Author: bidsinfosystems

Secure Video Conference Tips

COVID-19 measures are causing organizations to turn to video conferencing applications for remote working. Good cyber security hygiene can help keep out unwanted attendees, protect your employees and secure your data. Here are 9 security tips to help you manage access to remote conferencing platforms.

1. Require passwords for all meetings
   Meeting IDs can be guessed, allowing unauthorized attendees to join even if they have not received an invite. Never share meeting IDs on public fora (including social media) unless you intend the meeting to be open to all. Set a meeting password, which can be communicated by other channels to limit access.
   
2. The chairperson joins first
   The chairperson or host of the conference should control admittance. Use the “waiting room” feature to manage those requesting to join and challenge unknown attendees before starting the conference.
   
3. Lock calls after everyone joins
   Once invited attendees have joined, lock the meeting to keep out unknown attendees.
   
4. Be wary of unknown phone numbers
   Beware of attendees dialing in from unknown phone numbers. Ask them to confirm their identity and expel them from the call if they refuse to do so. Check whether your conferencing application enforces passwords when dialing in.
   
5. Set up alerts when meetings are forwarded
   Establish alerts so you know when meeting invites are forwarded over email to others; check any secondary invitees are legitimate and challenge the forwarding of the invite if not. If necessary, schedule a new meeting with new dial-in details.
   
6. Limit file sharing in the chat
   Restrict file sharing in the message column of a conference call, so that any unknown attendees aren’t able to receive and open private documents, or send malware disguised as an attachment to other attendees of the call.
   
7. Prevent the recording of meetings
   Block any attendees except for the chairperson or host from recording the meeting, or set up alerts to identify which attendee has started recording.
   
8. Use a business or enterprise license
   Your employees need access to effective collaboration tools. Consider buying an enterprise license that allows you greater control over employee use and helps ensure that default settings are secure and meet privacy needs.
   
9. Be a great listener
   Make sure that every attendee speaks at the start of the call, maybe even on video. It helps deal with isolation and identifies unknown attendees.

Source: Here

Cyber Threats

It seems that as soon as cyber security professionals nail down a solution for one threat, new ones emerge. If that isn’t bad enough, industry experts project cybercriminals won’t be hitting the brakes any time soon.

In fact, with society so reliant upon a digital existence, they anticipate these crooks to amp up their exploits. Here are some top cyber security threats to continue to watch out for.

Cloud threats

As the cloud continues to dominate as a game-changing technology, it’s no surprise cybercriminals are actively looking for ways to exploit it. Unfortunately, while we have all come to rely heavily upon the cloud, for many of us, our security practices haven’t quite caught up. Here are a few things exploiters do to gain access to cloud systems:

• Steal passwords.
• Launch phishing attacks.
• Reconfigure settings to allow access or otherwise impair security measures that are in place.
• Search for unencrypted cloud systems for valuable data.

While there are still kinks to work out where security and the cloud are concerned, one thing is clear: as storage and productivity apps continue to migrate from legacy systems, cyber attackers will want to gain access to all the data stored in the cloud.

Artificial intelligence

AI is steadily working its way into various industries and has evolved beyond the novelty stage to everyday use. As a result, industries are amassing tremendous amounts of data, and this is leading researchers to be concerned about cybercriminals finding ways to exploit this technology. As broad acceptance of AI continues, bad actors are expected to start employing the technology to do their dirty work.

• Cybercriminals will look at AI systems as attack targets.
• Exploiters will seek to enlist AI tech to launch their own attacks.
• AI will take advantage of increasingly-sophisticated social engineering attacks and phishing.
• AI could be used to mimic authoritative sources and fool unsuspecting victims.

Ironically, AI is also expected to help boost cyber security efforts, but experts worry it could be a double-edged sword.

Cross-site scripting

Attackers employing this method of attack exploit business websites to execute malicious code into the browsers of unsuspecting victims. According to some reports, over 21 percent of vulnerabilities found by bug bounty programs are cross-site scripting.

Cybercriminals no longer focus their sole attention on large corporations, but are actively targeting small businesses and individuals as well. While smaller targets may not bring the huge payoffs that come from a successful attack on a major corporation, they are typically easier to exploit because these entities don’t have the tools or resources of in-house IT departments to protect themselves.

The good news is everyone can kick up their security a notch by using a private VPN and tightening security on personal data with strong, unique passwords for each account. Here’s a password manager guide to help you decide which password manager app is best for you. Yes, Sticky Password is on the list.

Mobile malware

Mobile malware is expected to continue to be a thorny issue in the cyber security realm, especially as users continue to gravitate towards using their phones as primary computing devices. Human actions play a large role in how hackers craft their mobile attacks.

• Many users habitually connect to unsecured Wi-Fi connections; hackers like to spoof fake networks or target open ones.
• Users often don’t utilize mobile security tools and exploiters will seek to pursue easy targets.
• Exploiters take advantage of smaller screens by hiding phishing attacks, launching them before users can spot clues.

The openness and ease of access to connect have created layers of complacency in our always-connected society. Add BYOD to the mix where employees are using personal phones for work purposes and the potential payoff becomes even more appealing for hackers. To combat this risk, it’ll take behavioral changes and more education about cyber security threats.

Ransomware

Despite the first ransomware event occurring way back in 1989, this threat continues to persist, reaching record levels in 2017. This type of nefarious attack intensified during 2018 and experts predict it will continue to raise its ugly head throughout 2019, especially as people become even more dependent on their files.

Considering how ransomware persists, it’s not surprising crypto-jacking has also emerged as a serious threat. It’s a modern form of bank robbery and the thieves are employing many of the same methods they use for ransomware. Research conducted in 2018 found 33,000 websites were running crypto mining scripts. Notably, a cybercriminal doesn’t even need to be particularly skilled or tech-savvy because crypto-jacking kits can be bought on the dark web for a mere $30.

Conclusion

Unfortunately, online threats have evolved to become a part of everyday life. However, armed with knowledge and tools, both businesses and individuals can better protect themselves in 2019 and beyond. It’s a smart strategy for users to have awareness of current threats and data breaches so that they can employ basic tools to protect themselves and those around them.

Source: Here

Identity Protection