Wednesday, July 8, 2020

Internet and Information Safety is Important for Kids too!


Kids these days are instant citizens of the digital world. That’s why it’s important for kids to learn about safe online behavior and what to watch out for. To that end, we’ve created 2 fun books to teach kids about how not to get tricked by cybercriminals using lovable characters and memorable rhymes combined with fun coloring pages and other activities. Download them today to print out some fun art pages for family time – or maybe just to keep the kids busy during your next Zoom.  
Click here to get “The ID Agent Security Team Coloring and Activity Book” with coloring pages and games that teach kids about general online information and password safety. 
Click here to get “Billy the Bull Goes Phishing”, a coloring book to teach kids to protect their personal information and not be fooled by phishing attacks. 
Bit by bit helps client networks run smooth and secure.. visit our website at www.bitxbit.com/texas 877.860.5863

Improving Password Security Improves All of Your Defenses

 

One of the top concerns that many businesses have when making a cybersecurity plan is how to protect themselves from cybercriminals. But that’s not the right thing to have at the top of your cybersecurity checklist. More cybersecurity incidents like a data breach are caused by human error than anything else – and one of the worst errors that many staffers make is creating a terrible password. 
Bad, weak, cracked, or compromised passwords are the bread and butter of cybercrime. Login credentials are currency, especially for privileged users. The fastest, cheapest, and easiest way to immediately improve your cybersecurity is to teach and enforce good password hygiene, from creation to storage.
ID Agent provides several resources to help educate your users on making and storing secure passwords. Our new eBook details some common mistakes that users make when creating passwords. We’ve provided an analysis of several of the biggest password pitfalls of 2020 in our blog. 
Our Password Education Package provides great information about how to make stronger passwords including the whitepaper “Building Better Passwords” – and our Top 50 Worst Passwords List to see how yours stacks up. 
Contact Bit by Bit today for an expert analysis of how you can update your security plan to include solutions like Dark Web ID to mitigate the damage caused by bad passwords and maintain data security compliance to protect your company from threats at a price that doesn’t threaten your budget.  

Bit by bit helps client networks run smooth and secure.. visit our website at www.bitxbit.com/texas 877.860.5863

Cybersecurity News Reports That Insider Threats Have Grown by 47%

 

Insider threats are a top cybersecurity risk for any company, and that risk is growing rapidly. Recently in the news, statistics from the Ponemon Institute report show that insider threats have climbed by 47% over the last two years. Whether they come from malicious sources or just simple human errors, insider threats have the potential to devastate a business
Malicious insiders are finding it very profitable to sell data on the Dark Web, especially COVID-19 healthcare and research data. An expanding market for credentials tempts staffers into taking advantage of lucrative opportunities to sell their access credentials, especially if they’re highly privileged. Over 25% of cyberattacks caused by insider threats come from malicious insiders.
Get the facts about the two main types of insider threats, how to spot them, and how to stop them in our free eBook “Combatting Insider Threats GET IT NOW>>
Unintentional insider threats are less ominous and more common. More than 60% of breaches caused by insider threats are caused by staffers who aren’t trying to damage the company – they just made a mistake. Unfortunately, that mistake can be the door to a data breach that results in your information hitting the Dark Web, plus and expensive and time-consuming recovery, sometimes with regulatory penalties topping it off. 
For your clients, Learning how to define insider threats and having some examples of potential threat vectors to consider can help demonstrate why this is an issue that they should take seriously. Creating an effective defense against insider threats includes choosing a dynamic cybersecurity risk protection platform with multiple solutions that work together to mitigate the risk of a bad actor gaining access to systems and data.  
Malicious insiders will almost always be looking for a way to profit off of the data or access that they’re selling, and they’re most likely to turn to the busy data markets on the Dark Web. With a solution like Dark Web ID, companies can find out fast if their data or credentials appear in Dark Web markets because of our 24/7/365 monitoring and analysis – empowering them to act to solve a problem before it becomes a catastrophe. 
Fight back against insider threats to avoid data disasters with Dark Web ID.

Bit by bit helps client networks run smooth and secure.. visit our website at www.bitxbit.com/texas 877.860.5863

An Ounce of Prevention is Worth a Pound of Cure

 

We’ve all heard this old saw, and it’s still popular for a reason: it’s right. Taking strong preventative measures now to protect your data saves both time and money later. More than 50% of businesses had a data breach in 2020 – and that’s a time-consuming money pit for any company. By taking the right preventative measures now, you can lower your risk of a data breach later.  
One of the most important preventative measures to take right away is updated training about current phishing threats. Right now, cybercriminals are using many new tricks to mount phishing attacks. While your staff may be aware that they shouldn’t open unexpected attachments, do they know not to click surprise links, or open unanticipated PDFs, or accept unverified Zoom invitations? Updated phishing training prepares them to resist these threats and protect your data.  
Coupling phishing resistance training with 24/7/365 Dark Web monitoring guards your data on two fronts. Not only are you preventing bad actors from getting a front door key to your data with improved phishing resistance, but you’re also making sure that cybercriminals aren’t sneaking in the back door either by watching for Dark Web threats. By combining multiple solutions that work together well, you can maximize the ways that your security solutions help prevent data loss – because strong, sensible preventative measures always pay off.

Bit by bit helps client networks run smooth and secure.. visit our website at www.bitxbit.com/texas 877.860.5863

Australian Cyberattacks Prove That Threat Resistance Training is Always a Good Investment

 

Sophisticated cyberattack risks are growing throughout the world, and the attacker isn’t always just a group of opportunistic cybercriminals. A recent explosion of cyberattacks against targets in Australia has been reported to be linked to potentially malicious state-sponsored actors, creating a new level of worry for cybersecurity architects.  
Ransomware has become an even greater menace for Australian companies. Government officials have warned that ransomware that is delivered through spear phishing attacks is suspected to be part of the overall larger attack picture in this wave of attacks. Therefore, it’s clear that frequent, high-quality phishing defense and resistance training is essential to protect a company from ransomware attacks. 
Ransomware is devastating to any business, as was recently demonstrated by two incidents at Australian drinks conglomerate Lion. Systems at the beverage company have been infected twice in the last month alone, freezing essential production and operations technology just as it began to ramp up its post-pandemic production.   
Get tips to help secure a remote workforce fast and insight into the unexpected risks that remote operations bring in our Remote Working Cybersecurity resource package. 
A dynamic solution like  BullPhish ID is the right choice for state-of-the-art phishing resistance training. BullPhish ID’s constantly updated educational tools allow staffers to learn through video and be tested on that knowledge with online quizzes – with pre-made phishing kits including the latest threats available in 8 languages for quick deployment. These features also make it an ideal vehicle for remote training because training shouldn’t stop just because staffers aren’t in the office.  
Updating a company’s cybersecurity stack to boost ransomware defense should always include upgrading phishing resistance training. Dark Web monitoring is a great place to start when constructing a strong cybersecurity defense, but every building block in that defense is important – and improved phishing resistance with BullPhish ID is an easy and affordable block to add.

Bit by bit helps client networks run smooth and secure.. visit our website at www.bitxbit.com/texas 877.860.5863

The Ransomware Tide is Rising Worldwide


No industry is immune to ransomware attacks. Just last week, hackers attempted to breach more than 30 news sites owned by a major US media company in an audacious attempt to deploy WastedLocker ransomware. The hacking gang, known as Evil Corp, was attempting to use this method to infect the systems of employees of over 30 major US private firms using fake software update alerts that popped up after the targeted employees browsed news at the affected news sites.  
It’s common for employees to access non-work websites from their work machines during the workday. Everyone checks a few headlines or looks up the weather. In this case, the employees’ computers were set up to be used as a stepping point into their companies’ networks. There hasn’t been any reported further action, but that doesn’t mean that there wasn’t a successful compromise at one of the targeted firms. 
By 2021, it’s estimated that a ransomware attack will take place every 11 seconds. So, what’s the most common way that ransomware is delivered? Phishing. Whether it’s a malicious link, a spurious PDF, a poisoned SMS, or the old classic infected attachment, ransomware is the threat that really keeps IT staffers up at night.  
A phishing resistance training and testing solution that is consistently updated with the latest threats can help companies effectively defend against ransomware attacks by improving their defense against phishing. BullPhish ID delivers, with easy to understand, engaging training campaigns including video components that clearly explains today’s threats. The simple set-up, grouping, and deployment tools allow you to manage campaigns any way you need to get every staffer enlisted in the effort to guard against ransomware.

Bit by bit helps client networks run smooth and secure.. visit our website at www.bitxbit.com/texas 877.860.5863

Cryptocurrency Scam Raises Business Breach Risks After It Hits Thousands of Victims Worldwide


Cryptocurrency has been revolutionary in creating a new world economy, and it’s the primary vehicle for transactions on the Dark Web. After lots of splashy coverage in mainstream news organizations around the world, the fascination for it has spread from Dark Web markets to average internet users – making them the perfect targets for cybercriminals. 
In a recent scam, cybercriminals were able to pull off a multi-stage operation that exposed the personal data of thousands of users worldwide including 147,610 victims in the UK, 82,263 Australians, 4,149 South Africans, 4,147 people in the US, 3,499 folks in Singapore, 2,491 Malaysians and 2,420 people in Spain, and other countries. 
Data like this is fodder for Dark Web markets. Learn more about them from two experts who will take you inside & get a deck of Dark Web screenshots! TAKE THE TOUR>>
The data was obtained through an interesting style of phishing scam. Users were lured in by an SMS message “starring” a locally famous celebrity (in this case a local journalist) who had “built a fortune” through cryptocurrency trading. Victims who clicked the link were then directed to a unique landing page that had an article quoting a local news personality that dovetailed believably to their region. Each unique SMS link also contained some personal information for the target.  
When the target clicked anything on the fake article landing page, they were then directed to a bitcoin investment platform, where the personal information that had been carried through the process in their unique link was then automatically filled in – and they were asked for their balances in other bitcoin accounts, which were now accessible to the thieves.  
As scams that are hatched through SMS and messaging applications become more common, they can also become an unexpected threat to businesses. Staffers frequently handle personal correspondence on their work devices, especially as more companies employ a “Bring Your Own Device” policy. Interacting with scam messages like these can give cybercriminals an opening to strike. Staffers need to understand that phishing isn’t just an email problem – it’s a problem everywhere.  
Updated phishing training with a dynamic solution like BullPhish ID gets everyone up to speed on potential types of phishing, with easy to understand lessons about common attacks served in bite-sized pieces and delivered through engaging videos to keep lessons memorable, plus online quizzes to test retention. BullPhish ID offers plug-and-play training content in 8 languages, bolstering a business’s cybersecurity by strengthening its best defense against phishing – their employees. 

Bit by bit helps client networks run smooth and secure.. visit our website at www.bitxbit.com/texas 877.860.5863