Jekyll2023-05-14T15:29:13+00:00https://zombiedogz.github.io/feed.xmlWe provide expert IT support and Application Development servicesEFS Network Management2022-12-27T14:00:00+00:002022-12-27T14:00:00+00:00https://zombiedogz.github.io/Lastpass-Data-Breach<p><img src="https://zombiedogz.github.io/efsnm/img/posts/lastpass.png" alt="Lastpass" /></p> <h1 id="notice-of-vault-data-stolen">Notice of Vault Data Stolen</h1> <p>On December 22, 2022, LastPass, a popular password manager, announced that it had suffered another security incident. According to the company, the incident occurred after another security incident in August 2022.</p> <p>According to LastPass, the incident was limited to a single server, which was promptly taken offline and isolated to prevent further access. The data that was taken was “data that contained basic customer account information and related metadata including company names, end-user names, billing addresses, email addresses, telephone numbers, and the IP addresses from which customers were accessing the LastPass service. “</p> <p>LastPass stated “The threat actor was also able to copy a backup of customer vault data from the encrypted storage container which is stored in a proprietary binary format that contains both unencrypted data, such as website URLs, as well as fully-encrypted sensitive fields such as website usernames and passwords, secure notes, and form-filled data.”</p> <p>LastPass has advised all users to change their master passwords as a precautionary measure. The company has also implemented additional security measures to prevent similar security incidents from occurring in the future.</p> <p>Using strong, unique passwords and a password manager is essential to help protect against password-related security breaches. LastPass is a widely trusted and reputable password manager, and it is reassuring to see the company taking swift action to address the security incident and protect its users.</p> <p>If you are a LastPass user, it is crucial to follow the company’s recommendation and change your master password as soon as possible.</p> <p>In addition to using a password manager, there are other additional steps individuals can take to protect themselves online:</p> <ul> <li>Enable two-factor authentication on all of your accounts whenever possible. Two-factor adds an extra layer of security by requiring you to enter a code sent to your phone or email and your password when logging in.</li> <li>Alway avoid using the same password for multiple accounts. If one account is compromised, the attacker could gain access to your accounts if you use the same password.</li> <li>Do not click on suspicious links in text or emails or download attachments from unknown sources. These could contain malware or phishing attempts.</li> <li>Keep your software and devices updated with the latest security patches and updates.</li> </ul> <p>Taking these precautions and being mindful of your online security can help protect yourself from potential security incidents and keep your personal information safe.</p>EFS Network Management

2022-12-14T14:00:00+00:002022-12-14T14:00:00+00:00https://zombiedogz.github.io/Security-Update-Notice-December<h1 id="security-update-notice---december-2022">Security Update Notice - December 2022</h1> <p>Microsoft has released security updates to address vulnerabilities in certain products. These updates include improvements and fixes to enhance the security of the affected software.</p> <p>Affected products:</p> <ul> <li>Microsoft Windows</li> <li>Microsoft Office</li> <li>Microsoft Edge</li> <li>Internet Explorer</li> </ul> <p>Microsoft recommends that all customers install these updates as soon as possible. Please visit the Microsoft Update website or the Windows Update feature in your device’s settings to obtain the update.</p> <p><a href="https://msrc.microsoft.com/update-guide/releaseNote/2022-Dec">Full Detailed Notice from Microsoft - Decemebr 2022</a></p>EFS Network Management

Security Update Notice - December 2022

2022-12-01T14:00:00+00:002022-12-01T14:00:00+00:00https://zombiedogz.github.io/What-is-BEC<h1 id="what-is-bec">What is BEC?</h1> <p>BEC, or Business Email Compromise, is a type of cybercrime in which a hacker or group of hackers gain access to a company’s email accounts and use them to send fraudulent emails or redirect legitimate emails to steal money or sensitive information.</p> <p>The FBI has a dedicated task force called the Internet Crime Complaint Center (IC3) that investigates and responds to reports of BEC and other forms of internet crime. The IC3 works closely with other law enforcement agencies and private sector partners to identify and track down BEC perpetrators and prevent future attacks.</p> <p>Business Email Compromise (BEC) is one of the top methods bad actors use to compromise businesses. BEC involves a hacker or group of hackers gaining access to a company’s email accounts and using them to send fraudulent emails or redirect legitimate emails to steal money or sensitive information.</p> <p>Other standard methods that bad actors use to compromise businesses include:</p> <ul> <li>Phishing attacks involve sending fake emails that appear to be from a legitimate source to trick the recipient into clicking on a link or providing sensitive information.</li> <li>Malware attacks involve infecting a computer or network with malicious software stealing sensitive data, or disrupting operations.</li> <li>Ransomware attacks involve encrypting a company’s data and demanding a ransom in exchange for the decryption key.</li> <li>Insider threats involve employees or contractors with access to sensitive information who misuse that access for personal gain or to harm the company.</li> </ul> <p>It is essential for businesses to be aware of these threats and to implement strong security measures to protect themselves.</p> <p>Awareness can include:</p> <ul> <li>Educating employees about cyber threats.</li> <li>Implementing strong passwords and two-factor authentication.</li> <li>Regularly updating software and security systems.</li> </ul>EFS Network Management

What is BEC?