WyzGuys Cybersecurity

Corporate Execs Fear the Phish

A recent report says that 75% of corporate executives believe what 100% of cybersecurity professionals know: phishing emails represent the greatest cyber-threat to business computer systems and networks. Humans are still the weakest link in the cybersecurity chain. Cybersecurity awareness training and simulated phishing testing is seen as the most effective way to improve detection and avoidance in employees. To be truly effective training frequency should happen quarterly, but often is ...

Continue Reading →

18
OCT

0

Share

Computers and Internet, cybersecurity, Phishing

When Penetration Testing Goes Wrong

When I am speaking or training, and the subject turns to penetration testing, I make certain to explain to the class or audience that nearly everything a pen-tester does violates federal laws. For starters, there is the Computer Fraud and Abuse Act. There are many other computer laws at both the federal and state levels.

Penetration testing takes a vulnerability assessment to the ...

Continue Reading →

16
OCT

2

Share

cybersecurity, law and policy

get out of jail free card, Pentest Scope

I Filed a Report with the Internet Crime Complaint Center

One of my clients was the victim of a cyber-crime, and I reported it to the FBI’s Internet Crime Complaint Center. Today I will discuss how the process worked.

My client called me to help her after someone posing as her intercepted a payment on an invoice that she sent to one of her customers. The way this worked is that some time in the past, her business email account had ...

Continue Reading →

14
OCT

1

Share

account hijacking, cybersecurity, law and policy

FBI, IC3

Sunday Funnies – Defrag This

Found this on Pinterest. Did you know that defragmenting a hard drive or HDD ( the old spinning magnetic platter kind) is not necessary? The newer Windows operating systems since Windows 7 do that automatically in the background when your computer is on but inactive.

And defragging a SSD or solid state drive DAMAGES the flash memory chips. So just ...

Continue Reading →

13
OCT

0

Share

Sunday Funnies

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

Detecting Credit Card Skimmers

Modern credit card skimmers hidden in self-service gas pumps communicate via Bluetooth. There’s now an app that can detect them:

The team from the University of California San Diego, who worked with other computer scientists from the University of Illinois, developed an app called Bluetana ...

Continue Reading →

12
OCT

0

Share

Android, Apple, cybersecurity, email, privacy, smartphones, Software vulnerability, Weekend Update

card skimmers, DNS, robocalls

Authentication Without Passwords

The password represents one of the weakest links in the cybersecurity chain, and is frequently one of the opening points of an attack. Passwords can be collected in cleartext through phishing exploits such as an email link that directs you to a fake login page, or social engineering ploys such as bogus calls from “IT” or “tech support,” or keylogging software that captures the entire user name/password/web address triad. Passwords ...

Continue Reading →

11
OCT

0

Share

authentication, multi-factor authentication, passwords

Ransomware Mitigation – Texas Shows How It Is Done

We recently wrote about the upsurge in ransomware attacks, and one of the examples in that article was the recent attack on about two dozen governmental and educational networks in the state of Texas. Texas was initially tight lipped about what they were doing to mitigate the attack, in an effort to prevent the attackers from learning about their defensive strategies and systems, and adapting their ...

Continue Reading →

9
OCT

1

Share

cybersecurity, multi-factor authentication, ransomware

Ransom Variants Target Linux Servers

No one is immune from cyber-attacks anymore, and that includes Apple and Linux systems. Lately there has been a lot of activity around crypto-ransomware attacks against Linux servers. When you consider that a very large percentage of servers working on the Internet are running Linux under the hood, this is a critical issue.

February 2019 brought us the ransomware variant B0r0nt0k, which encrypted server contents and then demanded as much as ...

Continue Reading →

7
OCT

0

Share

cybersecurity, Linux, ransomware

Sunday Funnies – Self Employed

From Pinterest

Be Sociable, Share!

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

How to become a cybersecurity pro: A cheat sheet (free PDF)

As cybercriminals grow more sophisticated and news of major breaches reach headlines nearly daily, cybersecurity professionals are in high demand: There are currently nearly 3 million unfilled cybersecurity jobs worldwide, ISC(2) found.