Your IT Support Experts

We partner with many types of businesses in the area, and strive to eliminate IT issues before they cause expensive downtime, so you can continue to drive your business forward. Our dedicated staff loves seeing our clients succeed. Your success is our success, and as you grow, we grow.

Home

About Us

IT Services

Knowledge Base

Blog

Contact Us

Support

01202 835880

Free Consultation

Interested in seeing what we can do for your business? Contact us to see how we can help you! Sign Up Today

Oh-Tech Blog

Is This Bug in Your System? Chances Are, It Was!

Is This Bug in Your System? Chances Are, It Was!

Cybersecurity is challenging enough… you don’t need issues coming from one of your key applications. However, since a bug was found in some of the most popular Internet browsers today—potentially risking billions of people’s data security—you could very well see these kinds of issues. Let’s go over this vulnerability, and what you can do to address it.

Examining the Recent Chromium Bug

Google’s open-source platform, Chromium, has been used as the foundation for many current Internet browsers. That’s why browsers like Opera, Edge, and of course Google Chrome all share a lot of the same code in their makeup. That’s also why the presence of an exploitable vulnerability within Chromium’s code is a very bad thing.

The vulnerability in question could allow hackers to bypass any website’s Content Security Policy, thereby enabling them to run malicious code and/or steal data.

The Content Security Policy (CSP)

The CSP is an Internet standard meant to eliminate the threat of some cyberattacks and is currently used on most websites. Basically, this standard enabled website admins to identify the domains that a browser like Chrome or Opera will recognize as legitimate and block any scripts that haven’t been preloaded into the policy’s parameters.

How Hackers Can Use It

To make use of the CSP vulnerability, a hacker needs access to a web server. While they could accomplish this through assorted means, a brute-force attack is the most common method of gaining this access. Basically, by trying vast numbers of login credentials in rapid succession, the hacker can overcome a website’s protections. Once they’re in, the hacker can make amendments so that the CSP is bypassed and the code they’re implementing will work. While this vulnerability does require a successful hack to take place, it can still be very effective thanks to many websites sporting questionable security standards.

How to Secure Your Browser Against This CSP Vulnerability

Unfortunately, what we have here is a prime example of how even the most trusted software isn’t infallible, and how long security vulnerabilities can fly under the radar. Despite 5 billion downloads as of 2019, it still took over a year to catch this issue.

Fortunately, the issue has since been amended, so users of…

  • Chrome
  • Edge
  • Opera
  • Vivaldi

… and any other Chromium-based browser will want to update them to the latest versions to ensure that the vulnerability is successfully patched.

Maintaining your software, especially your browser and other Internet-facing applications, is a requirement if you want to stay safe online. For help in ensuring that your business has this taken care of, you can rely on Oh-Tech. Give our IT professionals a call at 01202 835880.

How to Balance Employee Health with Business Produ...
How to Effectively Spread Out Your Wi-Fi
 

Comments

No comments made yet. Be the first to submit a comment
Guest
Already Registered? Login Here
Guest
Wednesday, September 30, 2020

Captcha Image

By accepting you will be accessing a service provided by a third-party external to https://oh-tech.co.uk/

We Provide Managed IT Support Services for Businesses In:

  • Bournemouth 
  • Poole
  • Christchurch
  • Ringwood
  • Salisbury
  • Dorchester
  • Southampton
  • Portsmouth

And all throughout the UK

News & Updates

Security is always a business priority, and with so many business needs now fulfilled digitally, it is critical that cybersecurity has a strong presence in organizations big and small. Nowadays, collaboration solutions have also had even greater importance in the workplace, making tools like email completely essential. Unfortunately, this gives cybercriminals an increased opportunity to use it as a means of attack.

Contact Us

Learn more about what Oh-Tech can do for your business.

Oh-Tech
30E Chalwyn Industrial Estate
Poole, BH12 4PE

Terms & Conditions