This week the Wednesday Bit is about is highlighting some of the mini-series and back to basics cyber security primers I have written. Why? Because yesterday when I was speaking with a long-term client about password hygiene in their organisation, they were unaware I had a Password Primer they could …
Phone number recycling
Here is something new to think about: Meta brushes off risk of account theft via number recycling • The Register I must admit I had never thought about this type of leak in a cyber security plan. I am not sure how relevant this is in the UK, but it …
Social Engineering – Getting the Victim Ready
Last week I wrote about a technically advanced, highly sophisticated cyber-attack in Hong Kong, that netted the attackers $25m – it all started with some simple social engineering pretexting. You may not have $25m in your bank account but here is the state of play of deep fake hacking What …
Continue reading “Social Engineering – Getting the Victim Ready”
“View Document”
Sometimes a cyber-attack is something as easy as adding a button saying “view document” when whale phishing senior people in an organisation. Ongoing Microsoft Azure account hijacking campaign targets executives (bleepingcomputer.com) Your takeaway When was the last time you audited the credentials and associated authorisations of those credentials? If you …
Talk! Talk! Cyber Security Awareness
For those of you who read Smart Thinking regularly, you will realise that this “Wednesday Bit” has been published a day late – the reason was a Cyber Security Awareness talk I gave yesterday at the East Lincs Expo. I delayed publishing, rather than writing an article and leaving it …