A recent security research report outlines Remote worker challenges for 2021 Studies Offer Glimpses into Remote Work Security Practices — Redmondmag.com Its report, “The State of Remote Work Security 2021,” was a small study of 287 U.S. IT and cybersecurity professionals, which was conducted via online surveys in January 2021. The report was sponsored by […]
FTC shares an important security update this month regarding dangers of romance scams Caught in a bad romance | FTC Consumer Information Here are some things to keep in mind: If a friend or loved one mentions an online love interest, ask if they’ve met in person. If they haven’t met in person, and that […]
This link is chockful of best security practices to protect against prevalent current risks Spring Forward Into Digital Security With These Tips | PCMag With the ever-changing digital landscape and myriad threats out there, it’s easy to become lax about personal security. Why not take this opportunity to dust off your protection measures and make […]
SANS ISC shares excellent awareness to remove all outdated & non-secure versions of TLS at every security endpoint — whether client or server. Old TLS versions – gone, but not forgotten… well, not really “gone” either (sans.edu) With the recent official deprecation of TLS 1.0 and TLS 1.1 by RFC 8996, a step, which has […]
Apple has just released O/S security updates Apple Releases Security Updates | CISA Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security pages for the following products and […]
The Harvard Business review is an excellent modern HR resource & notes value of publicly recognizing work of employees & team Research: A Little Recognition Can Provide a Big Morale Boost (hbr.org) What did we find? One month after this simple intervention, the social workers who received a letter reported feeling significantly more valued, more […]
An important Open SSL update will help prevent potential for denial-of-service attacks OpenSSL Releases Security Update | CISA https://www.openssl.org/news/secadv/20210325.txt OpenSSL has released a security update to address vulnerabilities affecting versions 1.1.1–1.1.1j. An attacker could exploit these vulnerabilities to cause a denial-of-service condition. CISA encourages users and administrators to review the OpenSSL Security Advisory and apply the necessary […]
Shellcode is a “wrapper” where malicious code can hide to evade virus detection software & to work around O/S controls to inject attacks into a vulnerable system. This is why AV & software updates must be kept up-to-date. Jumping into Shellcode (sans.edu) Shellcode – Wikipedia Malware analysis is exciting because you never know what you […]
New 4.0 version of TCP View is a good resource to identify all TCP and UDP “security endpoints” on the network. It can be helpful in identifying, assessing, and protecting network vulnerabilities TCPView v4.0 Released (sans.edu) TCPView for Windows – Windows Sysinternals | Microsoft Docs TCPView is a Sysinternals’ tool that displays information about […]
Any time a credit card or bank account # is requested for something “FREE” that is a tell-tale sign of a fraudulent scam. FTC: Don’t Fall for COVID ‘Vaccine Survey’ Scams | PCMag Ignore bogus COVID vaccine survey | FTC Consumer Information Scammers are using a new trick to steal your money and personal information: […]
