Compromised cloud accounts leading to Cryptocurrency mining

Google, the business subsidiary of tech giant Alphabet Inc, has released a report saying that the compromised cloud accounts were leading hackers to mine cryptocurrency that could prove as a double threat to customers.

In its report titled “Threat Horizon”, Google’s team of security specialists claim hackers were compromising cloud accounts used by customers for storing data and files later for data continuity purposes.

These then not only act as a mining resources to hackers, but also they could use the storage space to conduct malicious attacks such as malware spread and what not.

hackers

As most of the cloud service providers were using super-vulnerable 3rd party software, they are being easily targeted by hackers spreading cryptocurrency mining software.

Surprisingly, Google’s Threat Horizon report claims that hackers were found downloading crypto mining software within 22 seconds of an account compromise.

So, the only way to protect from such attacks is to use a strong password that is a mixture of number and alphabets tucked with 1-2 special characters. And then use a 2FA to add an extra layer of security protection to safeguard an online account.

Note- Google mentioned in its 32 page report that APT28 aka Fancy Bear, funded by Putin led government, compromised over 12,000 Gmail accounts. However, their attempts to gain passwords from users was blocked by the Google Photos service provider, thus neutralizing the phishing email attack that mainly focused on people living in UK, US and India.

The post Compromised cloud accounts leading to Cryptocurrency mining appeared first on Cybersecurity Insiders.

November 26, 2021 at 10:57AM

Read More

Two serious vulnerabilities detected on Windows 10 and Windows 11 Operating Systems

Microsoft has issued a warning to its Windows 10 and Windows 11 users against two serious zero day vulnerabilities that have to be fixed yet. It is regarding an OS feature called Microsoft Installer aka MSI that is exhibiting repairing or updating issues with anti-malware apps after the installation of KB5007215 update.

Currently, the Satya Nadella led company’s team of engineers are working on the update and are busy finding a fix to the vulnerability.

The second issue is related to users who are using the beta version of Windows 11. It is found that Intel’s Smart Sound Technology(SST) is causing a blue screen of death for some users. And so the Windows OS developing giant is urging users not to manually update the media related feature or take assistance of Media Creation Tool until further notice.

As Intel’s SST is used in all modern PCs, the issue is termed to be serious and has the potential to affect help of computer users worldwide.

Meanwhile, a recent survey conducted by Lansweeper, an IT Asset Management company from Belgium reports that less than 1% of PCs are functioning on Windows 11 Operating system and that includes only those belonging to individuals using the PCs on home networks.

Rest of the PCs are running on the most popular Windows 10 or the other extinct XP, Win 7 and Win 8 Oses.

One of the reasons why most PC users are ignoring the latest OS is due to the mandatory requirement that they need to upgrade their PC to special hardware to run the Windows 11 OS. And presently, none of the business operators are interested in upgrading their PCs, software or hardware as they are busy focused on bringing back their businesses on profits track.

The post Two serious vulnerabilities detected on Windows 10 and Windows 11 Operating Systems appeared first on Cybersecurity Insiders.

November 26, 2021 at 10:54AM

Read More

Ransomware threat to elders and youngsters falling for Instagram Cyber Scams

In the latest report released by Avast, it was revealed that ransomware spreading hackers were constantly targeting elderly people and youngsters were being lured into Instagram or TikTok scams.

As most of the aged community, i.e. those above 65 are using desktop or laptops, hackers are seeing them as easy prey to spread ransomware, bank related customer support scams and Trojans and botnets through video calling apps.

Security researchers from Avast Threat Labs found that it’s not only the elders who are being targeted. But also the young generation between 25-35 are falling prey to Instagram and TikTok related dating or phishing scams where threat actors send fraudulent emails to victims stating that their videos will be deleted from the platform as they violate copyrights or need to be eligible for verification. So, they are being asked to click on the email links that lead them to banking frauds, identity theft when personal details are revealed, and sometimes download spying malware to their systems.

Mostly, there is a difference in the usage of sometimes devices between youngsters, millennials and elderly groups. And this is where cyber criminals are smartly targeting these groups with scams by adopting the current trending topics or usage trends.

Between January and April this year, the tech support team of Avast blocked over 1.46 million ransomware attacks on desktops.

Coming to threats targeting mobile devices, the company says that it blocked over 3 million adware attacks, 7.2 million banking Trojans, and over 1.8 million harmful downloads leading to social engineering attacks from January to October 2021.

FluBot malware that was spreading widely from west to east was also blocked between Aug-Sept this year and the released stats say that the malware detecting firm blocked over 35,000 attacks on an average globally.

The post Ransomware threat to elders and youngsters falling for Instagram Cyber Scams appeared first on Cybersecurity Insiders.

November 25, 2021 at 08:33PM

Read More

How to Protect Your Business Data with Cyber security

 

 

Source https://pixabay.com/photos/laptop-desk-workplace-computer-5842509

5 Cyber Security Best Practices to Protect Your Business Data

Today, any company can fall victim to cybercrime, which has become a major problem around the world. Cyber attacks become more sophisticated every year. That’s why large, medium-sized, and small businesses need to become more proactive in their approach to cyber security. They should create cyber security policies and regularly update security programs. 

Cyber security is important if you want to efficiently operate your business, and it’s also critical for protecting your clients’ information. Wondering how your business can avoid being a victim of a cyber-attack? Which areas need to be prioritized? Here are 8 cyber security best practices you can begin to implement today to keep your business data secure. 

Educate Your Employees

It’s easier to prevent malicious attacks and data breaches than recover from them. A single mistake from an improperly trained employee can ruin the entire security system. So it’s important to teach all your employees that have access to the network how to identify possible security threats and train them to use cyber security best practices.

Create a cyber security policy and make sure that all employees know that information security is a priority. As cybercriminals become savvier, company’s security policies should be constantly evolving. It’s vital to have regular updates on new protocols and regularly train employees on how to better deal with new threats when they occur. Educating your workforce is one of the most powerful steps you can take toward protecting your business environment.

Install Anti-malware Software

Install firewalls and anti-virus software on each computer within your company to combat cyber attacks and make sure you regularly update it. Keep in mind that although Windows computers are more likely to encounter a malware attack, Macs are not immune. That’s why you need security beyond what’s built into macOS. A smart decision is to give your Mac a regular scan to detect malware using tools that offer antivirus protection. For example, CleanMyMac X Protection module can help you stop macOS-specific virus threats and delete browsing data on demand. 

Back Up Your Data

Your business data is one of your most valuable assets. Data breaches may happen regardless of your precaution, so it is recommended to continually back up all critical business data, including databases, Word documents, electronic spreadsheets, financial and human resources files, as well as accounts receivable/payable files. You should also make sure that all backups are stored in the cloud, frequently updated, and thoroughly protected and encrypted. If your system is hacked, you can use backups to restore your data.

Create a Strong Password Policy

According to research, 63% of data breaches happen due to stolen, lost, or weak passwords. You need to require your employees to use longer passwords of 15 characters at a minimum. They should consist of numbers, uppercase and lowercase letters, and symbols. It’s also recommended to change passwords every 60 to 90 days. Urge employees not to share their passwords with anyone who is not authorized to access your systems.

Security professional recommends using two-factor or multi-factor authentication (MFA) when accessing sensitive data because it provides an extra layer of protection. MFA requires several methods of authentication to verify a user’s identity for login. To ensure secure user sign-ins, you should use a combination of different elements, for example, like security questions, emails, text messages, biometrics, or time-based security codes. 

Monitor Third-party Access to Your Business Data

You need to control third-party access to your data – business partners, subcontractors, remote employees, vendors, and suppliers. You need to monitor their actions while accessing your data because it may entail a higher risk of insider attack. Moreover, third-party access may open the way for hackers and malware to enter your system. You need to be aware of who connects to your company’s network, when, and why.  

 

If you take preventative measures, you can improve cyber security and help your company avoid a disaster.

The post How to Protect Your Business Data with Cyber security appeared first on Cybersecurity Insiders.

November 25, 2021 at 11:11AM

Read More

Britain introduces IOT Device Security Legislation

A new legislation was introduced in the Britain’s parliament last week aiming to better protect IoT devices from sophisticated hackers. Dubbed as “The Product Security and Telecommunications Infrastructure(PSTI) bill, it requests those involved in the manufacturing of Internet of Things such as smart TVs, CCTVs, smart phones and fitness trackers; to follow basic standards while offering service and products to consumers.

It includes creating an unbiased reporting platform where public could report vulnerabilities in a timely manner, banning the use of passwords that are used worldwide by default, and urging the companies to be transparent while addressing fixes to detected security flaws. And last but not the least; maintain digital records that help in confirming whether the company is complying with the laws related to data privacy & security prevailing in the region.

Now, comes the big question…what if companies indulging in the manufacturing of IoT cannot comply with the newly planned Britain’s digital law..?

Well, it’s simple….the company that doesn’t comply with the above stated laws will face heavy fines, based… its annual global turnover. And it could be between £20k per day as well.

The regulatory authority will have the power to issue a ban on the business that doesn’t adhere to its law and can also issue orders for the recall of the products and their sale in Britain and sometimes across Europe.

According to a report released by privacy advocating firm which?, an increase of 50% was witnessed in using IoT devices since 2019 with nine among 10 homes in UK using such gadgets to fulfill their day-to-day needs and chores.

Predictably, there has been an equal amount of increase in cyber attacks on connected devices, with over 12,000 cyber attacks targeting them every week.

Dr. Ian Levy, the Technical Director of NCSC, stated the bill will help in blocking technical attacks on gadgets such as phones, baby monitors, doorbells, thermostats, smart TVs and dishwashers.

Hope it does!

The post Britain introduces IOT Device Security Legislation appeared first on Cybersecurity Insiders.

November 25, 2021 at 11:01AM

Read More

Samsung offers Mobile Security protection as below

Samsung released a summary of how it protects its smart phones from cyber attacks and the content is as follows-

From backdoors- As the Korean giant creates, validates and manufactures its computing devices all on its own, its every piece of hardware, wiring and firmware is securely drafted at its high secure R&D plants & factories in the world. So, the question of unauthorized backdoors being present on any of its devices gets eliminated.

Password compromise- Almost all devices offered by Samsung are equipped with innovative biometric authentication technology such as fingerprint, IRIS, and password secure. The entire tech is being called as Samsung Pass that helps users log onto the device with safety. Backing it up is Knox Vault technology, where a secure processor operates on a separate note along with the main CPU unit isolating data related to biometrics from the main processor and keeping it secure from spying eyes.

Wi-Fi security- Samsung Secure Wi-Fi feature encrypts all the O/G and I/C traffic and disables tracking websites and applications and alerts a use if any permission is required for access. Hence, it allows the user to browse safely on publicly available connections with the concern of data leaks.

Phishing Attacks safety- Samsung Smart Phones are offered with McAfee protected Device Care feature that constantly scans for any cyber threats and suspicious activity and puts an alert to the user about any malevolent behavior.

Zero Day Vulnerability- Samsung Knox feature allows users to protect their device in real-time and secures the phone from any kind of unauthorized attempts. Its multi-layered defense propelled Secure Boot helps in blocking malicious attempts from being exploited and locks up data on its sensitive apps such as Samsung Pay, Samsung Pass, Secure Folder or Samsung Health.

So, why think much about security? Gift yourself a Samsung device from this Thanksgiving 2021 or Black Friday 2021 deals.

The post Samsung offers Mobile Security protection as below appeared first on Cybersecurity Insiders.

November 25, 2021 at 11:00AM

Read More

Teleion, a Minority-Owned Business, Awarded Best Place to Work in Washington State for Second Year

SEATTLE–(BUSINESS WIRE)–Teleion has been recognized as one of Washington’s 100 Best Places to Work by Seattle Business Magazine. This is the second consecutive year Teleion has been selected as a best place to work in the mid-sized company category – moving to 12^th best in 2021.

“Despite the challenges of the last two years, focusing on being a team member oriented culture has remained our primary focus,” said Ryan Janzen, Managing Partner. “It’s thrilling to see our team members agree and share our commitment to a culture that fosters balance, leadership and respect for one another.”

Teleion is a professional services firm with operations headquartered in Seattle, and team members throughout the US. In 2021, Teleion has increased its overall headcount by more than 35 percent, and is continuing to grow across all its practice areas. Teleion implements, operates and leads operational and IT programs for some of the largest and most well-known companies in the world. Teleion team members bring deep industry knowledge to its customers and support team members through an emphasis on learning and growth.

“Teleion gave me the opportunity to step into a challenge that aligned perfectly with my career goals,” said Troy Graham. “The way Teleion shares information, provides me with mentorship and growth opportunities, and continues to ensure that I stay challenged in my career makes me feel like there are endless possibilities for success.”

Teleion’s selection for this recognition is based on an employee survey sponsored by Seattle Business Magazine. All responses are anonymous and based on eight major categories, including leadership, culture and benefits. In 2020, Teleion was selected for the first time as one of the top 100 Best Places to Work – placing 20^th in the mid-sized company category.

Teleion, LLC, a strategic and professional services company, was founded in 2008. Teleion employs over 100 team members across three key practices. One of the largest privately held companies in the Puget Sound region, Teleion builds long-term relationships with its customers by bringing value through a commitment to excellence, senior practitioners and a focus on its vertical markets. Teleion’s professional services practices include Digital Marketing Operations, Analytics and Insight, and Cybersecurity and Compliance. For more information about Teleion visit www.teleion.com.

The post Teleion, a Minority-Owned Business, Awarded Best Place to Work in Washington State for Second Year appeared first on Cybersecurity Insiders.

November 25, 2021 at 09:08AM

Read More