Jake McCoy’s Post

Data breaches are not a mere inconvenience. They're a direct assault on your reputation. Picture this: Your personal information, once guarded behind what you believed were impenetrable walls, is now a commodity in the darker corners of the internet. It's a chilling thought, but one that underscores the critical importance of understanding the anatomy of cyber attacks. Hackers are evolving, employing more sophisticated methods to bypass traditional security measures. It's no longer enough to set and forget your cybersecurity protocols. The landscape demands a proactive, cunning approach to outsmart those with malicious intent. But here's the silver lining: Knowledge is power. By demystifying the mechanics behind these breaches, we arm ourselves with the ability to predict, prepare, and protect. It's about crafting a strategy that's not just reactive, but preemptive. Share your thoughts or experiences on how you've adapted your cybersecurity strategy to stay one step ahead.

𝗝𝗼𝗶𝗻 𝗼𝘂𝗿 𝗳𝗿𝗲𝗲 𝘄𝗲𝗯𝗶𝗻𝗮𝗿 𝗼𝗻 𝗰𝘆𝗯𝗲𝗿 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗳𝗼𝗿 𝘂𝘁𝗶𝗹𝗶𝘁𝗶𝗲𝘀! Attacks on Operational Technology and industrial control systems are becoming more common and sophisticated. They have the potential to cause significant commercial damage and compromise public safety. This webinar will delve into the unique challenges faced by the utilities industry and discuss the latest cyber security solutions to safeguard our critical national infrastructure. Don't miss out on your opportunity to gain insights and strategies from industry experts. Register today! https://lnkd.in/eUksbQDn

Next april 30, join Thales' webinar about cybersecurity for utilities, in which you can learn how to address the cybersecurity risks for OT and the best practices for avoiding or minimizing these risks. Register here https://lnkd.in/eUksbQDn Thales Cyber Solutions #cybersecurity #webinars

These cheap mistakes will cost you dearly. I say they are cheap because they can be avoided. Let's see. You have a business, that's beautiful. You have accounts, that's normal. You have a brand, that's a plus. You have a gadget, that's cool. But what don't you have? Security! Scams, cyber threats, ransomware are on the rise. This isn't to scare you but to raise awareness. You can't be oblivious about the reality but you can be cautious and prepared to counteract attacks. Here are four ways to protect your data. 1) Backup your data. 2) Endpoint protection. 3) Patch (Be up-to-date). 4) Multi Factor Authentication (MFA). I want to take out a moment to thank Nadja and Ibekwe Obinna. I've got to learn a lot just by following their posts and their comments are always enriching. P.S. Check the comment section for a breakdown on each point.

Hey there, guess what? The SEC just dropped a bombshell. New cybersecurity requirements! You gotta disclose stuff like prevention strategies. You also need to report breaches promptly. Oh great! Yeah, one more security compliance reg to worry about! So, you're probably thinking, "How does this affect me?" Well, hold on to your hat. Data Dilemma: SEC's watching your data like a hawk. Lock it down tighter than your grandma's secret apple pie recipe! Notification: If there’s a breach, you gotta shout it from the rooftops! No hiding under your desk pretending it didn’t happen. Penny for Your Thoughts: Your cybersecurity plans? They better be solid gold. Forget spare change; it’s time to invest in Fort Knox-level security. No More Excuses: Ignorance won’t cut it. "I didn’t know" won’t save your cyber bacon. Stay informed, my friend. Remember, this ain’t your grandma's SEC anymore. Get your cyber game face on. Want some help? Let’s tackle this challenge together! DM me if you would like to learn more. #cybersecurity #regulations

Cisco’s Talos Incident Response team just released data showing the top security weakness in attacks they investigated. Can you guess the top culprit? It was users accepting unauthorized MFA push notifications, which accounted for 25% of their Q1 investigations. How does it come to that? It starts with attackers stealing valid credentials. In the world of infostealers, finding a set of compromised credentials is easier than finding your next Netflix binge. Attackers then take those credentials and log into your account. When MFA push notifications are enabled, the attacker continues to log in until the victim furiously smashes their finger on the "accept" button so it will stop annoying them. And then, voila, the attacker has access to the account. As you can see, nothing about the above is sophisticated. Cyber attacks don’t need to be cutting-edge to be effective. ------------------------------ 📝 My newsletter is the easiest way to stay updated in cybersecurity. 👆Sign up with the newsletter link at the top of this post.

🚒 After a cyber attack a quick response is critical. The sooner you take action, the lesser the damage will be. Unfortunately, many social & sustainable enterprises are surprised by a hack. Panic and chaos delays effective action, while you desperately try to call your IT partner. 📋 A Cyber Response Plan provides you with a step by step guide for getting back in business quickly after a cyber attack. Clear instructions will not only prevent panic and chaos but also save you a lot of valuable time. 👉 Are you ready to scale up your security?

MFA fatigue? No never not me never happened 😂 If you take a look at your own org, what tooling/practices do you have in place that are creating these type of 'alert fatigue' behaviors? Humans are one of the top compromisable vectors in organizations; there's just too much going on for any of us to be 'perfect'. Does anyone have any strategies they've seen be successful to minimize this type of fatigue? Would love to hear about it in the comments. #alertfatigue #mfa #cybersecurity

This is what makes the implementation of features like number-matching MFA and risk-based conditional access critical. Number-matching prevents accidental acceptance and risk-based sign-in evaluation allows IAM tools to intelligently identify and reduce the occurrence and/or impact of these events. Microsoft Authenticator and Microsoft Entra combine both of these capabilities in a strong IAM tool suitable for all kinds of organizations. Questions? Don't hesitate to reach out!

Woah! So apparently the TOP security weakness is not at all sophisticated. Anyone reading this post could do it. 1️⃣ Buy someone's credentials online. 2️⃣ Try to login to their account over and over (like every minute). 3️⃣ The victim (likely on a first date with their future sweetie pie), gets so fed up with the constant *ding**ding**ding* on their phone, that they accept the security notification (and then blush slightly and say, "Sorry about that." before taking a big bite of haggis). Well done cybercriminal, YOU'RE IN!!! 😼 ------------------------------------------- NOTE: I do love how Microsoft Authenticator stops this from being possible by requiring you to not only accept the sign in request, but also to type in 2-digit code. This means, with an unobtrusive two digit code requirement, Microsoft Authenticator beats the current top security weakness. I'm a fan of both Microsoft and Google Cloud services. There are pros and cons to both. But Microsoft Authenticator gets a 👍👍. Thanks for yet another solid post Jason Rebholz. 🤘