Sophos Makes Security Fun

Sophos, a world leader in IT security and data protection, often thinks ‘outside the box’ when it comes to keeping businesses and users well-informed on the latest network threats. In April of this year, we wrote about their “Threatsaurus”, an A-Z guide that defines and explains the various data and security threats on the web today in a simple, fun, easy-to-understand language. More recently, while browsing through their quarterly e-newsletter, ‘The Sophos Insider’, we came across another one of their innovative creations, Beat the Threat.

Beat the Threat is a fun (and somewhat addicting) online game that demonstrates how today’s web-based threats are constantly evolving and transmitting rapidly from user to user. The game ultimately shows that the rate at which current and emerging online threats spread can make it difficult for a business’ personnel to keep up with the rapid pace to fully protect their networks. It often takes the right combination of software solutions and network management to fully support and secure a network properly.

Using our Managed Services platform 3DProActive™ in conjunction with Sophos’ business-grade security software, 3D Corporation provides this ideal combination of network management and security solutions that match and often exceed the rapid pace at which network threats spread and evolve. In addition to providing businesses with reliable network management and support, 3D offers Sophos’ wide range of endpoint, encryption, email, web, and NAC security solutions that are easy to deploy, manage and use. As a Managed Services Provider and a Sophos Silver Partner, we can provide your business with the appropriate tools to keep your network safe and secure.

For more information on how 3D Corporation and Sophos can provide your company’s network with top-notch security, please visit http://www.3dcorp.us/, email us at info@3dcorp.us, or call us at (360) 671-4906. Sophos’ security software can also be purchased on our website at https://www.3dcorp.us/buysophos.html.

References: The Sophos Insider: Quarterly eNewsletter July 2010, http://www.sophos.com/

Microsoft Issues 14 Security Bulletins to Fix over 30 Vulnerabilities

Microsoft has released 14 new security bulletins describing over 30 vulnerabilities ranging from important to critical in their severity. The vulnerabilities affect all current versions of Windows; Microsoft Office for Windows and Mac, specifically Word and Excel; and Internet Explorer. There are multiple ways attackers can exploit these vulnerabilities, and the impact of exploitation can allow elevation of privilege or remote code execution, which ultimately could enable the attacker to gain complete control of the user’s computer.

3D Corporation will automatically test and deploy security patches on the networks of our 3DProActive™ Managed and Partner clients to eliminate the risks posed by these vulnerabilities. Other Microsoft Office, Windows and Internet Explorer users should download and install the appropriate patches immediately to avoid possible exploitation of their computer and/or computer networks. More information regarding these vulnerabilities and their impact can be found at Microsoft’s Security Bulletin Summary for August 2010.

3D provides up-to-date security solutions that can protect businesses from threats like these automatically. If you would like additional information on how we can make your network worry-free, please visit our website at http://www.3dcorp.us/, email us at info@3dcorp.us, or call our office at (360) 671-4906.

References: WatchGuard’s LiveSecurity Service Updates Released August 10-11, 2010; Microsoft’s Security Bulletin Summary for August 2010.

3D Corp is hiring: Network Engineer and Support Technician

We are seeking a new member for our network engineering team!  Please follow the link below for details and to apply today!

Network Engineer and Support Technician position

Your Old Copy Machine: Not as Innocent as it Seems

Did you know that nearly every digital copier built since 2002 contains a hard drive, one that is capable of storing an image of every document scanned, copied, faxed or emailed by that machine? According to a survey commissioned by Sharp, a provider of electronic products and solutions, nearly 60% of Americans don’t know that copiers store images on a hard drive. In April of this year, a CBS Investigative Report made this little known fact national news and showcased how easy it is to retrieve highly personal and sensitive data from a used copier.

During the CBS investigation, the reporter purchased four used copiers from a warehouse in New Jersey, unaware of the previous owners or locations from which the copiers came. Tens of thousands of documents were downloaded from these machines utilizing a forensic software program available for free on the Internet. The first two copiers they scanned using this software were from the sex crimes and narcotic units of the Buffalo Police Department. The results from a scan on these hard drives turned up domestic violence complaints, a list of wanted sex offenders, and a list of targets in a major drug raid. The third machine was from a New York construction company that showed scans of design plans and 95 pages of pay stubs with names, addresses and social security numbers. The fourth, and by far the most disturbing, was a copier from Affinity Health Plan that contained 300 pages of individual medical records, a potentially serious breach of federal privacy law.

These findings are troubling and, unfortunately, just a glimpse of what can be found on your business’ copier if the information is not properly secured and/or erased. In fact, many copiers also contain information about the business’ network itself including user email addresses, outgoing fax numbers, contact names, the IP address of the company’s email server and, in some cases, a secure logon password to the network. This, coupled with the private and personal data that can be retrieved from a copier, can potentially ruin a business and cause serious social and legal ramifications if the information ‘falls’ into the wrong hands.

Many manufacturers, including Sharp and Xerox, offer security and encryption packages on their products. For example, Sharp offers a product that automatically erases an image from the hard drive that costs $500, a small price to pay compared to the potential social and legal costs that could ensue with a breach of data. The following tips include additional ways a business can mitigate the potential risks of their copier data being compromised.

• If leasing the machine, discuss the end of life security with your service provider to ensure that the copy machine hard drives will be completely erased when the machine is removed.
• Before disposing of or trading-in old equipment, check the manufacturer’s product documentation to best understand the steps to wipe the machine if required.
• Contact a local company that specializes in the removal of data from copier hard drives before it is disposed of and/or sold.

If you would like additional information on copier security risks, please check with your vendor and/or manufacturer’s website. For information on how 3D can provide your business with network security solutions, please visit our website at http://www.3dcorp.us/, call (360) 671-4906, or email info@3dcorp.us.

References: http://www.cbsnews.com/stories/2010/04/19/eveningnews/main6412439.shtml, http://bizsecurity.about.com/od/informationsecurity/a/copier_hard_drive.htm, http://copiersecurity.com/overview/did-you-know.html

Network Engineer Jeff deLucia achieves Microsoft Certified Systems Administrator Certification (MCSA)

3D Corporation is pleased to announce that Jeff deLucia, Level 2 Help Desk Network Engineer, has earned Microsoft Certified Systems Administrator (MCSA) certification, further enhancing the company’s range of professional certifications.

MCSA certification is awarded to network engineers that prove their expertise in effectively managing and troubleshooting network environments using Windows Server 2003, a server operating system produced by Microsoft for businesses of all types and sizes. The MCSA certification validates deLucia’s ability to provide efficient and effective technical support to 3D clients using this operating system on their networks.

MCSA certification adds to deLucia’s array of existing certifications including Microsoft Certified Professional (MCP), CompTIA A+, Network+ and Security+, WatchGuard Certified System Professional, and many others. Other members of the 3D engineering team also hold certifications in Microsoft, Cisco, WatchGuard and other technologies that recognize their expertise in using these products to provide businesses with reliable network management and support.

3D is happy to have Jeff as a member of our team and is always looking for talented individuals like him to join. To find out more about how to become part of the 3D team, visit our website at http://www.3dcorp.us/contactUs.html.

CRITICAL: Microsoft Releases Out-of-Cycle Security Update to Fix Shortcut Icon Vulnerability

Microsoft just released an out-of-cycle security update to fix a critical vulnerability that affects all current versions of Windows. There are various ways an attacker can exploit this vulnerability, including enticing the user into downloading a specially-crafted shortcut icon and browsing the directory containing it. Recently, a worm spreading in the wild called Stuxnet leverages this shortcut vulnerability and helps it spread within local networks once it has infected a user’s machine. Once exploited, the vulnerability could ultimately enable the attacker to gain complete control of the user’s computer.

3D Corporation will automatically test and deploy the security patch on the networks of our 3DProActive™ Managed and Partner clients to eliminate the risks imposed by this vulnerability. Other Windows users should download and install the appropriate patch immediately to avoid possible exploitation of their computer and/or computer networks. More information regarding this vulnerability and its impact can be found at Microsoft Security Bulletin MS10-046 – Critical.

3D provides businesses with up-to-date security solutions that keep networks safe and secure. If you would like additional information on how we can make your network worry-free, please visit our website at http://www.3dcorp.us/, email us at info@3dcorp.us, or call our office at (360) 671-4906.

References: WatchGuard’s LiveSecurity Service Update “Out-of-Cycle Update Fixes Shortcut Icon Vulnerability”; Microsoft Security Bulletin MS10-046 – Critical.