WyzGuys Tech Talk

A quick Saturday digest of cybersecurity news articles from other sources.

Tax Identity Theft Awareness Week

File early or an impostor may get your refund.  Especially now that the Equifax credit trove is in the wild.

01/29/2018 08:27 AM EST  Original release date: January 29, 2018

Tax Identity Theft Awareness Week is January 29 to February 2, and many federal agencies are offering information and resources to help consumers learn to protect themselves from tax-related identity theft and Internal Revenue Service (IRS) imposter scams.

NCCIC/US-CERT encourages consumers to review IRS publication Taxes.Security.Together. and NCCIC/US-CERT Tip Preventing and Responding to Identity Theft. Users can also participate in a series of free webinars and chats on avoiding tax identity theft, hosted by the Federal Trade Commission, IRS, Department of Veterans Affairs, and others.

 Researchers warn of invisible attacks on electrical sensors

More IoT security woes.  Are the humble analog transducers embedded in vast numbers of hidden sensors the next low-level technology in need of a security rethink?

Mozilla Releases Security Update for Firefox

01/30/2018 07:23 AM EST  Original release date: January 30, 2018

Keeping your browser up to date with the newest version is an easy way to improve your cybersecurity posture.  Mozilla has released a security update to address a vulnerability in Firefox. Exploitation of this vulnerability may allow an attacker to take control of an affected system.  NCCIC/US-CERT encourages users and administrators to review the Mozilla Security Advisory for Firefox 58.0.1 and apply the necessary update.

Pyeongchang 2018: Staying Cyber Safe during the Olympics

02/01/2018 06:35 AM EST  Original release date: February 01, 2018

As the 2018 Olympic Games in Pyeongchang approach, NCCIC/US-CERT reminds travelers to be aware of cybersecurity risks. At high-profile events, cyber activists may take advantage of the large audience to spread their message. Cyber criminals may attempt to steal personally identifiable information or harvest users’ credentials for financial gain. There is also the possibility that mobile or other communications will be monitored.

NCCIC/US-CERT encourages users to protect themselves against these risks—especially risks associated with portable devices such as smart phones and tablets—by taking the following actions:

• Switch off Wi-Fi and Bluetooth connections when not in use.
• Use a credit card to pay for online goods and services.
• When using a public or unsecured wireless connection, avoid using sites and applications that require personal information like log-ins.
• Update mobile software.
• Use strong PINs and passwords.

Using the security practices suggested in the resources listed below will also help travelers stay more secure in Pyeongchang and other travel destinations:

• NCCIC/US-CERT Security Tip ST13-002: International Mobile Safety Tips
• NCCIC/US-CERT Security Tip ST05-017: Cybersecurity for Electronic Devices
• Stop.Think.Connect. Tip Card: Cybersecurity While Traveling
• Federal Communications Commission Smartphone Security Checker