Google Issues Second Update for Chrome in two Days. Proactive Approach May Help Fight Cyber Threats
Threats in the cyberspace require proactive and coordinated effort from all stakeholders such as developers, businesses and Internet users.
(prHWY.com) March 18, 2011 - Albuquerque, NM -- Recently, Google updated Chrome stable and beta channels to 10.0.648.151 for Windows, Mac, Chrome and Linux operating systems. The latest update to 10.0.648.151 blacklists some HTTP certificates. The latest update comes just two days after the previous update to 10.0.648.134, which patched a recently identified vulnerability in Adobe flash player. The vulnerability allows attackers to send a Microsoft Excel file embedded with .swf file as an e-mail attachment. Adobe is set to update the flash player next week. Google has been quick to release updated versions of Chrome after patching security vulnerabilities. Last week, the developer moved fast to patch a security vulnerability in WebKit exploited by security researchers at Pwn2Own Contest.
Threats in the cyberspace require proactive and coordinated effort from all stakeholders such as developers, businesses and Internet users. Proactive updates by software developers are crucial to reduce vibrant exploitation of vulnerabilities by cybercriminals. Attackers always exploit the time lag between revelation of a security flaw, patch release by the concerned developers and subsequent update by users. The challenges in the IT environment makes it necessary for security professionals to keep them updated on the latest threats, modus operandi of attackers and attack prevention tools through webinars, online IT degree
and e-learning programs.
Attackers also try to exploit the time lag between identification of a vulnerability and security update by offering fake updates to the customers. Recently, Internet security firm Sophos warned users against fake updates of Adobe player through e-mails. The e-mails purportedly appear to come from Adobe and contain links, which redirect to a fake site. The sites offer updates on payment along with free software to lure unwary Internet users. Cyber security education through online IT courses
, video tutorials and advertisements may help in creating awareness among users. The scams are designed to extract confidential information from users and install malware in their computer systems. Users must check and download updates by directly visiting the legitimate site. They must avoid responding to e-mails coming from unknown sources and resist from clicking on suspicious links and downloading suspicious attachments.
Businesses suffer considerable losses due to cybercrime. Hiring professionals qualified in IT degree programs and security certifications may facilitate organizations in evaluating security threats, identifying security flaws and timely application of appropriate security patches. They must also strive to create IT security conscious culture in organizations by creating security awareness among employees through huddle meetings and training sessions.
EC-Council University is based in Albuquerque, New Mexico and offers Master of Security Science (MSS) degree to students from various backgrounds such as graduates, IT Professionals, and military students amongst several others. The MSS is offered as a 100% online degree program and allows EC-Council University to reach students from not only the United States, but from all around the world.
EC-Council is a member-based organization that certifies individuals in cybersecurity and e-commerce skills. It is the owner and developer of 16 security certifications, including Certified Ethical Hacker (CEH), Computer Hacking Forensics Investigator (CHFI) and EC-Council Certified Security Analyst (ECSA)/License Penetration Tester (LPT). Its certificate programs are offered in over 60 countries around the world.
EC-Council has trained over 80,000 individuals and certified more than 30,000 members, through more than 450 training partners globally. These certifications are recognized worldwide and have received endorsements from various government agencies including the U.S. federal government via the Montgomery GI Bill, Department of Defense via DoD 8570.01-M, National Security Agency (NSA) and the Committee on National Security Systems (CNSS). EC-Council also operates the global series of Hacker Halted security conferences.