countries. Nations usually define their defense investment priorities based on military policies and geopolitical strategies — considering eventual threats or interests. They should defend their convictions, territory and population. The defense industry must interact with the world in general, either regionally or globally. Even if we imagine a less globalized world following the pandemic, defense challenges are increasingly global. Outlining regional defense visions and coordinating scientific and technological efforts — involving public and private agents — around the same strategic purpose can ensure the sustainability of our defense industry. Jackson Schneider is the president and CEO of Embraer's Defense and Security division. This essay was first published for Forte de Copacabana 2020. https://www.defensenews.com/outlook/2021/01/11/embraer-defense-executive-will-protectionism-define-the-post-pandemic-defense-industry

  • Israel Establishes Center to Develop Non-GPS Navigation Tech

    15 mars 2021 | International, C4ISR

    Israel Establishes Center to Develop Non-GPS Navigation Tech

    The Israel Ministry of Defense (IMOD)'s Directorate of Defense Research and Development (DDR&D) and Israel Aerospace Industries (IAI) inaugurated a new center established to develop non-GPS accurate navigation technology. The new navigation technology center has been set up at TAMAM, IAI's electro-optics and navigation house in IAI's Systems Missiles & Space Group. In the new center, IAI will develop and manufacture inertial sensors. These sensors will enable the production of next-generation navigation systems, and will significantly increase their performance and capabilities. The innovative navigation sensor technology is founded on unique Israeli innovation based on years of research and collaboration between DDR&D and IAI. These sensors will be implemented in various operational systems within Israel's defense systems, thus enabling Israel to maintain its qualitative advantage.

  • Germany’s Hensoldt hires Thales executive to lead company

    8 janvier 2024 | International, Aérospatial

    Germany’s Hensoldt hires Thales executive to lead company

    Oliver Dörre will become CEO at Hensoldt and replace outgoing boss Thomas Müller on April 1.

Toutes les nouvelles