Tech Tip Tuesday - Password Reuse

Troy Hunt is the Pokemaster of collecting credentials from security breaches. He put together a database of 4,792,153,725 email accounts associated with both known and undiscovered breaches. These accounts have passwords associated with them and the major risk is password reuse. If you use your email address (e.g. Chunkylover53@aol.com) and super complex password to register for a site that has been compromised, you might have used the same credentials for another site (e.g. email, banking, Amazon). Once the bad guys get a hold of your credentials they start checking other sites for access. Have I been pwned is a quick way to check if your email address is associated with stolen credentials. The site does not provide the password associated with the email but it does say what breach it was associated with. Whether you are pwned or not, the 24th day of National Cyber Security Awareness Month is a good reason to change your password. #CyberAware #CSAM #HCSAM

https://haveibeenpwned.com/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Thursday - Equifax Breach

If you haven’t heard yet, Equifax unwilling shared 143 million Americans personally identifiable information (PII) (e.g. names, social security numbers, birth dates, etc) with some unidentified actors. You should assume that your information has been compromised.

If you are not planning on applying for loan or new credit cards then you should consider freezing your credit with all four major credit bureaus. The fees are normally $5-10 to add the freeze and another $5-10 to remove the freeze. Currently Equifax is waiving its freeze fee until November 21st. Brian Krebs put together a great Q&A and the comments are always entertaining.

https://krebsonsecurity.com/2017/09/the-equifax-breach-what-you-should-know/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Verizon Data Breach Digest

The same folks that bring you the Data Breach Investigation Report (DBIR) just released a new kind of report. The Data Breach Digest provides 18 vignettes that cover the most popular attacks. It’s a great read for aspiring cybersecurity professionals or anyone wanting to know how DNS tunneling can hide malicious traffic in plain site.

http://www.verizonenterprise.com/resources/reports/rp_data-breach-digest_xg_en.pdf

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Security Freeze

This is not your normal TTT but with the recent Office of Personnel Management (OPM), LastPass, Anthem, and the other 350+ breaches this year alone (that we know of), we think it's worthwhile to talk about some ways to protect yourself in the event your personally identifiable information (PII) gets out. Credit monitoring services do not prevent “bad guys/gals” from applying for credit in your name. They let you know it happens. A “security freeze” prevents potential creditors from pulling your credit file, unless you “unfreeze” your file beforehand. Hopefully, the bad guys/gals leave you alone and move on to one of the other 1 billion+ records.

http://krebsonsecurity.com/2015/06/how-i-learned-to-stop-worrying-and-embrace-the-security-freeze/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.