According to Gartner, through 2015, more than 75 percent of mobile apps will fail basic security tests. Once they are in, the bad guys can access other devices on the network through a Wi-Fi connection.
Another threat is phishing attacks, in which the cyber criminal sends an infected email or a text message to a smartphone or tablet. The message appears as if it is from a credible source, but when an employee opens it, the device becomes infected. When the user connects the device to a company computer, the virus is transferred, and the hacker can enter the larger network.
One of the simplest ways to reduce risks posed by smartphones and tablets is to prohibit employees from “rooting” or “jailbreaking,” which will limit downloading insecure, unverified third-party apps.
Creating passcodes on the mobile device can help protect the company’s information and is a security no-brainer. Encrypting data is also recommended, which makes it very difficult to access information stored on the device if it is lost or stolen.
FireEye and Zimperium are apps that can alert IT administrators of possible breach activity, which is useful in quickly shutting down a compromised device and thus, minimizing damage.