For more than two hours on Thursday, June 6, a large chunk of European mobile traffic was rerouted through the infrastructure of China Telecom, China’s third-largest telco and internet service provider (ISP). … …But if any other ISP would have caused this incident, it would have likely been ignored. Alas, it was China Telecom, and there’s a backstory.
Do you think we should be concerned by this?
Sixty eight percent of people believe they’re doing all they can to protect themselves against cyberattacks. …Perhaps surprisingly, it’s the older generations which has more confidence about how they’re protecting themselves online, with three quarters of those over 45 confident that they’re doing all they can to protect against data loss. …the higher confidence among older web users could be based on a naivety about the malicious threats that are out there on the internet, while younger users are aware of cybersecurity issues – but still aren’t addressing them.
How confident are you that your security is sufficient?
The most expensive offering on the market is provider information which can be used to forge a medical background, an alarming prospect given the harm which could be done when someone who hasn’t qualified poses as a medical professional. … The cybersecurity firm also found a vast array of forgeries available and for sale. For between $10 and $120 per record, you can buy fake prescriptions, labels, sales receipts, and stolen healthcare cards.
Has your healthcare info been stolen? What was the result?
I’d advise the following ground rules to best prepare for doing battle against an unseen and dangerous foe. Purchase a second smartphone as your secure communication device. If you’re on a budget, buy an older, used model from a reputable source. … Use your main smartphone for all of life’s normal, unsecured stuff like social media, email, online shopping, and casual text messages; ONLY use your second smartphone for secure communication — nothing else. Ensure your second device an iOS device.
Medium.com click the link to read the rest of the story. Our FREE Tools can help!
Do you carry two phones?
If you just want your passwords and banking information to stay secure, then a VPN is already obsolete. HTTPS keeps your passwords and other information inaccessible for hackers by utilizing strong encryption, no VPN required. However, if you want privacy, you’ll need a VPN.
Medium.com click the link to read the rest of the story. Our FREE Tools can help!
Do you use a VPN?
In the competition to lead the emerging technology race and the futuristic warfare battleground, artificial intelligence (AI) is rapidly becoming the center of the global power play.
Forbes.com click the link to read the rest of the story. Our FREE Tools can help!
What should we do?
Postings for cybersecurity had grown more than three times faster than other information technology (IT) positions and roughly 12 times faster than all other jobs. … There’s good reason behind the growth: Cybercrime caused an estimated $3 trillion in damages in 2015, according to research firm Cybersecurity Ventures. The company expects that figure to double to $6 trillion by 2021.
Medium.com click the link to read the rest of the story. Our FREE Tools can help!
Are you having problems finding security help?
Academics have discovered a new class of vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU. The leading attack in this new vulnerability class is a security flaw named Zombieload… academics say that all Intel CPUs released since 2011 are most likely vulnerable. Processors for desktops, laptops, and (cloud) servers are all impacted…
ZDNet.com click the link to read the rest of the story. Our FREE Tools can help!
Do you still use Intel chips?
Join the conversation on our Facebook Page!
A collective of Russian and English-speaking hackers are actively marketing the spoils of data breaches at three US-based antivirus software vendors. The collective, calling itself “Fxmsp,” is selling both source code and network access to the companies for $300,000 and is providing samples that show strong evidence of the validity of its claims. …
How much trust do you have in your Antivirus program to protect you?
Chances are high that your iPhone or iPad is an absolute treasure trove of personal information that you don’t want falling into the hands of others. And while iOS does a great job of keeping data safe, it’s possible to make the device a lot more secure.
Here are settings you should check (and change) and tweaks you should make to harden the security and lock down your device.
Have you hardened your iPhone from threats?
When this attack was detected by Microsoft, it’s likely a large chunk of the world’s 500 million WinRAR users hadn’t updated… Israeli security firm Check Point revealed that a malicious ACE file could place malware anywhere on a Windows PC after being extracted by WinRAR. The social engineering used in the campaign was crafted to ensure full remote compromise of a machine…
Do you use Winrar?
Three-quarters of incidents are still coming from within the business and its extended enterprise, far greater than the threat from external hackers. Businesses need to shift the focus inwards. …
Forbes.com click the link to read the rest of the story.
Have you been training your employees in cyber-security?
Distributed Denial of Service (DDoS) attacks are increasing in size and frequency, as multi-vector exploits become more of the norm in hacker’s efforts to distract and confuse security teams, while damaging their businesses, according to a Wednesday report from Neustar.
TechRepublic.com click the link to read the rest of the story. Our FREE Tools can help!
Have you noticed the increase of attacks on your operation?
The average ransom demand by hacker to release files encrypted by their ransomware attack has almost doubled in 2019. … The sharp increase in ransom payments is linked to the emergence of more expensive and more hands-on forms of ransomware… They’ll exploit vulnerabilities in remote desktop protocols or abuse stolen credentials to gain access to systems, moving around networks and laying the groundwork for their ransomware to encrypt as many PCs as possible for the maximum impact.
ZDnet.com click the link to read the rest of the story. Our FREE Tools can help!
Has your company paid a ransom?
New report demonstrates how quickly hackers see and begin attacks — and the dangers of default login credentials.
It only takes a few seconds for cyber criminals try to hack into newly connected cloud devices and servers!
ZDnet reported that
Researchers at security company Sophos set up honeypots in ten of the most popular AWS data centre locations around the world … and connected them to the internet with common configuration errors, such as using default credentials or insecure passwords).
It took just 52 seconds for hackers to begin attacking the first server and 20 minutes to start on the California server.
The servers were all on Amazon Web Services.
This is a clear demonstration that no-one is able to fly under the radar whilst online. The attackers are using scripts not to focus on any one individual, but to probe the entire internet address space to look for the low-hanging fruit,” said Boddy.
This scripted approach of attempting to login to your online device means that these attackers can attempt to login to a huge number of online devices in no time at all,” he added.
This illustrates why businesses must have security in place prior to it being given internet access, as well as why your business needs as many layers of security as possible.
References:
ZDnet
Ingenious.News click the link to read the rest of the story. Our FREE Tools can help!
How safe are your servers?
With popular sporting events like March Madness, it’s easy for attackers to prey on human emotions with excitement running high and money on the line. With so many employees participating in office pools and brackets, it’s critical to avoid getting phished through fake sporting-themed websites, contests and offers around the games, or malicious browser extensions that claim to keep track of scores and stats.
SecurityBoulevard.com click the link to read the rest of the story. Our FREE Tools can help!
Has your company been hit with this attack?
The findings in the Identity Theft Resource Center (ITRC)’s “2018 End-of-Year Data Breach Report” serve as a stark reminder of why companies should take a layered approach to security.
SecurityIntelligence.com click the link to read the rest of the story.
How many layers of security do you have?
The short answer is that a VPN is a great way to increase your privacy. The only problem is that you are still ultimately putting your trust in the VPN provider that they are not logging your browsing, that they won’t sell your data…
Thetoolsweneed.com click the link to read the rest of the story.
How concerned are you about privacy?
We are building our future on a creaking digital foundation. It’s time for that to change. Cybersecurity is in a terrible state, possibly the worst it’s ever been. Literally not a day goes by without another report of a security breach or a data spill or a hack spilling corporate secrets.
This to me is the way to turn the tide. First, we need to value our own personal data more. …
ZDnet.com click the link to read the rest of the story.
What do you think we should do?
Join the conversation on our Facebook Page!
Relying on your cloud service provider to provide fault-tolerant data storage does not account for the potential of data loss through user error, malicious destruction of data, or other incidents that can result in the loss of mission-critical business data. …
TechRepublic.com click the link to read the rest of the story.
Do you backup your cloud storage?
Some 62% of professionals said they believe the largest insider security threat comes from well-meaning but negligent end users…
More than half (53%) of respondents said they felt the employees who were most likely to be a threat were those who have left or were planning to leave the company, or contractors whose contract had ended…
Three-fourths (75%) of respondents said they believe the biggest insider security risks lie in cloud applications, including popular file storage and email solutions like Google Drive and Dropbox.
TechRepublic.com click the link to read the rest of the story.
What systems do you have in place to deal with internal sabotage?
Criminal “products” from the underworld marketplace are part of a sophisticated and highly profitable global industry.. there’s a thriving underground economy online, a place where tools and techniques are advertised and sold — even given away — and where stolen data is laundered to facilitate online crime. What might surprise you is how many of these underground economies there are and how well-established they have become.
This is a sophisticated and highly profitable global industry. In 2016, ransomware alone generated more than $1 billion in profit for criminals. The FBI is now calling “business email compromise,” where scammers intercept suppliers and payment transfers, the $5 billion scam.
Medium.com click the link to read the rest of the story.
Have you been a victim of online criminals?
A hacker who has previously put up for sale over 840 million user records in the past month, has returned with a fourth round of hacked data that he’s selling on a dark web marketplace. … This time, the hacker has put up for sale the data of six companies, totaling 26.42 million user records, for which he’s asking 1.2431 bitcoin ($4,940).
ZDNet.com click the link to read the rest of the story.
How are you protecting your passwords?
The Security Token future has come… and it’s bigger than anyone thinks. … The thing that gives me the most confidence that Security Tokens are the next big thing is the quality of people dedicating their lives to Crypto and Security Tokens... many see the Crypto Light, and know that the greatest thing about Crypto is how it’s going to make the world a better place for billions for people. This isn’t just a new financial instrument, it’s a movement, driven by a community of brilliant people, infused with a strong sense of purpose. That’s a combination poised to change the world.
Medium.com click the link to read the rest of the story.
Are you investing time and money into this, yet?Join the conversation on our Facebook Page!
John McAfee has a solution for those that hate passwords and know they need more secure ones. McAfee’s solution? It’s called Everykey and it promises to eliminate the need of passwords on your computer, websites but also your car, front-door, etc. Everykey was launched in 2014 and it received mixed reviews at the time. But now 5 years later they have released a new version of the firmware and Ingenious Geeks have begun to test it here for you. So far, it is impressive! We have hit a few bumps in the road but it can do some amazing things.
Have you tried the updated version of the Everykey? If so, please let us know your experience. Ours has been very positive, thus far. Check back, we will be releasing a full review.
Everykey.com click the link to read the rest of the story.
Do you have a unique password for all of your internet accounts?
Almost half of all organisations have fallen victim to phishing attacks in the last two years, with larger businesses the most likely to been compromised, despite also being most likely to conduct cyber security training for staff.
ZDNet.com click the link to read the rest of the story.
How are you dealing with phishing attacks in your business?
It’s important to learn a bit about how malicious hackers gain access to your credentials.
Three of the most common methods include:
- Man in the Middle (or MITM) attacks
- Using key logger software.
- Employing old-fashioned social engineering.
MITM attacks, as the name suggests, a third party getting between you and your desired target without your knowledge.
DatadrivenInvestor.com click the link to read the rest of the story.
How do you protect yourself from these attacks?Join the conversation on our Facebook Page!
Adobe has announced plans to discontinue its Shockwave multimedia player for Windows next month. Uninstall it ASAP!
Techspot.com click the link to read the rest of the story.
Are you uninstalling dead software?Join the conversation on our Facebook Page!
Google has issued an urgent warning for Chrome users to update their browser… a security flaw is being actively exploited.
The flaw in question is referred to as a “zero-day exploit.”
Infopackets.com click the link to read the rest of the story.
Do you update your software immediately when updates are released?Join the conversation on our Facebook Page!
Most smartphones, laptops, and tablets automatically search and connect to WiFi networks. They usually prefer a network with a previously established connection. If you have ever logged on to the T-Mobile network on the train, for example, your device will search for a T-Mobile network in the area. … My phone automatically connects itself to one of these networks, which [can] belong to [a hackers] device. [Hackers] can also broadcast a fictitious network name, making users believe they are actually connecting to the network of the place they’re visiting…
Everything, with very few exceptions, can be cracked. The idea that public WiFi networks are not secure is not exactly news
Medium.com click the link to read the rest of the story.
Do you still use public wifi?Join the conversation on our Facebook Page!
