SecurITy At Miner

  Many travelers rely on technology even more to enhance their experience.   As you embark upon your next adventure, stay cyber safe while away from  home by following some simple practices to help keep your devices safe and  your vacation plans from going awry. Read the article here: https://staysafeonline.org/resources/vacation-and-travel-security-tips/

 https://www.sans.org/newsletters/ouch/securing-generation-gap/ Overview Trying to securely make the most of today’s technology can be overwhelming for almost all of us, but it can be especially challenging for family members not as used to or as familiar with technology. Therefore, we wanted to share some key steps to help secure family members who may be struggling with technology and might misunderstand the risks that come with using it. Focus On The Basics Frequently, the best way to help secure others is to make security as simple as possible for them. Focus on the fewest steps that will have the biggest impact. 1.  Social Engineering:  Social engineering attacks are one of the primary ways most of us are targeted. Explain how scammers and con artists have operated for thousands of years, the only difference now is bad guys are using the Internet to fool us. Give examples, such as phishing emails pretending to be your bank or a package shipment or scammers calling pr...

  Vishing - Phone Call Attacks and Scams Overview When you think of a cyber criminal you probably think of an evil mastermind sitting behind a computer, launching sophisticated attacks over the internet. While some of today’s cyber criminals do use advanced technologies, many simply use the phone to trick their victims. There are two big advantages to using a phone: Unlike other attacks, there are fewer security technologies that can detect and stop a phone call attack; also, it is much easier for criminals to convey emotion and build trust over the phone, which makes it easier to trick their victims. Let’s learn how to spot and stop these attacks. How Do Phone Call Attacks Work? First, understand that these criminals are usually after your money, information, or access to your computer (or all three). They do this by tricking you into doing something you should not do, a technique called “social engineering.” Cyber criminals often create situations that feel very urgent and realis...

Federal Trade Commission - SCAM Alerts  

  Federal Trade Commission - Protecting Your Privacy Online

 Federal Trade Commission - Protecting Kids Online

 

 

 

 

 

  Did you ever wonder if your personal or work email account was stolen in a data breach?  Check out this free resource for anyone to quickly assess if they may have been put at risk due to an online account of theirs having been compromised or "pwned" in a data breach.  https://haveibeenpwned.com/

  Supply chain research seeks out the software openings oftentimes exploited WEST LAFAYETTE, Ind. — A computer system’s cybersecurity can be jeopardized by its own software as much as the questionable decisions made by computer users. A Purdue University professor is focused on halting those software attacks, which statistics indicate are on the rise. Santiago Torres Arias , an assistant professor of electrical and computer engineering at Purdue, said a cumulative increase of 500% in the number of software supply chain compromises is giving hackers the weak link they need to attack a system. Torres Arias said that in supply chain security, hackers will search to find that one program in a chain of software that is vulnerable and hack it. “Supply chain security compromises are attacks where someone targets the left side of the equation and how a piece of software is produced,” Torres Arias said. “They’re not targeting the people using the system, but rather the producers, so that wh...

  Hive ransomware, which was first observed in June 2021 and likely operates as an affiliate-based ransomware, employs a wide variety of tactics, techniques, and procedures (TTPs), creating significant challenges for defense and mitigation. Hive ransomware uses multiple mechanisms to compromise business networks, including phishing emails with malicious attachments to gain access and Remote Desktop Protocol (RDP) to move laterally once on the network. After compromising a victim network, Hive ransomware actors exfiltrate data and encrypt files on the network. The actors leave a ransom note in each affected directory within a victim’s system, which provides instructions on how to purchase the decryption software. The ransom note also threatens to leak exfiltrated victim data on the Tor site, “HiveLeaks.” For technical details regarding the attach, visit the link below. FBI Flash=TPWhite

  https://thehackernews.com/2021/08/microsoft-warns-of-widespread-phishing.html