Don’t Click the Ads

 

Don’t click the ads – Might be malware

When I have a question now, whether it’s finding a recipe or doing math, I’m using AI a lot more than doing a good ol’ Google Search. My go-to is ChatGPT, but Perplexity is useful, too. I often ask both AI bots the same question as a way to double-check things. Google Gemini is a big “meh” to me so far.

There are things Google Search works better than AI for — say, finding a software download, a customer service number or your doctor’s website. Keep in mind that cybercriminals and hackers are also using AI to up their game. You might not think twice about clicking a Google Search result, and cybercriminals know that. I don’t want you to become a victim.

Be careful where you click

Google doesn’t vet everyone who buys an ad. Cybercrooks have a long history of hiding nasty malware in Google Ads, and they're getting really good at SEO, driving up their malicious search results to the top.

We’re talking about everything from bogus Amazon ads to fake tech support numbers. Doctors, clinics and hospitals are a major target, too. Yep, you could end up with malware just by searching Google for your doctor’s name so you can grab the address.

Any site with a ton of traffic is risky. Think YouTube, Facebook, Target and Walmart. Those are just a few companies attackers use to get you to click on their malicious results.

How to protect yourself

With more tools than ever at their disposal, scammers are good at writing things that can trick anyone. Outsmart these jerks.

• Don’t click on sponsored links or advertising when Googling something.
• Type all web addresses directly into your browser so you know you’re going to the official or legitimate site.
• Before clicking any link, hover your cursor over it to see where it goes. Does the URL look off? Don’t click it.
• Look for extras in the URL, like “USA” added to the end. For instance, instead of target.com, scammers might send you to targetusa.com. This is an easy way to make a fake version of a site you’d otherwise 

If it’s free, you’re the product

Let’s look at what you hand out when you use that “free” email address from your internet service provider, whether it’s Google, Yahoo, AOL or some other Big Tech company. Remember, all of these are tracked and sold off to the highest bidder:

• Phrases and particular words that appear most in your emails. Think for a moment about some topics in your email right now. These companies make more money off you when they have more data.
• Your location and where your recipients are located, too. Again, it’s just more data points for them to sell!
• Every single person you correspond with — business contacts, friends, family, doctors. Also, how often you exchange emails and what you talk about. Nothing is sacred when it comes to making money.
• The specific time you’re most likely to open your emails, no matter if they’re spam or legit. That’s why the time you get a particular email may change.
• Your website habits get pulled in, too. That includes your shopping, research, dating and even porn-watching habits. Yup, it’s all for sale and tied to your name and IP address.

Simply put, all the data in your email is gathered, tracked, recorded and sold. 

Cyber Ports

 

The Cyber Shield 365/24/7

Protect your network

“That would never happen to me.” That’s probably what these people thought.

• There’s the couple who woke up to a stranger talking dirty to their infant son in the middle of the night through his baby cam and monitor.
• Then, there’s the family targeted by a hacker who cranked up their smart thermostat to unbearably high temperatures.

And don’t forget the countless other stories of home security cameras being hacked.

Get this: The average home and all its internet-connected devices experience about 10 attacks every 24 hours. Everything from your smart light bulbs to your smart thermostat is a way in. The answer isn’t to throw your hands up or ditch your smart gear. You just need to know how to protect your home the right way.

‘Wouldn’t I know if I got hacked?’

Some of these attacks are loud and in your face, like the email trying to extort you or a computer flashing with pop-ups. But some happen quietly in the background, like these:

• Botnet recruitment: Getting into your network means hackers may be able to add you to an army of infected devices. Their goal? To use all that power to carry out bigger attacks and hacks.
• Data theft: Most smart devices collect at least some personal details, like your location, behaviors, health data — whatever. This kind of info is worth money on the dark web.
• Spying: Think listening in, watching, recording or otherwise stealing info, often to bolster a future attack.
• Cryptojacking: Thieves want to steal your computer’s processing power and internet connection to mine cryptocurrency and reap the profits.

Your computer might be protected

Windows PCs and Macs both have a built-in firewall that does the bare minimum.

• On Windows: Open Control Panel, then type firewall into the search box. Click Windows Defender Firewall. In the left pane, tap Turn Windows Defender Firewall on or off to enable it.
• On Mac: Click the Apple menu > System Settings > Firewall, then turn it on.

Now, it’s important to know your computer’s software firewall means nothing if your security cams, smart bulbs and network are under attack. It’s common knowledge that most internet-connected devices have no security protocols.

That’s where a physical firewall comes in. It’s a safeguard between your devices and the internet. More specifically, a firewall provides:

• Traffic monitoring: A firewall examines all incoming and outgoing traffic to your home network and limits activity based on rules you’ve set up.
• Access control: Choose what devices access your network, plus when and how. You approve any new device (like the cable guy) and choose limits for certain groups or devices (like no internet on the iPad after 8 p.m.).
• Intrusion detection: Spot threats to your entire network, including devices you typically can’t monitor, like cheaper smart home gear without much built-in security.
• Content filtering: Choose what you see and don’t see at the device level. This is perfect for limiting a certain group (like kids) from accessing specific content.

Yes You Need A firewall

You’ve been breached

 

So you’ve been breached

It’s easy to push aside news of a data breach; there are just so many, it’s all turned into white noise. The Change Healthcare hack alone exposed one-third of Americans. Spoiler: I alert you to a breach affecting Taylor Swift fans below.

So, what do you do if your data is exposed? Your No. 1 goal is to protect yourself from future scams.

Do these things right away

Make a list of your data that was exposed. Keep a document, Post-it, a note on your phone — whatever. Be suspicious of anyone who references it in an email or phone call to prove they’re legit. Say your home address was leaked and someone contacts you about an issue with your mortgage. Yep, it’s probably a scam.

Watch your money, honey. Update your PIN and banking login credentials. Even if they weren’t involved directly in the breach, hackers can use your personal info to access it. Keep an eye on your bank and credit card statements.

Freeze your credit. This will keep scammers from opening a credit card or loan in your name. Like setting up a fraud alert, you'll need to contact each of the three credit bureaus.

Crooks love to play the long game

They’ll wait until your guard is down and target you months after the initial breach.

• Be wary of any email requests. Even if a request ends up being legit, it’s OK to take your time to figure it out. If it’s the first you’re hearing of something, it’s not urgent. Better safe than sorry.
• Watch out for health care-related requests. If you receive an explanation of benefits (EOB) or a bill for services you didn't receive, contact your health care provider and insurance company right away.
• If you get an out-of-the-blue message from an old friend, be extremely cautious. Hackers love to use your info to pose as friends or family.

Take these steps to protect yourself now, and share this with fam, friends and coworkers. Future you will thank you.

This Hack Will Rock You

 

The Cyber Shield 365/24/7

You might want to sit down for this one. Hackers posted a file named RockYou2024⁠.⁠txt to a dark web forum on July 4. The file includes a mind-numbing 9,948,575,739 passwords.

Wondering if this attack puts you at risk? Yup, it does. The RockYou2024 leak is made up of passwords from both old and new data breaches.

Give ‘em stuffin’ to talk about

Credential stuffing is no joke. This is when crooks take your leaked passwords and try to break into as many services, sites, accounts and apps as they can. They’re hoping you got lazy at least once and reused that password somewhere else.

Recent attacks on big names like Ticketmaster, Advance Auto Parts and Santander Bank were all the result of this technique. Any system that isn't protected against brute-force attacks is at risk, and this goes beyond smartphones and computers. Even internet-connected cameras and industrial equipment are on the hackable list.

What are your next steps?

If you have time, visit Cybernews' Leaked Password Checker to see if your passwords were exposed. HaveIBeenPwned is another option. Enter your email address into either one, and I’ll bet you’ll find yourself on the list.

Reset the passwords for every single account associated with those leaked passwords. Now, virtually shake my hand and promise me you won’t reuse your passwords — ever.

Your browser can help

Your browser’s password manager can alert you if your passwords have been involved in a breach. Here’s how to view or enable this feature in three popular browsers:

§  Google Chrome: Password alerts are enabled by default. If you think you might’ve missed one, head to Google’s Password Manager and run a Password Checkup.

§  Microsoft Edge: You’ll need to turn on Edge’s Password Monitor. To do this, go to Settings and more (the three-dot menu at the top right of your browser window) > Settings > Profiles > Passwords. Then, toggle on the switch for Show alerts when passwords are found in an online leak.

§  Apple Safari: Password monitoring is on by default for browsers running on MacOS 14 or iOS 14 and later. To check for alerts on your iPhone or Mac, and to update any compromised passwords, go to Settings > Passwords > Security Recommendations > Change Password on Website.

Oh, and this is important to remember: Any random two-factor authentification (2FA) codes you receive via email or text that you didn’t ask for could mean someone is trying to access your accounts.

I’m willing to bet just about everyone you know is impacted by this latest password dump. Do your loved ones a favor and use the buttons below to share these security tips.

 

Cyber Security Best Practices

                             The Cyber Shield 365/24/7 

The digital literacy basics for everyday life and work

as a useful definition of the foundational digital skills everyone needs to 

navigate 21st-century life with ease. These include things like:

• Being able to turn on a device

• Connecting a device to a safe and secure Wi-Fi network

• Searching online, and finding and using websites

• Communicating with others using email and messaging apps

• Setting up and using video calling platforms such as Skype, Zoom, 

and FaceTime

• Sharing documents with others

• Posting on social media

• Understanding that passwords and personal information have value 

and need to be kept safe

• Updating and changing passwords when necessary

Cyber security best practices for individuals and organizations.

Cyber security is not just a concern for governments and large corporations; it is equally crucial for individuals and small organizations. In today’s digital age, where cyber threats are constantly evolving, implementing best practices is essential to protect sensitive information and maintain data integrity. This article will discuss some of the top cyber security best practices that individuals and organizations should follow.

1. Strong and Unique Passwords: One of the simplest yet most effective ways to enhance cyber security is by using strong and unique passwords. Avoid using common passwords or personal information that can be easily guessed. Consider using a password manager to generate and securely store complex passwords.

2. Two-Factor Authentication: Enable two-factor authentication (2FA) whenever possible. This adds an extra layer of security by requiring a second verification step, such as a code sent to your mobile device, in addition to your password.

3. Regular Software Updates: Keeping all software and operating systems up to date is crucial. Software updates often include patches for known vulnerabilities, which hackers can exploit. Set up automatic updates to ensure that you are always running the latest versions.

4. Secure Wi-Fi Networks: Protect your home or office Wi-Fi network with a strong and unique password. Additionally, consider enabling network encryption, such as WPA2, to secure the communication between devices and the network.

5. Employee Training and Awareness: Organizations should prioritize cyber security training and awareness programs for their employees. This helps ensure that everyone understands the importance of following security protocols and recognizes potential threats like phishing emails or suspicious links.

6. Regular Data Backups: Regularly backing up important data is crucial in case of a cyber attack or data loss. Store backups on separate devices or in the cloud, and test the restoration process periodically to ensure the data can be recovered.

7. Firewalls and Antivirus Software: Install and regularly update firewalls and antivirus software on all devices. These security tools provide an additional layer of protection against malware, viruses, and other cyber threats.

8. Secure Web Browsing: Be cautious when browsing the internet. Avoid clicking on suspicious links or downloading files from untrusted sources. Use reputable web browsers and consider using browser extensions that provide additional security features.

By implementing these cyber security best practices, individuals and organizations can significantly reduce the risk of falling victim to cyber attacks and protect sensitive information from unauthorized access. Stay vigilant, stay informed, and stay secure!

Common Cyber Security Technologies

365/24/7

Common Cyber Security Technologies and Their Functions

In today’s digital age, where cyber threats are becoming increasingly sophisticated, cyber security technologies play a crucial role in safeguarding our sensitive information. By using cutting-edge technologies and advanced techniques, these tools are designed to detect, prevent, and respond to cyber attacks, ensuring the confidentiality, integrity, and availability of data. Let’s explore some common cyber security technologies and their functions.

1.Firewall: A firewall acts as a barrier between an internal network and the external internet, monitoring and controlling incoming and outgoing network traffic. It examines each data packet, determines if it meets certain security criteria, and allows or blocks it accordingly.

2.Intrusion Detection System (IDS): An IDS monitors network traffic for suspicious activities and alerts administrators when potential threats are detected. It analyzes patterns, signatures, and anomalies to identify malicious behavior and helps in early detection and prevention of cyber attacks.

3.Antivirus Software: Antivirus software scans files, programs, and emails for known malware and viruses. It detects and removes or quarantines malicious code, preventing it from spreading and causing harm to the system.

4.Encryption: Encryption is the process of converting sensitive information into an unreadable format, known as ciphertext, to protect it from unauthorized access. It ensures that only authorized parties can decrypt and access the information.

5.Virtual Private Network (VPN): A VPN creates a secure, encrypted connection over a public network, such as the internet. It allows users to transmit data securely and privately, protecting their online activities from eavesdropping and unauthorized access.

6.Two-Factor Authentication (2FA): 2FA adds an extra layer of security by requiring users to provide two different types of authentication factors, such as a password and a unique code sent to their mobile device. This reduces the risk of unauthorized access even if the password is compromised.

7.Security Information and Event Management (SIEM): SIEM tools collect and analyze security event logs from various sources to detect and respond to security incidents. They provide real-time monitoring, log correlation, and threat intelligence, helping organizations identify and mitigate potential cyber threats.

8.Intrusion Prevention System (IPS): An IPS works in conjunction with a firewall and IDS to actively block and prevent malicious activities. It analyzes incoming and outgoing network traffic, identifies potential threats, and takes immediate action to stop them.

Additional essential skills for work, including:

• Understanding and complying with your employer’s IT and social

media policies

• Complying with security policies when working remotely 
• Using digital collaboration tools to meet, share information, and
collaborate with colleagues (A good example is using Google Docs
to collaborate on a document. 
Given the rapid digitization of work, I’d also argue that basic digital literacy now goes beyond turning on devices, using technology to communicate, and the like. So, to the above lists, I would also add the following
as essential basic skills that we all need:

• Having a positive attitude to new technologies and not shying away

from using new tools. This includes seeing the value of technology,

and how it can help businesses and individuals succeed.

• Generally being tech savvy, by which I mean being aware of new

technologies that are emerging and considering how those technologies might impact your job.

• Understanding the potential pitfalls of technology. A good example
is the “filter bubble” phenomenon. 

Here, search and social media platforms serve up personalized content based on what they know about you and your previous activity online, potentially creating a
limited view of the world and an environment in which fake news By leveraging these common cyber security technologies, organizations and individuals can enhance their defense against cyber threats and protect their valuable data from unauthorized access or compromise.

Government's Role in Promoting Cyber Security Regulations

 

                   The Cyber Shield 365/24/7

Car dealerships are being disrupted by a multi-day outage after cyberattacks on software supplier (June 21'24)

NEW YORK (AP) — Car dealerships across North America have faced major disruptions this week.

CDK Global, a company that provides software for thousands of auto dealers in the U.S. and Canada, was hit by back-to-back cyberattacks on Wednesday. That led to an outage that continued to impact many of their operations on Friday.

For prospective car buyers, that may mean delays at dealerships or vehicle orders written up by hand, with no immediate end in sight. Here’s what you need to know.

What is CDK Global?

CDK Global is a major player in the auto sales industry. The company, based just outside of Chicago in Hoffman Estates, Illinois, provides software technology to dealers that helps with day-today operations — like facilitating vehicle sales, financing, insurance and repairs.

CDK serves more than 15,000 retail locations across North America, according to the company. Whether all of these locations were impacted by this week’s cyberattacks was not immediately clear.

 

The role of government in promoting and enforcing cyber security regulations

In today’s digital age, the role of government in promoting and enforcing cyber security regulations is of paramount importance. With the increasing frequency and sophistication of cyber threats, it has become imperative for governments to actively intervene and safeguard their nations’ vital digital infrastructure and sensitive information. This article delves into the reasons why the government plays a crucial role in ensuring cyber security and the impact of their regulations on protecting individuals, businesses, and national security.

First and foremost, the government has the authority and resources to establish robust cyber security regulations that set standards and guidelines for all sectors. By creating a legal framework, they enforce compliance and hold organizations accountable for implementing appropriate security measures. This helps to create a culture of cyber security awareness and ensures that businesses prioritize the protection of valuable data.

Moreover, governments have access to intelligence and information sharing networks that enable them to identify emerging threats and vulnerabilities. By actively monitoring cyber activities, they can proactively respond to potential attacks and prevent major security breaches. This proactive approach not only protects individuals and businesses but also strengthens the overall resilience of the nation’s digital infrastructure.

Additionally, the government plays a vital role in promoting international cooperation and establishing global cyber security standards. Since cyber threats transcend national boundaries, collaboration between governments is essential to address these challenges collectively. By participating in international forums and treaties, governments can foster information exchange, capacity building, and joint efforts to combat cybercrime.

Furthermore, the government’s involvement in cyber security regulations is crucial for national security. Cyber attacks have the potential to disrupt critical infrastructure, compromise defense systems, and even manipulate elections. By establishing stringent regulations and investing in cyber defense capabilities, governments can safeguard their nation’s sovereignty and protect against potential cyber warfare.

However, it is important to strike a balance between promoting cyber security and ensuring individual privacy rights. Governments need to find the right balance between collecting necessary data for security purposes and protecting citizens’ privacy. This requires transparent and accountable governance, with checks and balances in place to prevent misuse of power.

In conclusion, the role of government in promoting and enforcing cyber security regulations is vital in today’s interconnected world. With the increasing complexity and severity of cyber threats, governments need to take proactive measures to protect their nations’ digital assets. By establishing robust regulations, fostering international cooperation, and investing in cyber defense capabilities, governments can create a safe and secure digital environment for individuals, businesses, and national security.