Many people browse the internet at work to research topics, complete transactions, use social media, and more. To enhance the website experience, programmers add features, such as videos, slideshow animations, sign-up forms, and search boxes. Adding a feature to a website reduces the visitor’s browsing security by creating a security hole that a hacker can exploit. These cybercriminals focus on identifying vulnerabilities in popular features used by websites and browsers. Once hackers find vulnerabilities, they can steal your information, destroy your data, take over your computer, and track your online activities. These attacks can result in slowed workflows, lost work time, increased risk of identity theft, and damage to the business’s reputation.
What are the most common security risks when browsing the internet?
- Running the Java software platform: Java is a programming language that enables developers to create applications that run on almost any operating system, including Microsoft Windows, Apple macOS, and Linux. This software operates with your browser and enterprise programs such as Citrix GoTo Meeting, which require its use. However, hackers target this platform heavily because many users install Java and do not apply updates regularly. Make sure to have the most recent version of Java installed on your computer. Also, only use your browser’s Java plugin if you are using a trusted program. Otherwise, leave the plugin off.
- Enabling JavaScript for any site: JavaScript is a scripting language that enables interactive elements on a website, such as rollover buttons and dropdown menus. JavaScript is DIFFERENT from Java; they are two distinct programming languages. Even though developers regularly update the JavaScript platform, you should use it with caution, as it is also a popular target for attacks. Therefore, in your browser, set the JavaScript plugin to allow it only for trusted sites.
- Phony security alert pop-ups: You have seen a window that claims your computer has a virus and prompts you to download removal software. This so-called remedy will install malware on your computer. This scareware can slow your computer, steal your data, redirect you to a malicious site, and even block your visits to anti-virus provider websites. Make sure to install anti-virus software and stay current with the software updates. Also, ensure your browser is set to block pop-up windows; Firefox has this setting on by default.
- Not clearing your browser cookies: Cookies allow websites to store data on your computer for specific sites, such as login credentials, user preferences, and credit card numbers, so you get a faster, more personalized user experience. However, cookies store this personal information in a single file on your hard drive. If your employee has their laptop stolen or login session hijacked, the criminal can search through your temporary internet files and steal this data. Make sure to only share your confidential information with a known, trusted website over an encrypted, HTTPS connection. Also, set your browser to delete cookies at the end of a session. Furthermore, block third-party cookies; advertisers may use these cookies for malicious activities. Finally, we do not recommend using autocomplete for your personal information.
- Overloading on add-ons: Add-ons, such as gTranslate, Pocket, and Hootsuite, add extra functionality to your browsing session by allowing you to translate text, save articles for offline reading, and share content on your social media sites. Add-ons increase the surface area of security risk to your browsing experience. Limit the number of add-ons you install, and ensure they are from trusted sources. Also, set up your browser to prevent websites from installing add-ons without permission.
How can you reduce security risks in web browsers?
As technology changes, developers will introduce new browser and website user experience features, thus presenting new opportunities for cybercriminals to exploit their victims. A proactive network and computer security plan can help your business manage these risks by including the following:
- Use a next-generation firewall: A firewall’s basic task is to regulate the flow of traffic between computer networks of different trust levels. SonicWall will scan your business’s network use and block your employees from accessing potentially risky websites.
- Deploy anti-virus/anti-malware protection: This software will scan your computer regularly and stop the installation of viruses and malware. As new threats arise, the software will provide updates.
- Keep Windows up to date: Microsoft regularly releases service packs and patches to protect against malicious attacks. A managed services provider can monitor your workplace’s network and deploy these updates as they become available.
SwiftTech Solutions can help your business manage the security risks involved with employee internet browsing. Protect your business now by contacting SwiftTech Solutions for a review of your network security. You can call 877-794-3811 or email info@swifttechsolutions.com for a free consultation.
SOURCES
Kim Komando. Java: How to fix your biggest Internet security risk. (2013, January 31). Retrieved from: https://www.usatoday.com/story/tech/columnist/komando/2013/01/31/komando-java-security-alert/1871047/
Macavinta, C. Web Browsers and Computer Security Risks. Retrieved from: http://us.norton.com/yoursecurityresource/detail.jsp?aid=web_browser_security
Dormann, W. & Rafail, J. Securing Your Web Browser. (2008, February 14). Retrieved from: http://www.cert.org/tech_tips/securing_browser/
Lord, N. Browser Security Settings for Chrome, Firefox and Internet Explorer: Cybersecurity 101. (2013, March 22). Retrieved from: http://www.veracode.com/blog/2013/03/browser-security-settings-for-chrome-firefox-and-internet-explorer/
How-To Geek. HTG Explains: Should You Disable JavaScript? Retrieved from: http://www.howtogeek.com/138865/htg-explains-should-you-disable-javascript/
Finkle, J. US warns on Java software as security concerns escalate. (2013, January 11). Retrieved from: http://www.nbcnews.com/technology/us-warns-java-software-security-concerns-escalate-1B7938755
Microsoft. Watch out for fake virus alerts. Retrieved from: http://www.microsoft.com/security/pc-security/antivirus-rogue.aspx
McCormack, C. & Wisniewski, C. 5 Tips to Reduce Risk From Modern Web Threats. Retrieved from: http://www.sophos.com/en-us/security-news-trends/whitepapers/five-tips-to-reduce-risk-from-modern-web-threats
Fisher, T. Windows Update. Retrieved from: http://pcsupport.about.com/od/keepingupwithupdates/p/windows-update.htm