Tech Tip Tuesday - Password Reuse

Troy Hunt is the Pokemaster of collecting credentials from security breaches. He put together a database of 4,792,153,725 email accounts associated with both known and undiscovered breaches. These accounts have passwords associated with them and the major risk is password reuse. If you use your email address (e.g. Chunkylover53@aol.com) and super complex password to register for a site that has been compromised, you might have used the same credentials for another site (e.g. email, banking, Amazon). Once the bad guys get a hold of your credentials they start checking other sites for access. Have I been pwned is a quick way to check if your email address is associated with stolen credentials. The site does not provide the password associated with the email but it does say what breach it was associated with. Whether you are pwned or not, the 24th day of National Cyber Security Awareness Month is a good reason to change your password. #CyberAware #CSAM #HCSAM

https://haveibeenpwned.com/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday - KRACK Attack

The latest vulnerability to sport it’s own logo and website is key reinstallation attacks (KRACKs). The attack breaks the security of the WPA2 wireless security protocol. What does this mean? If you configured your home or work wireless connection with WPA2 to keep nosey neighbors off your network, you need to reconsider the safety or confidentiality of your network. Patches are available for some of the devices so be sure to update your wireless routers and access points. This attack does require someone to be close enough to your house to connect, so should be weary of people lingering outside your house with a laptop but that’s probably just good advice in general. #CyberAware

https://securingthehuman.sans.org/blog/2017/10/16/28748

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday - Happy Cyber Security Awareness Month!

October is Cyber Security Awareness Month. The National Cyber Security Alliance has numerous resources available to keep you secure. Data breaches and supply chain attacks usually make their way into your news feeds but your home network security hits closer to home. The following link has a handful of suggestions. Can you think of other ways to secure your home network? #CyberAware

https://staysafeonline.org/stay-safe-online/securing-key-accounts-devices/securing-home-network/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Thursday - Linux Checklist

A common strategy of successful CyberPatriot teams is the use of checklists. Checklists should be living documents that are continuously updated. This ensures repeatable success and reinforces lessons learned. This Linux checklist was made by CyberPatriot competitors in 2016. Use it, merge it, replace it, incorporate it with your existing Tactics Techniques and Procedures (TTPs).

https://github.com/Forty-Bot/linux-checklist/blob/master/README.md

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Thursday - CCleaner Malware

Supply chain attacks are in the news again after CCleaner version 5.33 infected with malware. The affected version (5.33) was released on August 15, 2017 and was available up to September 12, 2017. The scariest part was that the software wasn’t a bootleg copy. It was signed with a legitimate certificate. CCleaner has since updated the product but as of a couple of days ago, there were over 730,000 users still using the infected version. If you use CCleaner (which is still a good product) please update it.

http://blog.talosintelligence.com/2017/09/avast-distributes-malware.html

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Thursday - Equifax Breach

If you haven’t heard yet, Equifax unwilling shared 143 million Americans personally identifiable information (PII) (e.g. names, social security numbers, birth dates, etc) with some unidentified actors. You should assume that your information has been compromised.

If you are not planning on applying for loan or new credit cards then you should consider freezing your credit with all four major credit bureaus. The fees are normally $5-10 to add the freeze and another $5-10 to remove the freeze. Currently Equifax is waiving its freeze fee until November 21st. Brian Krebs put together a great Q&A and the comments are always entertaining.

https://krebsonsecurity.com/2017/09/the-equifax-breach-what-you-should-know/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday - National Cyber League 2017 Fall Season

The National Cyber League Regular (NCL) Season runs from November 3-5, 2017. The Regular Season is the portion of the NCL where individuals compete on their own, without the assistance of others, to solve game challenges. The game challenges are aligned with preparatory exercises and allow participants to validate the knowledge and skills they are developing in the NCL Gymnasium.

https://www.nationalcyberleague.org/regular-seaso-fall

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.