Learn how to capitalize on The Defender’s Advantage
Understand and activate the six critical functions of cyber defense.DOWNLOAD Organizations around the world are facing increasingly sophisticated cyberattacks – and many security teams aren’t equipped to defend these attacks due to lack of resources, expertise and misconfigured tools.The Defender's Advantage is the concept that organizations are defending against attacks in their own environment. With coordinated cyber defense efforts guided by intelligence, organizations can understand their risks and improve their capabilities to reduce the impact of attacks.Read The Defender’s Advantage, an award-winning book by Mandiant, to learn how to activate the six critical functions of cyber defense, and turn the tables on cyberattackers.DOWNLOAD
Business Email Compromise Jumped 81! Last Year Learn How to Fight It
In recent years, electronic mail (email for short) has become an essential part of our daily
lives. Many people use it for various purposes, including business transactions. With the
increasing dependence on digital technology, cybercrime has grown. A significant cyber
threat facing businesses today is Business Email Compromise (BEC).Why is it important to pay particular attention to BEC attacks? Because they’ve been on
the rise. BEC attacks jumped 81% in 2022, and as many as 98% of employees fail to report
the threat.What is Business Email Compromise (BEC)?Business Email Compromise (BEC) is a type of scam in which criminals use email fraud to
target victims. These victims include both businesses and individuals. They especially
target those who perform wire transfer payments. The scammer pretends to be a high-level executive or business partner. Scammers send
emails to employees, customers, or vendors. These emails request them to make payments
or transfer funds in some form.According to the FBI, BEC scams cost businesses around $1.8 billion in 2020. That figure
increased to $2.4 billion in 2021. These scams can cause severe financial damage to
businesses and individuals. They can also harm their reputations.How Does BEC Work?BEC attacks are usually well-crafted and sophisticated, making it difficult to identify them.
The attacker first researches the target organization and its employees. They gain
knowledge about the company’s operations, suppliers, customers, and business partners. Much of this information is freely available online. Scammers can find it on sites like
LinkedIn, Facebook, and organizations’ websites. Once the attacker has enough
information, they can craft a convincing email. It's designed to appear to come from a
high-level executive or a business partner.The email will request the recipient to make a payment or transfer funds. It usually
emphasizes the request being for an urgent and confidential matter. For example, a new
business opportunity, a vendor payment, or a foreign tax payment.The email will often contain a sense of urgency, compelling the recipient to act quickly.
The attacker may also use social engineering tactics. Such as posing as a trusted contact or
creating a fake website that mimics the company's site. These tactics make the email seem
more legitimate.If the recipient falls for the scam and makes the payment, the attacker will make off with
the funds. In their wake, they leave the victim with financial losses. How to Fight Business Email CompromiseBEC scams can be challenging to prevent. But there are measures businesses and
individuals can take to cut the risk of falling victim to them.Educate Employees
Organizations should educate their employees about the risks of BEC. This includes
providing training on how to identify and avoid these scams. Employees should be aware of the tactics used by scammers. For example, urgent requests, social engineering, and
fake websites.Training should also include email account security, including: • Checking their sent folder regularly for any strange messages • Using a strong email password with at least 12 characters • Changing their email password regularly • Storing their email password in a secure manner • Notifying an IT contact if they suspect a phishing email Enable Email Authentication
Organizations should implement email authentication protocols. This includes: • Domain-based Message Authentication, Reporting, and Conformance (DMARC) • Sender Policy Framework (SPF) • DomainKeys Identified Mail (DKIM)
These protocols help verify the authenticity of the sender's email address. They also
reduce the risk of email spoofing. Another benefit is to keep your emails from ending up
in junk mail folders.Deploy a Payment Verification Process
Organizations should deploy payment verification processes, such as two-factor
authentication. Another protocol is confirmation from multiple parties. This ensures that all
wire transfer requests are legitimate. It’s always better to have more than one person verify
a financial payment request.
Check Financial Transactions
Organizations should deploy payment verification processes, such as two-factor
authentication. Another protocol is confirmation from multiple parties. This ensures that all
wire transfer requests are legitimate. It’s always better to have more than one person verify
a financial payment request.
Establish a Response Plan
Organizations should establish a response plan for BEC incidents. This includes procedures
for reporting the incident. As well as freezing the transfer and notifying law enforcement.
Use Anti-phishing Software
11
Businesses and individuals can use anti-phishing software to detect and block fraudulent
emails. As AI and machine learning gain widespread use, these tools become more
effective.
The use of AI in phishing technology continues to increase. Businesses must be vigilant
and take steps to protect themselves.Need Help with Email Security Solutions?It only takes a moment for money to leave your account and be unrecoverable. Don’t
leave your business emails unprotected. Give us a call today to discuss our email security
solutions.Article used with permission from The Technology Press.
9 NSA Best Practices for Securing Your Home Network
In today's world, technology is ubiquitous, and connectivity is a must. Securing your home
network has become more critical than ever. A secure home network is essential for
protecting your personal data from hackers.From phishing to smishing (SMS phishing), it’s getting harder to avoid a breach.
Individuals often have fewer safeguards in place at home than at work. Yet many are
working from home, which puts both personal and company data at risk.About 46% of businesses saw at least one cybersecurity incident within two months
of moving to remote work.The good news is that there’s no lack of materials on home network security. Many of the
steps are straightforward and can help you avoid a data breach at home.The National Security Agency (NSA) has provided some best practices. These are for
securing your home network. We’ll highlight some of the most helpful tips below.1. Change Default Passwords and Usernames The first step to secure your home network is to change the default login. This means
changing the passwords and usernames of your router and connected devices. Default
passwords and usernames are often well-known to hackers. Criminals can easily use them
to access your data. Changing these default credentials is an essential step in securing
your home network.
2. Enable Encryption
Encryption is a process of encoding information. This is in such a way that only authorized
parties can read it. Enabling encryption on your home network is crucial to protect your
data. It keeps hackers from intercepting and reading it. Most modern routers support
encryption protocols such as WPA2 or WPA3. Ensure that you use the latest encryption
standard, which would be WPA3, used in Wi-Fi 6 routers.
3. Update Firmware
The firmware is the software that runs on your router and other connected devices.
Manufacturers release firmware updates to fix security vulnerabilities and add new
features. Updating the firmware on your router is important to securing your home
network. You can usually check for firmware updates from the router's web interface. You
can also find updates on the manufacturer's website. This is critical to remember because a lot of people never do this. They only see the router
app during setup and rarely go back unless there is a need. Set a calendar item to check
your router app at least once per month for updates.4. Enable Firewall A firewall is a network security system that monitors and controls network traffic. This
includes both incoming and outgoing traffic. Enabling a firewall on your router can help
protect your network. It defends against malicious traffic and unauthorized access. Most
10
modern routers have a built-in firewall. You can typically enable this through the router's
web interface.5. Disable Unused Services Most routers come with a range of services that manufacturers enable by default. These
services can include file sharing, remote management, and media streaming. Disabling any
unused services can reduce the risk of a hacker exploiting them. They often use these
services to gain access to home networks. Only enable services that you need and are
essential for your network.
6. Secure Wi-Fi Network
Your Wi-Fi network is one of the most critical aspects of your home network. Securing
your Wi-Fi network involves several steps. These include: • Changing the default SSID (network name) • Disabling SSID broadcast • Enabling MAC address filtering • Disabling WPS (Wi-Fi Protected Setup) These steps can help prevent unauthorized access to your Wi-Fi network. If you need help
with these steps, just let us know. We can save you some time and frustration and ensure
your network is properly secured.7. Use Strong Passwords Passwords are a critical component of any security system. Using weak or easily guessable
passwords can make your network vulnerable. Ensure that you use strong passwords for
your router and other connected devices. A strong password should be at least 12
characters long. It should also include a combination of upper and lowercase letters. As
well as at least one number and one symbol.
8. Create a Guest Network
Do you have guests, such as your children’s friends, who need to access your Wi-Fi
network? If so, create a separate guest network. A guest network is a separate Wi-Fi
network that guests can use. This gives them access the internet without accessing your
primary network. This can help protect your primary network from potential security
threats.
9. Limit Physical Access
Physical access to your router and other connected devices can be a security risk. Ensure
that you place your router in a secure location, such as a locked cabinet or a room with
limited access. Also, ensure that you disable physical access to the router's web interface.
Especially if you have guests or children who may tamper with the settings.Schedule a Home Cybersecurity Visit Today Securing your home network is essential for protecting your personal data from threats. By
following the best practices, you can ensure that your network is better protected. Want to save some time and have us do the heavy lifting? Give us a call today to schedule
a home cybersecurity visit.Article used with permission from The Technology Press.
.png "Microsoft Visio")
.png "VMware")
