DavidJohnston.org – My Little Place on the Net

Good Password Advice from the FBI

February 22, 2020 by Dave

The Portland office of the FBI released some password advice this week that was picked up by ZD Net. They suggest that just using pass phrases of multiple words, even without changes in case, numbers, punctuation, etc., is a good strategy because they’re easier for people to remember. What makes them good passwords is their …

Dark Reading Attacks/Breachs

Ransomware Attacks Show Little Sign of Slowing in 2021 October 20, 2020

With businesses paying increasingly larger ransoms, attackers remain motivated, say security experts who foresee a rise in attacks.

NSA Reveals the Top 25 Vulnerabilities Exploited by Chinese Nation-State Hackers October 20, 2020

Officials urge organizations to patch the vulnerabilities most commonly scanned for, and exploited by, Chinese attackers.

Trickbot Tenacity Shows Infrastructure Resistant to Takedowns October 20, 2020

Both the US Cyber Command and a Microsoft-led private-industry group have attacked the infrastructure used by attackers to manage Trickbot -- but with only a short-term impact.

GravityRAT Spyware Targets Android & MacOS in India October 19, 2020

The Trojan once used in attacks against Windows systems has been transformed into a multiplatform tool targeting macOS and Android.

Microsoft Tops Q3 List of Most-Impersonated Brands October 19, 2020

The technology sector was also the most likely targeted industry for brand phishing attacks, according to Check Point's latest report on brand phishing.

Trickbot, Phishing, Ransomware & Elections October 19, 2020

The botnet has taken some hits lately, but that doesn't mean the threat is over. Here are some steps you can take to keep it from your door.

7 Tips for Choosing Security Metrics That Matter October 19, 2020

Experts weigh in on picking metrics that demonstrate how the security team is handling operational efficiency and reducing risk.

A New Risk Vector: The Enterprise of Things October 19, 2020

Billions of devices -- including security cameras, smart TVs, and manufacturing equipment -- are largely unmanaged and increase an organization's risk.

Massive New Phishing Campaigns Target Microsoft, Google Cloud Users October 16, 2020

At least three campaigns are now underway.

US Counterintelligence Director & Fmr. Europol Leader Talk Election Security October 16, 2020

The US counterintelligence lead joins a former Europol cyber chief to discuss modern election threats and the benefits of public-private collaboration.