Showing posts with label Forensics. Show all posts
Your Chrome, Safari, And Opera Browsers Might Be Leaking Your Private Information
The “helpful” autofill feature of your web browser also poses a big risk to your online security. A security researcher has uncovered a simple exploit that uses form fields hidden from the user to steal the personal information. While Chrome, Opera, and Safari are affected by this issue, Firefox remains immune. The users are advised to disable the autofill settings in their web browsers.
We often praise the autofill features of our web browsers for saving us from all the troubles of typing the details like email address, passwords, address, phone numbers, etc. But, these features come along with some serious security risks too.
A web developer and hacker named Viljami Kuosmanen has found a flaw that’s affecting different browsers and plugins. According to his revelation, web browsers like Google Chrome, Apple Safari, and Opera, and plugins like LastPass can be exploited to leak sensitive personal information.
Browser autofill phishing in Chrome, Safari, and Opera
The phishing attack described by the hacker is very simple in application. When you fill your information in text boxes, autofill enters the profile-based information in form fields hidden from the user.
On GitHub, Kuosmanen has shared a live demo page to showcase the attack. You can access it here.
In Google Chrome browser, the attack works as follows:
Mozilla’s Firefox is immune to this problem as it is yet to implement a multi-box autofill system, so, it can’t be tricked into filling text boxes.
Interestingly, this attack is triggered when users enter at least one information in some online form. To avert such attacks, the users are advised to disable the autofill function in their web browser.
cyber forensics and information security
As new technological innovations continue to proliferate in our society, so do the opportunities for technology exploitation. Once a mere nuisance, hackers now threaten private citizens, businesses, and government agencies.
Government and law enforcement
agencies need skilled professionals who can join the fight against cyber crime,
cyber terrorism, identity theft, and the exploitation of minors. Companies and
other private sector organizations need skilled professionals with both
business acumen and technology skills for recognizing and mitigating
vulnerabilities.
The U.S. Bureau of Labor Statistics
(bls.gov) predicts there will be over 65,000 new jobs for "Information
Security Analysts, Web Developers, and Network Architects" by 2020.
The Cyber Forensics and Information
Security program combines the disciplines of technology, business, organizational
behaviour, and law. Students learn techniques used to detect, respond to,
and prevent network intrusions. They also master broader concepts such as the
responsible use of resources, the appropriate management of risks, and the
alignment of information technology with the organization.
Join the fast-paced world of cyber
security with a Cyber Forensics and Information Security major
Information is like the lifeblood for
organisations of all sizes, types and industry sectors. It needs to be managed
and protected, and when there is a breach or crime committed involving leaked
or stolen information, the perpetrators must be identified and prosecuted.
Benefit from our modern approach to
IT learning
Our teaching staff are forward-thinking
professionals who are passionate about IT and highly active in generating
policy and change within the industry.
You will also benefit from limited
class sizes and an open door policy designed to help you gain the support and
assistance you need through this intensive and comprehensive course.
Forge a career in big business,
government or law enforcement
As a cyber forensics specialist you
will find yourself at the cutting edge of the management, protection and
forensic investigation of information security threats - working in big
business or law enforcement.
Tag :
Forensics
