There is only one person that you can rely on to keep you protected in your online life – and that person is YOU! Because the bad actors on the network target people more frequently than machines, this means that we more likely to be the first point of contact in an exploit. We are ultimately responsible for keeping our online life secure. ...
A quick Saturday digest of cybersecurity news articles from other sources.Let me take you on a tour of the Dark Web on Thursday, January 9, 2020 from 10 am to 11:30 am. Seating is limited so register today. This is a popular event that typically sells out quickly.
Someone has stolen your user ID and password from a website where you have an account. Are you at risk? What are they going to do with it?
Unfortunately, even with the best security, passwords are stolen all the time from websites and cloud service providers. There are over 15 billion stolen credentials. Usually the passwords are solved using off-line brute force password cracking methods, and then packaged up and sold on ...
Continue Reading →
No matter how good a job you do of creating long, strong, unique passwords, keeping them secret and secure in a password manager, it all goes awry when a vendor site we have used gets breached, and has our user names and passwords stolen. This is where a web site such as Troy Hunt’s HaveIBeenPwned.com comes in.
I have set up an account at HIBP, and get regular ...
Continue Reading →
My friend Eric Morley, owner of Big Frog Custom T-Shirts in Woodbury MN is a frequent and thought-provoking responder to articles that I post on my weblog. Recently, he asked: “Hey Bob, are you aware of any rating systems on IoT devices? I’d love to be able to review the security of these devices, and make buying decisions based ...
The most dangerous person to your network security may be sitting in the next cubicle, or working for a trusted vendor. This is called the Insider Threat. It is more likely that your computer incident will come from the inside of your organization than from a cyber-criminal gang in the Russian Federation. A couple of email newsletters dropped into my inbox with new examples of insiders who became threats.
There has been a lot in the press about ransomware this year. Crypto-ransomware attacks are becoming more targeted and sophisticated, resulting in bigger extortion amounts and other financial losses to the victims.
But last year’s most frequent and expensive cyber-crime is still email account compromise, or what the FBI calls Business Email Compromise (BEC) is still with us. The attackers using this exploit have also become more sophisticated.
A ...
Continue Reading →
Your Personally Identifiable Information (PII) is one of the top targets of cyber-criminals. This information is valuable because it can be used for identity, fraud, tax refund fraud, loans and credit card applications, money transfers, phishing and spam campaigns, blackmail and extortion, fraudulent medical insurance claims, online shopping, and so much more. This information is packaged and sold on the Dark Web, and ...
I hate robocalls. I got rid on my land line phone because the ONLY people who called me on it were robocallers, fraudsters, and political campaigns (more fraudsters?). Now up to 80% of my cellular phone calls are robocalls. If it seems that there are more robocalls then ever, this is not an illusion. Robocalls have increased 46% from 2017 to 2018, and ...
A quick Saturday digest of cybersecurity news articles from other sources.Original release date: October 4, 2019
The Microsoft Threat Intelligence Center (MSTIC) has released a blog post describing an increase in malicious cyber activity from the Iranian group known as Phosphorus. These threat actors are exploiting password reset or account recovery features to take control of targeted email accounts.
In a 30-day ...
Continue Reading →