Perimeter

12/18/2018
09:00 AM
Steve Zurier
Steve Zurier
Slideshows
Connect Directly
Twitter
RSS
E-Mail
50%
50%

8 Security Tips to Gift Your Loved Ones For the Holidays

Before the wrapping paper starts flying, here's some welcome cybersecurity advice to share with friends and family.
Previous
1 of 9
Next

Image Source: Pixabay

Image Source: Pixabay

OK, so you're sitting around the fireplace, eggnog in hand, the family's about to open presents, and your brother-in-law wants to know whether he really needs to do the security updates for his Microsoft apps.

Don't get angry – just ask him a few simple questions: Do you brush your teeth in the morning? Does your car need an oil change every 3,000 miles? Are there 24 hours in a day? With any luck he'll get your point.

Kelvin Coleman, the new executive director at the National Cyber Security Alliance, says society needs a change in security mindset.

"We need to change the culture so we get to the point that being smarter with passwords and doing the updates on computer applications are just things that people do naturally," Coleman says. "Everyone agrees that seat belts save lives and keep people safe. There's no difference with computers. It's like making sure the door on your house is locked before you leave for the day."

That's advice no one at your holiday gathering can dispute. And there's more for you to helpfully pass along, courtesy of Coleman, along with Patrick Sullivan, director of security strategy for Akamai, and John Pironti, president of IP Architects and an ISACA member. Their practical tips will provide a safe cyber experience for everyone over the holidays – and all year, too.  

 

Steve Zurier has more than 30 years of journalism and publishing experience, most of the last 24 of which were spent covering networking and security technology. Steve is based in Columbia, Md. View Full Bio

Previous
1 of 9
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
StephenGiderson
50%
50%
StephenGiderson,
User Rank: Apprentice
1/9/2019 | 5:04:47 AM
Complicated Password storage
You know one thing that a lot of people take for granted, is how safe and secure their passwords really are. I'm sure that there has to be a better and safer way to generate and take care of so that it isn't easy for people to hack into all of that data that you have in storage! Sadly, it seems a bit too tedious to make use of an application to help you keep track of all of your passwords than it is to just come up with an easy password for yourself and that's where the security of your home systems fail...
markgrogan
50%
50%
markgrogan,
User Rank: Apprentice
1/3/2019 | 10:35:17 PM
Nothing is impossible
Cyberattacks are becoming ever too common today so it is entirely up to us to protect our online activities as well as those of our loved ones. Sometimes we become nonchalant of our digital habits because we have never been cyberattacked before. However, we need to know that nothing is impossible and attackers do not choose their victims so just about anyone could fall prey.
bmichaud
50%
50%
bmichaud,
User Rank: Apprentice
12/19/2018 | 9:16:44 AM
Thank you
Thank you and perfect Christmas Gift for loved ones. 
szurier210
50%
50%
szurier210,
User Rank: Apprentice
12/18/2018 | 10:34:25 PM
Re: Public Hotspots
Great point, yes myfi can work well instead of using airport wifi. Keep the good ideas coming everyone. I know I didn't think of everything. I think the main point is for people not to feel paralyzed, but on the other hand, know there's potential risk and the threat is real. Too many SMBs and private citizens unconnected with the computer industry still feel that the threat is overblown. That their small bank, insurance company or dentist's office in the Midwest or the South won't get hit. I think as corporate America gets better with security the attackers will prey on small businesses and private citzens. There's just such a reservoir of people and companies for them to hack. Some people will buy in to Cyber Hygiene, others won't. People may just have to learn the hard way. 
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
12/18/2018 | 11:30:48 AM
Public Hotspots
In the past 10 years technology has increased to the point where myfi is a very viable option. Where utilizing a myfi device through your phone carrier or using your phone as a personal hotspot or tether you can easily access the internet without connecting to an "untrusted" public hotspot. Data plan permitting I would recommend this option over connecting to wifi provided by airports or retail stores.
Crowdsourced vs. Traditional Pen Testing
Alex Haynes, Chief Information Security Officer, CDL,  3/19/2019
BEC Scammer Pleads Guilty
Dark Reading Staff 3/20/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
The State of Cyber Security Incident Response
The State of Cyber Security Incident Response
Organizations are responding to new threats with new processes for detecting and mitigating them. Here's a look at how the discipline of incident response is evolving.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-10014
PUBLISHED: 2019-03-24
In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated.
CVE-2019-10015
PUBLISHED: 2019-03-24
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BG_SITE_NAME field in the opt_base.inc.php file.
CVE-2019-10017
PUBLISHED: 2019-03-24
CMS Made Simple 2.2.10 has XSS via the advanced_search.php Name field, which is reachable via an "Add a new Profile" action to the File Picker.
CVE-2019-10010
PUBLISHED: 2019-03-24
Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerability than CVE-2018-20583.
CVE-2019-9978
PUBLISHED: 2019-03-24
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.