There is a very realistic spoofed phishing email making the rounds that looks so close the the real Microsoft alert email, as to be almost undetectable. They even spoof the legitimate sender address of “account-security-noreply@accountprotection.microsoft.com”. So even if you are looking for signs of chicanery, it will be difficult for most users to tell it is fake. See an example below.
Is your home Wi-Fi router a gateway to invasion by cyber-criminals? According to recent findings by Consumer Reports, it very well could be. They tested 29 popular home routers, and were only able to recommend 6 basic Wi-Fi routers, and 3 more expensive Wi-Fi mesh routers. Mesh routers allow you to install several Wi-Fi ...
The problem with smartphone apps is that they cannot be trusted. Sure that new game is fun, but what about all the ads? Did you know that ads can contain malicious links? And what about all the apps that include location in their permissions? Wouldn’t it be great if there was an alternative?
F-Droid is a platform for free ...
Continue Reading →One of the more difficult cybersecurity concepts to understand is Public Key Encryption and how public keys, private keys, symmetrical encryption and asymmetrical encryption all work together. This infographic I found on Facebook does and excellent job explaining how this works.
It seems that every new event brings out a crop of scammers ready to exploit the gullible. Several recent scams are using the Equifax breach settlement, and the recent mass shootings in El Paso and Dayton to extract money from or deliver malware to their victims.
First, from KnowBe4, we have the details of several scams taking advantage of people attempting to get the $125 settlement payment they may be owed as a result of the Equifax ...
Continue Reading →
Hot on the heals on each other, Equifax and Facebook have each settled for large fines in unrelated privacy and data breach cases. All I can say is “about time” and “is that all?”
The FTC has fined Facebook $5 billion for data misuse and other issues related to Cambridge Analytica, the European GDPR, the last US Presidential Elections, and the Brexit campaign. ...
Continue Reading →
Things with ISO standards can get really complicated: there are many ISO management standards – the most popular ones are ISO 9001, ISO 14001, ISO 27001, ISO 22301, ISO 20000, etc. – and there are a multitude of ways to get accredited/certified/registered related to those standards. But, that’s not all – there is a difference if you want to certify your company, or if you want to certify as an individual.
So, ...
Continue Reading →
First I must confess that I am a huge Capital One fan. As far as I am concerned, they do it right. Good alerting system, great customer service, heck, great products.
So I was a bit dismayed to hear they were the latest victim of a data breach. But as the details were released, it seems the attack was an insider job, and ...
Continue Reading →
Phishing is getting better and harder to detect. One new trend is using hijacked business email accounts to pivot further into a business, by using the built in trust of the company’s email domain to send phishing emails that appear to come from coworkers. These phishing emails from trusted sources are used to hijack other email accounts in the same company. This ...
Social engineers have many tricks up their sleeves, and we have covered many of them in previous articles. The biggest trick is phishing emails, of course, coupled with replica landing pages on hijacked websites. Other methods include phone calls, such as fake tech support calls. There are texting hoaxes, called smishing. There are fake, cloned, or hijacked Facebook, LinkedIn, Twitter, and Instagram ...
