WyzGuys Tech Talk

A quick Saturday digest of cybersecurity news articles from other sources.

Potential Hurricane Dorian Cyber Scams

Original release date: September 4, 2019

The Cybersecurity and Infrastructure Security Agency (CISA) warns users to remain vigilant for malicious cyber activity targeting Hurricane Dorian disaster victims and potential donors. Fraudulent emails commonly appear after major natural disasters and often contain links or attachments that direct users to malicious websites. Users should exercise caution in handling any email with a hurricane-related subject line, attachment, or hyperlink. In addition, users should be wary of social media pleas, texts, or door-to-door solicitations relating to severe weather events.

To avoid becoming victims of malicious activity, users and administrators should review the following resources and take preventative measures:

• Staying Alert to Disaster-related Scams
• Before Giving to a Charity
• Staying Safe on Social Networking Sites
• Avoiding Social Engineering and Phishing Attacks

If you believe you have been a victim of cybercrime, file a complaint with the Federal Bureau of Investigation Internet Crime Complaint Center at www.ic3.gov.

WordPress Releases Security Update

Original release date: September 6, 2019

WordPress 5.2.2 and prior versions are affected by multiple vulnerabilities. An attacker could exploit some of these vulnerabilities to take control of an affected website.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the WordPress Security and Maintenance Release and upgrade to WordPress 5.2.3.

Cyber Safety for Students

Original release date: August 20, 2019

As summer break ends, many students will return to school with mobile devices, such as smart phones, tablets, and laptops. Although these devices can help students complete schoolwork and stay in touch with family and friends, there are risks associated with using them. However, there are simple steps that can help students stay safe while using their internet-connected devices.

HOAX ALERT! Facebook ‘deadline’ on making your content public is fake

Just stop believing everything you read!! There’s no privacy Armageddon coming “TOMORROW!” If there was, you couldn’t copy and paste your way out of it!

National Cyber Awareness System:

CISA Insights: Ransomware Outbreak

Original release date: August 21, 2019

The Cybersecurity and Infrastructure Security Agency (CISA) has released its first CISA Insights product, which discusses the rapid emergence of ransomware across our Nation’s networks. CISA Insights – Ransomware Outbreak includes steps in the following key areas to help organizations protect themselves from ransomware attacks—a top priority for CISA:

• Actions for Today – Make Sure You’re Not Tomorrow’s Headline
• Actions to Recover If Impacted – Don’t Let a Bad Day Get Worse
• Actions to Secure Your Environment Going Forward – Don’t Let Yourself be an Easy Mark

CISA urges organizations to review CISA Insights – Ransomware Outbreak, implement the recommendations, and visit the CISA resource page on ransomware for more information.

Cloud Security: 3 Things AWS Is Doing in Wake of Capital One Data Breach

It’s the battle against misconfigured security settings in the cloud.

Capital One Hacker Denied Bail

Transgender alleged Capital One hacker Paige Thompson was denied bail on the basis of flight and suicide risks.

Cheating Problem on Ethical Hacking Certification Exams?

The U.S. Department of Defense requires cybersecurity defenders to take exams to certify their status as ethical hackers. Unfortunately, some are suggesting the testing itself may be far from ethical. A recent investigation by the Fox affiliate in Tampa, Florida, revealed potential problems with the process for those who become certified to work at U.S. Central Command.