Tag: Cyber Security Page 38 of 41

Tips To Stay Safe When Sharing Files Online

On October 16, 2015

October 16, 2015

Online file sharing is a feature that allows the users to send or receive documents in a quick and convenient manner. However, every new technology comes with its own set of challenges. With the increasing cyber threats and data breach incidences, internet safety has become an important concern than ever. Staying alert and following the required safety practices can help to minimize the occurrence of a data breach.

Here are some of the tips that can help you stay safe when sharing files over the internet:

Choose Strong Passwords: Although it is a much known security practice, unsecure or weak passwords are still the cause in most cases of hacking attacks. Ideally, you must create a separate password for each online account that you manage. Make sure your password is at least 12 characters long with a combination of lower and upper case alphabets, numbers as well as symbols. Names, date of births or common legible words are easy to interpret and hence, should not be used as passwords.

Use Two Factor Authentication: Safeguarding your files with a two-step authentication provides an added layer of security. Besides the user name and password, an additional verification element is required to gain access to the files. These may include a one-time password sent on the individual’s phone, verification links sent through emails, answering a security question or performing a biometric scan of an authorized user.

Encrypt Files: Sharing files without proper encryption puts them at risk for a breach. Encryption will make sure that even if a hacker has gained access to your files, he would not be able to open and read it. Only the authorized individuals will have the key to decode the file so as to make it comprehensible.

Avoid Downloading Unknown Files: Apart from the files that you send, you also need to be cautious with the ones you receive online. It is important that you download only those files that are sent from trusted sources. Additionally, you must be more careful while downloading email attachments with .exe, .com, .bat, .zip and .vbs extensions. These may contain malicious codes, viruses or programs aimed at stealing information from your computer.

Install And Run Security Software: You must install and constantly update your anti-virus and firewall software to defend against viruses that you may get from shared files. Even when you download files from a trusted source, make sure you run an anti-virus scan to prevent breach of your important documents stored on the computer.

For more online file sharing tips, you can contact Centex Technologies at (855) 375 – 9654.

Reasons Why Trojan Virus Is Dangerous

By centexitguy

On October 9, 2015

In Security

October 10, 2015

Trojan is a malicious software program designed to carry out unauthorized actions on a computer. These may include deleting system files, modifying, blocking or copying data and disrupting the computer’s performance on various networks. Although Trojans do not have the ability to replicate themselves like a virus, they can allow installation of viruses in the infected computer.

How Trojan Infects A Computer?

Trojan viruses can infect a computer through any of the following ways:

Email Attachments: Trojans can be sent in a disguised form through email attachments. The hacker may send emails claiming to be from credible organizations that compel the users to download attachments.
Game Downloads: The virus can infect a system through free game downloads, specifically from unauthorized sources.
Web Browser Exploits: Trojan viruses can also enter a user’s computer through security vulnerabilities in the web browser.
Messaging Clients: The hacker may send a spam link or malicious code through instant messaging platforms which, when downloaded, infect the device with a Trojan.

Consequences Of Trojan Virus

Here are some of the reasons why Trojan virus can be dangerous:

Steal Identity: Certain form of Trojans jot down whichever key you strike on your keyboard. Thus, they are able to steal your username and password for different websites, known as an identity theft. When the hacker breaches your account, he can get access to your contacts and send them malicious URLs to infect their system as well.
Manipulate Requests: Trojans can also be used to execute a man-in-the-browser attack. When an individual performs any financial operation, the virus may manipulate the amount and account details once the transaction has been confirmed.
Difficult To Detect: Unlike other viruses and worms, Trojans are much difficult to detect and remove from the computer. This is because they are not active unless you are doing something important on your computer, such as logging into an account or transferring funds from your bank account.
Subjugate The Computer: Trojan allows the cybercriminal to take complete control over the infected computer. Hence, they are able to turn on their web cam, disable the mouse or keyboard and even boot up the system.
Launch Another Attack: DDoS attacks can also be carried out through some types of Trojan viruses. The hacker may install other malicious software, damage the system or steal important information stored in the computer.

It is important that you keep your anti-virus software updated to detect any Trojan infection and prevent the hackers from accessing your computer.

Zero-Day Attacks And How To Prevent Them

By centexitguy

On August 6, 2015

In Security

August 6, 2015

A zero-day attack can be defined as an attempt to exploit unpatched software vulnerabilities before it becomes known to the vendor or user. Cybercriminals can initiate this attack with an aim of downloading malware, phishing software or any other code and use it for malicious purposes. As a zero-day attack involves exploiting an unknown flaw in the software, it often creates a ‘vulnerability window’, which refers to the time elapsed between the identification of the exploit and the installation of patch to fix it.

Types Of Zero-Day Attacks

Cyber criminals may launch a zero-day attack in any of the following ways:

Websites: If you have installed flawed software in your system and you visit a malware infected website, the hackers get an easy opportunity to manipulate the vulnerability. The security fault can be present either in your browser files or computer.
Inferior Software: Zero-day attacks can also misuse poorly designed software. These types of applications usually consist of different vulnerabilities that can be easily manipulated for malicious use. Through zero-day attacks, hackers may exploit the common file types in order to steal confidential data or damage the system altogether.
Emails: The attack can also be initiated when a user clicks on a malware infected email attachment. Once the file is downloaded, the bug can exploit any security flaws either in the email software or the computer system.

Tips To Prevent Zero-Day Attacks

Internet browsers and operating systems are most significant trajectories of zero-day attacks. You should frequently update your browser and implement the maximum security settings possible. You can either set your browser to download and install updates automatically or do so manually as soon as they are officially released.
Always stay alert for any updates or security patches announced for the software installed on your system.
If you use an open Wi-Fi network, you are at a higher risk for zero-day attacks. As the information shared over these connections is not properly encrypted, your device may be exposed to various security threats. Make sure you do not download any files or share sensitive information over such networks.
Do perform a regular scan of your system for viruses, malware and other faulty software. You should also clear your browsers cache and cookies from time to time. Changing passwords for all your online accounts, such as email ids, net banking, social media, etc., can also help to prevent against zero-day attacks.

We, at Centex Technologies, provide complete cybersecurity solutions in Central Texas. For more information, you can call us at (855) 375 – 9654.

Steps Towards Online Identity Safety

By centexitguy

On July 29, 2015

In Security

July 29, 2015

Identity theft is one of the fastest growing methods used by hackers to carry out criminal activities. It is an attempt to gain unauthorized access to the personal information of internet users, such as email ids, passwords, credit card details, social security numbers etc. With internet being a crucial part of our everyday lives, the risk for identity theft has also increased manifold. Therefore, it is important that you are aware of the dos and don’ts for keeping your information secure over the internet.

Read on to know some of the essential steps that you must follow to ensure online identity safety:

Create Strong Passwords: Choosing small and easy passwords is like providing hackers the key to your virtual world. These are the most common ways crimes like identify theft are carried out. In order to avoid being a victim of these attacks, you should create passwords that are lengthy, unique and hard to crack. A good password comprises minimum 8 characters with a combination of numbers, alphabets and symbols. You can also use a two-factor authentication method to prevent unauthorized access to your online accounts.
Use Multiple Email Accounts: Using different email accounts for important and spam emails can help to minimize the risk of hacking attacks. For instance, you can create a separate email id for work related conversations, another for personal emails and yet another to be used for unsecure or trivial websites. Thus, spam emails will no longer pose a threat to your sensitive information.
Ignore Emails From Unknown Senders: If you receive an email from an unknown sender, you must not open or download its attachments. These could be malware attempting to infect your system and steal important data. You should also be cautious of emails asking you to enter your personal information or verify password. If you receive an email claiming to be from a bank or any reputed business, make sure you validate its legitimacy by directly contacting the company.
Ensure Secure Network: Before entering your credit card details for internet banking or other ecommerce transactions, look for the padlock symbol in your browser’s address bar. Additionally, the URL of the website should begin with ‘https’ instead of ‘http’. This ensures that the connection is secure and the information you enter will be properly encrypted.
Ignore Pop-Ups: Pop-ups are also a common method of getting users to download malware into their devices. Advertizements that claim to offer a prize or reward usually contain bugs programmed to damage your system, gather important data or simply manipulate stored information.

For more online identity safety tips, feel free to contact Centex Technologies at (855) 375 – 9654.

Wi-Fi Password Sharing Feature In Windows 10 Raises Security Concerns

By centexitguy

On July 16, 2015

In Security

July 16, 2015

With Microsoft taking its last leap with the Windows 10, most tech professionals are looking forward to the new competences added to this operating system. One such feature, that has managed to garner more controversies than commendations, is the ‘Wi-Fi Sense’. Essentially, it is a mode of sharing network information among users. It is designed to allow an easy and quick connection to in-range password protected wireless hotspots within friends. Though Microsoft initially rolled out this Wi-Fi password sharing feature in Windows Phone 8.1, it did not gain much popularity due to its limited user base.

How Does Wi-Fi-Sense Work?

Wi-Fi Sense enables users to share network connection with their Facebook, Skype and Outlook contacts. Working at the back-end, this feature agrees to Wi-Fi terms and conditions, shares log-in credentials as well as connects your friends whenever they are in-range of the network that you want to share. Hence, if any of your friends tries to access your internet connection, Wi-Fi Sense will evaluate his actions and provide access spontaneously, without making the password visible to him. Other users, who are in your contact list and have Windows 10 on their device, will also have their network details shared with you, provided they have enabled Wi-Fi Sense.

Security Risks With Wi-Fi Sense

According to Microsoft’s official sources, the Wi-Fi password is shared in an encrypted form through the company’s internal servers. The user is granted access only to internet connection and not to the files or data stored in your system. However, even the basic sharing of password may compromise the security of your network and make it vulnerable to various hacking attacks. The idea of sharing internet connection can be great for family and friends, but not for corporate settings. Sharing passwords with all your Facebook, Outlook and Skype contacts could also mean inadvertently providing your network information to people whom you barely know.

The best way to safeguard your network from these privacy risks is by taking a few preventive measures. As the feature is likely to be enabled by default in Windows 10 PCs and laptops, make sure you turn it off. However, it is a not a perfect solution for business firms that encourage bring your own device (BYOD) culture. Another option to keep your network out of Wi-Fi Sense is to add the phrase “_optout” to its name. For instance, if your internet connection is named “mynetwork”, you must change it to “mynetwork_optout”.

Considering the security concerns emerging around Wi-Fi Sense, it is recommended that you use 802.1X authentication or implement stricter access controls to your network connection.