Be careful of taking a bite out of that web cookie

Issue 2 2022 Information Security

According to research, more than one in five websites use persistent cookies that are stored on people’s devices to help remember information, settings, preferences and sign-on credentials that have previously been saved. And although cookies will potentially be phased out or replaced in the future, with almost every site today still asking whether the user wants to ‘accept all cookies’, Kaspersky highlights that there are certain cybersecurity considerations to keep in mind.

Cookies were designed to make websites more convenient for users. For instance, an online shopping site can remember a person’s preferred currency, or a social media site might save someone’s login details, so they do not have to continually enter their username and password.

However, cookies can also track peoples' activities. An example of this is harvesting user data to make suggestions based on them and of course, display targeted ads. Such cookies may belong not just to the owners of the site, but also to companies with which they have entered into partnership agreements. The latter are called third-party cookies and they are the reason many say cookies are just tracking tools.

Because cookies contain a wealth of private information, they are subject to regulation. Many countries throughout the world have implemented legislative and regulatory acts that require site owners to ask users for consent to the collection of data, i.e., the permission box when someone first visits a site.

“Even though the temptation is there to simply accept all cookies to close the annoying window, there are risks associated with that. It is always better to read the fine-print and to customise the cookie settings in terms of what information is saved about the user. If the website lets the user set up their own cookies, things like advertising preferences can be set as well as several others that can contain sensitive information about site visitors,” says Bethwel Opil, enterprise sales manager at Kaspersky in Africa.

But even before visiting a site, users can customise the cookie settings of their Internet browsers. Most of the popular browsers offer two ways to limit the impact of cookies on a user’s privacy – by completely erasing them from the device, or by blocking certain types of cookies, for example, third-party ones. Sure, the delete option may seem simpler and more reliable, but it is far from convenient.

Simply by taking a few minutes to tweak the browser cookie settings, a user will be able to significantly increase their privacy while avoiding unnecessary inconvenience when visiting sites. There are also options like the Private Browsing feature in Kaspersky Security Cloud that will warn about phishing and online scams while taking care of virus protection.

“Cookies are a necessity for our digital lives. That does not mean users simply need to accept everything thereby potentially compromising their privacy and opening themselves up to malware or identity theft. We must all become more aware of the risks inherent to cookies and the potential for abuse. However, tweaking browser settings or customising the cookie settings of each site when someone first visits them will go a long way to mitigating the risks,” concludes Opil.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Strategies for combating insider threats
Information Security Security Services & Risk Management
In Africa, insider threats pose an increasingly significant risk to businesses, driven by economic uncertainty, labour disputes, and rapid digital transformation. These threats can arise from various sources, including disgruntled employees and compromised third-party service providers

Read more...
Five tech trends shaping business in 2025
Information Security Infrastructure
From runaway IT costs to the urgent need for comprehensive AI strategies that drive sustainable business impact, executives must be prepared to navigate a complex and evolving technology environment to extract maximum value from their investments.

Read more...
Kaspersky’s predictions for 2025 APT landscape
Information Security
The 2025 advanced persistent threat (APT) includes the rise of hacktivist alliances, increased use of AI-powered tools by state-affiliated actors – often with embedded backdoor – more supply chain attacks on open-source projects.

Read more...
SecurityHQ certified B-BBEE Level 1: Delivering global services from a local entity
SecurityHQ Information Security
SecurityHQ, a global managed security services provider (MSSP) with an office in South Africa, has announced it can now offer local companies a complete managed cybersecurity service from a Level-1 B-BBEE accredited and 51% black-owned service provider.

Read more...
2024, the year of Fraud-as-a-Service
Information Security
A report from AU10TIX outlines how ‘the industry’s dark engine’ offers user-friendly fraud kits that enable amateurs to execute complex attacks against thousands of accounts in minutes.

Read more...
The future of endpoint security
Information Security
Endpoint security is a critical pillar of cybersecurity, especially for South African businesses, which are becoming prime targets for cybercriminals. Endpoint security involves safeguarding devices connected to a network from a range of cyberthreats.

Read more...
Not enough businesses take cybercrime seriously
Information Security
Interpol recently revealed that cybercrime, specifically ransomware incidents, cost the South African economy up to 1% of the country’s GDP, while the Council for Scientific and Industrial Research estimated the loss at R2,2 billion a year.

Read more...
Navigating today’s cloud security challenges
Information Security Infrastructure
While the cloud certainly enables enterprises to quickly adapt to today’s evolving demands, it also introduces unique challenges that security teams must recognise and manage. Vincent Hwang offers insights from the 2025 State of Cloud Security Report.

Read more...