InformationWeek highlights a new study showing that malware on USB sticks is wreaking havoc on information security. The new survey by the Ponemon Institute found:
In the past two years, 70% of businesses have traced the loss of sensitive or confidential information to USB flash memory sticks. While such losses can obviously occur when the devices get lost or stolen, 55% of those incidents are likely related to malware-infected devices that introduced malicious code onto corporate networks.
Most of the respondents do not have any form of endpoint security in place, or don’t enforce their own USB security policies. Cost may be an important factor as “75% of respondents said they wouldn’t pay a premium to ensure that USB drives are safe and secure.”
Setting aside the fact that this is short-sighted given the cost of a data breach, you don’t need to break the bank to secure your USB drives. The Kanguru Defender Basic features automatically enforced military-grade encryption, plus an onboard anti-virus scanner to prevent malicious code from entering your network. Best of all, it’s available at a mainstream price.
Data Security
DaveM at Advantage Computers Blog shows just how easy it is to set up a Kanguru Defender Elite secure memory stick. Steps include choosing an initial password and enabling the onboard antivirus or remote management options.
Residents of the UK can contact Advantage for more information on the Defender Elite and Defender V2 secure memory sticks.
Portable Storage
A recent article in Security Week outlined a dramatic increase in malware sent via e-mail. This after the takedown of the Rustock Botnet. Methods of spreading the malware included fake “parcel tracking information” mimicking those from UPS and DHL, PDF file attachments with script malware, explicit PowerPoint presentations and more.
The take away from this report is to maintain a regularly updated anti-virus on your computer, scan e-mail documents before opening them, and be wary of any suspicious attachments/e-mails.
If you work on computers that do not have anti-virus installed, you can carry a mobile anti-virus program on your Kanguru Defender Elite, Defender V2 or Defender Basic which allows you to scan any files you transfer between the unprotected computer and your flash drive. It’s a great added layer of security, protecting your mobile documents from becoming a carrier of malicious programs.
Malware, Portable Storage
A recent security study shows just how much time administrators spend removing malware from K-12 School computers. 21% of respondents are doing this task daily!
Research shows that much of today’s common malware is spread on USB memory sticks. That’s why Kanguru has added BitDefender antivirus protection into every Kanguru Defender Basic, V2 and Elite secure flash drive. We know that K-12 Schools have been hit with shrinking budgets in recent years, so we have a discount program specifically for Educational organizations. Contact us today to find out more. Email defender (at) kanguru.com.
Data Security
Out with the old, in with the new. As Kanguru continues to increase production of our flagship Defender Elite secure USB flash drive, we have phased out the previous generation Defender and Defender Pro models. Clearance inventory can now be purchased at discounted prices here.
The older products are great for organizations that are concerned about security, but might not need the stringent requirements of FIPS 140-2 certification. The Defender and Defender Pro use strong AES hardware encryption and do not require any software, drivers or administrator rights to use. Check our clearance page for daily updates.
Data Security, Portable Storage
Kanguru’s encrypted flash drives and remote management console have applications across a variety of industries. Kanguru has been involved with flash drive standardizations in organizations spanning government, healthcare, and financial industries to name a few.
One such partnership we are pleased to announce involves a top ten, prestigious Maryland Law Firm. Kanguru’s secure flash drives and remote management software were chosen to help keep their confidential data safe and secure and also help them meet regulations relating to data security and privacy. The security features built into the Kanguru Defender V2 help prevent data leaks and costly penalties for non-compliance with data breach regulations.
Kanguru’s high level of security features include: 256-bit AES Hardware Encryption, onboard anti-virus, and remote management with KRMC Cloud. These features, coupled with an attractive price point earned Kanguru a key spot within their overall security program.
Data Security
Defense Systems has a great explanation of the Stuxnet worm that is targeting industrial machines and may have been an attack against Iran’s nuclear facilities. Kevin Coleman writes that the “Stuxnet worm was highly sophisticated - perhaps the most sophisticated attack that is known to the public thus far, leading some in the field to proclaim the piece of code the best malware ever.”
A commenter on the article asks why critical machines would be connected to the public internet and made vulnerable to such attacks. Dark Reading points out that even if the machines are isolated, they can be breached using USB sticks:
PLCs and control systems had been considered relatively insulated from the outside world and attack because they aren’t typically Internet-connected. But Stuxnet drove home the worst-kept secret that these systems still are connected to Windows or other machines that can get infected — in this case, by a USB stick — and therefore aren’t as protected as they had seemed.
An easy solution would be to use Endpoint Security or Group Policy to block USB sticks unless they have built-in anti-virus protection like the Kanguru Defender Elite.
Malware
Dark Reading asks “Could USB Flash Drives Be Your Enterprise’s Weakest Link?” The question was prompted by new details about a US Military security breach caused by USB malware. The virus was brought in on a USB flash drive and then spread throughout the network.
A large part of the fight to keep organizations secure against such mobile devices is the education of employees. Because USB flash drives can aid productivity, getting employees to abandon them is difficult, as the Pentagon discovered. Instead, using technologies such as encryption, role-based authentication and data-leakage protection can help reduce the threat posed by flash drives.
Because of this incident, and similar data breaches involving USB drives, many enterprises are looking for devices that integrate encryption and malware defenses. The security features cannot be optional because employees will opt not to use them. To that end, Kanguru has integrated 256-AES hardware encryption and real-time virus and malware scanning directly into the Kanguru Defender family of Secure USB flash drives. Always-on security ensures that the USB flash drive is not the weakest link in your enterprise.
Data Security, Malware, Portable Storage
Kanguru is pleased to partner with Blue Cube Security Ltd to deliver best-of-breed Secure USB Flash Drives to clients in the UK. Gary Haycock-West, Chief Executive Officer Blue Cube comments:
We are dedicated to finding flexible and robust solutions for our customers. Kanguru offers a cost effective and scalable option to the market; further differentiated by the scope to customise and design solutions around the security needs of individual organisations. Through their continued expansion and investment in new technology solutions, they are ideally positioned to meet the dynamic needs of our customers. We are delighted to add Kanguru to our extensive list of expert partners.
Blue Cube’s head office is based in Forest Row, East Sussex. They can be reached on 0845 094 3070.
Data Security, Portable Storage
11 Things You Can Do With Kanguru Defender Elite Encrypted Flash Drives
- Communicate security policy changes and updates directly to the drive and enforce changes as necessary via remote management.
- Audit drive usage to ensure policy updates.
- Create lists (whitelist/blacklist) of approved IP ranges so that drives are only used in trusted locations.
- Track device usage and location via IP addresses.
- Set a master password for administrator access.
- Immunize any PC or Laptop with Defender Elite’s onboard Anti-Virus.
- Disable and/or delete devices that have been lost or stolen.
- Meet regulatory requirements through the use of a verifiable security audit trail.
- Track device activity on each workstation/computer using Kanguru USB Device Control.
- Revoke drive access to former employees still in possession of their drives. (Particularly useful if their drive contains proprietary company info.)
- Sleep well knowing that 100% of your data is secure!
Data Security