This is an example of how, just because an app is in the app store, that does not mean that the app is safe. 200 apps in the Google Play Store are infected. Milky Door has been downloaded millions of times hidden in infected apps.

Apple is not immune to this risk.

One of the best ways to protect against this is to set up a separate wireless network, one that is isolated from your office networks, for employees’ mobile devices to use.

That way, even when a device may be physically present in one of your offices, the device will still be isolated from your network.

The same goes for laptops that sometimes leave the office. Help protect your network by forcing them to connect to a network that is isolated from your office network, even when they are present. They can gain access in the same way they do when working remotely.

A simplified version of this is for you to force all mobile devices, be they BYOD devices or company issued devices, to connect to the guest network at your offices.

The goal is to keep the phones and tablets off your network, so that infected apps won’t have such easy access into your network’s resources.

Milky Door has infected many apps before it was even detected. How many apps in app stores are infected with other malware that has yet to be discovered? To help reduce your attack surface, mandate that users only install apps that are essential.

Please forward this to everyone you know who is an executive, or owner of a business that uses mobile devices, so that they can improve their security too. Remember, you can suffer harm from hackers, even when it is someone else’s network that gets hacked.

The post Attackers Are Using Mobile Devices as a Bridge into Your Network appeared first on Foster Institute.

A big problem is that security patches that protect against these kinds of breaches never reach users’ Android devices because of something known as Android fragmentation. When Google releases security patches, the patches are sent to device manufacturers, who are then responsible for releasing the patches for their different models. Some do not release the patches, or do so after a long delay.

Google is taking steps to help mitigate the problem, such as scanning phones and apps to look for Gooligan code and forcing resets of credentials to Google accounts. But so far that hasn’t been enough to protect those million users that have had their accounts hacked.

So, what can you do? Always stay up to date with the latest Android versions and patches. Choose a brand that has a track record for releasing patches every 30 days. Blackberry is one of those brands, but few people use those devices. If 30 days is too long to wait, consider using the Google Pixel line of Android phones since, because Google makes the devices, patches and upgrades should be available for download immediately upon release. Note: Brand names are mentioned to provide value to you. We do not receive any kind of compensation for mentioning brands. Another strategy is to install as few apps as possible on your device. Each app is a potential security issue and many people have installed apps that they realize are not essential, and some apps are rarely, if ever used.

Please forward this to anyone you know that uses Android devices and would like to be more secure.

The post 1 Million Android User Accounts Reported Hacked appeared first on Foster Institute.

Yesterday, someone told me their security was good since they only get infected by a few viruses each year.

Even a single infection means there is a possibility that their machines are already infected.

If one virus can get in, other undetectable viruses can too.

Unless security protections are very poor on a network or computer, visible virus infections are rare these days.

People who see virus infections need to act, including patching their Internet facing applications and enabling click-to-play. Those features already come with Windows and applications so there is nothing to buy or download. For more information, see foster institute dot come slash blog.

If you know someone whose computers on their network catch viruses, tell them the viruses are more like chest pain, not like the common cold. Infections are the sign of some greater damage that is about to, or already has, occurred.

The post Only One Virus is a Huge Problem appeared first on Foster Institute.

First of all: Don’t panic.

Apple is removing the infected apps from the App Store.

If you receive an email about XcodeGhost, even if it appears to be from Apple themselves, be wary. If there are any links in the email message, or if there are any attachments, do not click the links or open any attachments. You may be infected by attackers who are taking advantage of frightened users.

Online lists of infected apps includes a PDF Reader app, WinZip, and card scanner applications. More apps are being discovered as the investigations continue.

If you want to find more information, enter this search into Google: XcodeGhost site:apple.com

Finally, and most importantly, raise your awareness that all devices are susceptible to attacks. It doesn’t matter what manufacturer, what platform, what operating system, or whether it is a phone, tablet, laptop, or desktop. We are living in a different kind of world now. Some people on the planet, very brilliant people, have different ethics and morals than you do.

Keep using good security habits!

The post iPhone and iPad Hacking Alert appeared first on Foster Institute.