Tag Archive for: practices

5 Security Experts Share Best Practices to Prevent Zero-Day Attacks


Imagine you accidentally leave a rarely-used window open in your home.

You don’t think anything of it until you notice things going missing. Thieves have been sneaking in and out of your house for days, availing themselves of your stuff using that neglected window. 

Read more

Facebook, Instagram Blasted for ‘Lame’ Security Practices


Fraud Management & Cybercrime
,
Social Media
,
Video

Account Takeover Claims Grow 1,000% as Scams Hit People, Banks, Government Agencies

Watch this video with Information Security Media Group’s Anna Delaney on how hacking and identity theft are hitting millions of Facebook and Instagram users.

More than 4 billion people have accounts on Facebook and Instagram, making them the most popular social media platforms on the planet. Members share photos, life events and opinions to attract followers, build businesses and stay connected with friends and family. But there’s a darker side to these social platforms.

See Also: Live Webinar | Navigating the Difficulties of Patching OT

Social media account takeover complaints to the Identity Theft Resource Center jumped more than 1,000% last year. Theft, impersonation and fake accounts on Facebook and Instagram – social properties of Meta – are fueling a massive increase in scams and illegal activity. In fact, federal authorities say about 50% of account takeover cases today originate on social media.


“We have all these platforms, but who’s taking care of your security? Who’s taking care of your privacy? I don’t think anybody really is. Frankly, I think the efforts are lame.”


– Chris Ingram, author, former radio personality and Facebook identity theft victim

“These social media scams are bigger parts of underlying scams we’re seeing out there,” says Stephen Dougherty, financial fraud investigator with the U.S. Secret Service. “We are seeing…

Source…

Employee Security – 7 Best Practices to Consider


In the first installment of our cybersecurity best practices, we explored how individuals can safeguard their personal data. But just as vital to security is employee security awareness and protecting important information within an organization. One wrong move by employees could have major repercussions not only for themselves but also for a company’s reputation and clientele.

Part two delves into the steps employees should take to ensure protection: from password, email, and mobile device precautions–all necessary employee security to prevent vulnerable exposure in the workplace.

1. Passwords

Good for everyday security users

The same set of rules from the first part of the series apply with employee security as well. 

Recommendations

Don’t set your passwords for your work accounts to things like “lovemyjob123” or “techguy83”. This will only to lead to poor security and a larger attack space for your work account. Furthermore, don’t share passwords across accounts–especially between personal and work. 

Like in part one, you should use a solid password manager like Bitwarden. Password managers can handle all of your work accounts as well as generate secure passwords for you.

2. Email Use

Good for everyday security users

Using personal email for business activities–and vice versa–is the wrong thing to be doing. 

As an employee you are more likely to be the target of phishing scams and malicious emails at your company email address. For your personal email address, you are more likely to receive the “Hot Girls in your area” or “Low-cost Viagra” spam email. 

Both of these kinds of emails are malicious and obviously not desirable–and can cause serious damage in both environments.

3. Mobile Devices

Good for everyday security users

Many organizations have a “Bring Your Own Device”–or BYOD–employee security policy in place for employees to use their personal cell phones for work. If this is the case, there are likely many policies in the company’s handbook for acceptable use on these devices.

It should go without saying, but it is going to be said: “Regardless of company policy, DO NOT put company information on your personal device.Source…

Google appeals against India’s fine over ‘unfair’ business practices on Android • TechCrunch


Google said on Friday it has appealed against the Indian antitrust body’s order against the firm over alleged anti-competitive practices surrounding Android mobile devices in the key overseas market.

The company has approached the National Company Law Appellate Tribunal (NCLAT), the nation’s appellate tribunal, to appeal against the Competition Commission of India’s October order, in which the watchdog fined Google $162 million.

“We have decided to appeal the CCI’s decision on Android as we believe it presents a major setback for our Indian users and businesses who trust Android’s security features, and potentially raising the cost of mobile devices,” a Google spokesperson said in a statement.

“We look forward to making our case in NCLAT and remain committed to users and partners.”

In October, the CCI, which began investigating Google three and a half years ago, said that it finds Google requiring device manufacturers to pre-install its entire Google Mobile Suite and mandating prominent placement of those apps “imposition of unfair condition on the device manufacturers” and thus was in “contravention of the provisions of Section 4(2)(a)(i) of the Act.”

Days later, the CCI hit Google with another $113 million fine for allegedly abusing the dominant position of its Google Play Store and ordered the firm to allow app developers to use third-party payments processing services for in-app purchases or for purchasing apps.

India is a key overseas market for Google, which has amassed over 500 million users in the South Asian market. The company, which has poured billions in its India business over the past decade, has pledged to invest another $10 billion in the country over the next couple of years.

Source…