CYB3R’s Post

Computer Security: pimp up your password In today's digital age, simply having a complex and unique password isn't sufficient to protect your business. Companies need to understand that while strong passwords are crucial, they can still be cracked through various methods like guessing, brute-force attacks, or even keyboard logging software. The Limitations of Passwords Making your password complex with letters, symbols, and numbers is essential. Avoid using the same password across multiple sites and never share your password with anyone. Think of your password like your toothbrush – don’t share it and change it regularly. However, even the most complex passwords can be sniffed out by attackers using keyloggers installed on your computer. The Risks of Clicking on Suspicious Links "Stop, think, don't click" should be your mantra. Clicking on malicious links can make it easy for attackers to install keyloggers and steal your passwords. A recent campaign revealed that an attacker could have taken control of 10 to 20% of Windows computers in a typical environment, sniffing out numerous passwords. The Severe Consequences If attackers gain access to your passwords and attached rights, they can observe your activities and strike when least expected. They could disrupt your services, manipulate your systems, or steal money, causing significant harm to your organization. The Silver Bullet: Multi-Factor Authentication (MFA) Enhance your password security with an additional layer of protection – something you have, like your smartphone, access card, or a dedicated USB stick. This method, known as multi-factor authentication (MFA), is already used by banks and can significantly improve your security. A Small Trade-Off for Greater Security Implementing MFA may cause some inconvenience, but it’s a small price to pay for enhanced security. Spending a bit more time at login for much more security is a fair trade-off. Protect your business by adopting MFA and ensuring a safer working environment. #cybersecurity #dataprotection #mfa #twofactorauthentication #passwordsecurity #itsecurity #infosec #techsafety #businesssecurity #onlinesafety #digitalsecurity #networksecurity #securityawareness #itinfrastructure #securitytips #securelogin #authentication #cyberawareness #identityprotection #techsolutions

NYDFS Issues Warning on Password Resets & Mobile Security The New York State Department of Financial Services (NYDFS) just dropped a critical bulletin highlighting two key security vulnerabilities: self-service password resets and unsecured corporate mobile devices. This isn't just for NYDFS-covered institutions – it's a wake-up call for everyone in the industry. Now's the time to: ·     Reassess your self-service password reset process: Are you relying solely on knowledge-based questions or SMS verification? It’s time to level up with multi-factor authentication and stronger password complexity requirements. ·     Implement a no-porting rule for corporate cell phones: Don't let sensitive data walk out the door with employee turnover. Enforce stricter mobile device management controls and consider company-owned devices with secure configurations. ·     Double-check your overall mobile security posture: Are your MDM solutions robust enough? Do you have adequate data encryption and endpoint protection in place? ️ ·     Remember, cyber threats evolve constantly, and financial institutions are prime targets. Proactive measures like these are crucial to safeguarding your data, your customers' trust, and your bottom line. #cybersecurity #financialservices #NYDFS #mobilesecurity #riskmanagement #datasecurity https://lnkd.in/g9fWjjC3

A Personal Wake-Up Call 🔐 Recently, someone close to me experienced a troubling data breach while transferring data to a new phone. This incident highlighted how crucial it is for all of us to understand the risks involved. In today's world, where our phones hold personal photos, financial details, and important documents, the threat of data breaches is very real. Even routine tasks like moving data between devices can expose vulnerabilities. This situation serves as a reminder for us to be vigilant and take proactive steps to safeguard our data. Using encrypted transfers, keeping our devices updated, and being cautious about the apps we download are essential practices to enhance our data security. Let's prioritize data security in our daily routines. Scammers are constantly on the lookout for opportunities to steal our data, so it's vital to exercise caution when downloading apps or sharing information online. #DataSecurity #PersonalPrivacy #CyberSafety 

🔒 Cybersecurity Tip: Protect Yourself from Remote Desktop Scams Recently, cybercriminals have devised a cunning scheme to compromise your computer security. They initiate the attack by sending a deceptive email posing as your bank, alerting you to a non-existent account issue. The goal? To persuade you into downloading seemingly harmless software that grants them access to your computer. 💻 What makes this scam tricky is that the remote desktop software they have you download is legitimate – a tool typically used by IT professionals to assist users. However, the person urging you to install it is not legit; they're a scammer aiming to exploit your trust. 🚫 Don't fall victim to this remote desktop scam! Follow these precautions: ➡ Verify Suspicious Emails: Be wary of unexpected emails claiming account issues. If in doubt, contact your bank through a verified number or email address. ➡ Never Surrender Control: Do not grant access to your computer to unsolicited callers, even if they claim to be from your bank or tech support. ➡ Guard Your Passwords: Your bank will never ask for your login information. Never share passwords or sensitive data with anyone. Stay vigilant and share this post to help safeguard your network! #cybersecurity #scamalert #staysafeonline

Zero trust “Never trust,always verify nobody holy pass” A lot of people give access to friends,colleagues and even family members their phones,devices,servers,Wi-Fi etc.which is totally wrong because having access to this can make you vulnerable. “Little things really matter” Zero trust simply means that no one internally or externally can be trusted. -Grant access to only users who are privileged of it.only the minimum access permissions required for their specific tasks. -Verify User identities and device. -Ensure that User activity, device health, and network traffic are constantly monitored for suspicious behavior. -Ensure that all users request goes through a rigorous authentication process which Adds an extra layer of security beyond just passwords, such as fingerprint scans, one-time codes, or security questions. -Create an Identity and Access Management (IAM) which Centrally manages user identities, access privileges, and permissions. -Create a Data Loss Prevention (DLP) which Prevents sensitive data from being exfiltrated from the network. -Create a Zero Trust Network Access (ZTNA) which Provides secure remote access to applications and resources without requiring users to be on the corporate network. In essence Zero trust reduces the risk of you been hacked. Trust nobody!!! You trust person at your own risk!!! #DecyberGenZ #cybersecurity #cybersecuritycommunity #Informationsecurity

THREATS POSED BY SHADOW IT Data theft Many of the controls that organisations apply to devices and services (such as encryption and allow/deny listing) are unlikely to be applied effectively on shadow IT. Protecting data is a concern as you can’t be certain where your data is, where it is being processed, or where it ends up. If you don’t have control of the services processing data (or devices that hold data), you can’t be sure appropriate backups are being made. This can expose an organisation to threat of ransomware, legal issues around data handling, reputational damage and recovery costs. Exploitation of services or devices Controls such as well-configured firewalls, application allow listing, antivirus software and multi-factor authentication (MFA) can help to reduce the risk of compromise. For shadow IT, you can’t assume that these controls are in place. This applies not to just traditional work devices (such as phones, laptops and PCs), but also embedded devices that have an internet connection that have been set up (for example) by a building manager. This can expose an organisation to the threats from malware (including ransomware), network monitoring, and lateral movement. Organisations benefit from working with Business Technology Leaders across the United Kingdom as we work flexibly to drive your innovation with our deep understanding of technology and learnings across industries. Expert support helps businesses to change nimbly with speed and confidence while pulling away from competitors. If you want to know more visit https://lnkd.in/eSVeTDC4 or contact me ([email protected]) today for a confidential and impartial discussion on how we can add value to your business. #HelptoGrowTechnologyStrategy, #GrowthTechStrategy, #TechnologyStrategy, #BusinessGrowth, #HelptoGrow, #BusinessTransformation, #BusinessModernisation, #DigitalTransformation, #TechnologyModernisation, #BusinessGrowth, #TechRoI, #TechnologyRoI, #TechRequirementsCapture,

Here is your #cybersecurity word of the day! Today's word: Keylogger Definition- A computer program that records every keystroke made by a computer user, especially in order to gain fraudulent access to passwords and other confidential information. A keylogger is a type of software or hardware device designed to secretly record every keystroke made on a computer or mobile device, often without the user's knowledge. It captures inputs from the keyboard, including passwords, messages, and other sensitive information, and stores them to be retrieved later by the attacker. Keyloggers can be used for various purposes, ranging from monitoring employees' activities in a corporate environment to maliciously stealing personal data such as login credentials and financial information. They pose significant privacy and security risks, since they can compromise the confidentiality of user interactions and lead to unauthorized access to sensitive information. Make sure to follow for the next "Cybersecurity Word of the Day!" 😄 #PCAKnowsIT #YourITCoach #technology #keylogger

According to Verizon's 2024 DBIR, a significant portion of breaches—68%—can be attributed to human error. Here's what makes this even more concerning: Your company's sensitive information is no longer confined to the office! Employees access critical data from various devices and locations, creating new security vulnerabilities. So, here's a question to ponder: Are you confident in your organization's current mobile security strategy? If not, consider implementing a Mobile Device Management (MDM) strategy. MDM facilitates a harmonious balance between flexibility and security, empowering your business by: 1. Device Oversight: Monitoring and managing all company-connected devices. 2. Access Control: Implementing strong authentication and authorization protocols. 3. Data Encryption: Ensuring sensitive information remains secure, even if a device is lost or stolen. 4. Remote Wipe: Protecting data by remotely erasing it from compromised devices. While you may not have control over every work environment, you can certainly help manage who has access to your organization's essential data and how they access it. Is your business prepared to face the mobile security challenges of 2024 and beyond? Take control of your data. Learn more: https://hubs.ly/Q02M5R_M0 #BetterConnected #MDM #Cybersecurity #DataPrivacy #AccessControl #BusinessContinuity #ITSecurity

So many companies today still force employees to periodically change their passwords. Even a lot of online platforms and services that require people to sign in require you to change your passwords every so often (for example, some bank websites). Password rotation in today's environment is such a bad idea - yet it is scary how so many companies and platforms enforce it. When human beings change that often, they tend to conform to a pattern. No one can humanly remember unique passwords to dozens of devices and platforms they inevitably end up using these days. So when, on top of that, you force people to change passwords periodically, you end up with passwords that look like MyCompany&2024. Password rotation encourages poor password hygiene. Password rotation at the user level increases vulnerability, not decrease it. This is one of those things in the tech world where something looks great in theory (password rotation is indeed great in theory) but fails miserably when the environmental context (and human nature) are taken into account. #cybersecurity #passwordsecurity

📢 Massive Data Breach Exposes Nearly All AT&T Cell Customers’ Call and Text Records 📢 ⚠️ Tens of millions of AT&T cellphone customers, along with many non-AT&T customers, had their call and text message records exposed in a significant data breach. This includes phone numbers, records of calls and texts, interaction frequency, and call duration from May to October 2022. 🔍 Key Points: Scope of Data: The breach affects nearly all AT&T cellular customers and customers of other wireless providers using AT&T's network. It also includes some records from early January 2023. Exclusions: Contents of calls/texts, personal info like Social Security numbers, dates of birth, and names were not exposed. Impacted Data: Some records also included cell site identification numbers, potentially revealing geographic locations. Investigation and Response: AT&T, in collaboration with law enforcement, is investigating the breach. They’ve hired cybersecurity experts and taken steps to secure their systems. 🛡️ Company Statement: "We sincerely regret this incident occurred and remain committed to protecting the information in our care." 👥 Next Steps: AT&T is notifying affected customers and providing resources to protect their information. This breach highlights the critical need for robust cybersecurity measures. #DataBreach #CyberSecurity #AT&T #CustomerSafety #DataProtection