Macs Falling Victim to Adware

More and more OS X users are falling victim to various Adware and Spyware infections, though still less so than Microsoft Windows-based computers. Most Adware and Spyware infections happen when Mac or PC users install some computer programs developed by third party programmers, called "Freeware," and some examples are video downloaders, file converters, or used to generate PDF files. If you think you might be a victim you can go to the Bitdefender site for a free Adware removal tool for Mac.

Do Debit Cards Make the Internet More Dangerous?

A new economic study shows that switching people from paper welfare checks to electronic debit cards is linked to a drop in assaults, burglaries, and robberies. Of course, that is good news, but because of the Law of Unintended Consequences, there are other ramifications. Instead of violent person-to-person crimes, skilled hackers are increasingly probing corporations and individuals for gaps in security. A robust industry, generating at least billions of dollars a year, has grown up around hacking. And, the more we move away from cash, the more vulnerable to these attacks we become.

Cybercriminals Take Control of Baby Monitors, Medical Devices and More

Norse, a security start up, has been gathering astounding evidence of hackers taking control of Internet-connected appliances, everything from web cams, baby monitors and medical devices to climate-control systems. What the bad guys really want is the IP address of the device to use for credit card fraud. "We are seeing credit card transactions from baby monitors, DVRs, TVs, printers, medical devices, you name it," says Tommy Stiansen, Norse founder and chief technology officer. "It's coming from all types of industries and from homes." This is leading to the assembling of digital appliances into niche networks, called botnets, under the control of a single operator. Botnets have been the foundation of the cyber underground for more than a decade. Traditionally comprising infected personal and server computers, botnets are the engine that drives multibillion-dollar markets for spam, phishing, account hijacking, identity theft, and denial-of-service attacks. Take a look at some ideas on protecting yourself from botnets.

The Government Shutdown and Cybersecurity Concerns

During the turmoil over the government shutdown, a new CyberTruth –SurveyMonkey Audience poll  found that Americans' concerns about the nation's cybersecurity were heightened. Some 62% of 538 respondents said they felt some degree of heightened concern, while 54% of survey takers indicated feeling some degree less secure with the government shutdown. Security experts did say that with posts undermanned, resulting in defenses being down, there are some concerns that there may be some hidden security breaches that may be hidden and dormant which may be revealed later on.  This gives a whole new meaning to “essential worker” in the digital age.

Protecting Your Email Account

One of the questions I get most often is “how did someone hack my email account?” so I thought this recent Q&A on the subject in the New York Times is very timely. So, what are the basic steps for protecting yourself?

• Make sure your computer’s operating system, security software, and e-mail/Web browser program have all the latest updates and security patches installed.
• Use a complex password.
• Think about using “two-step authentication.” That means you’ll have to enter a code sent to your mobile phone whenever you sign into the account on a different computer. Most of the major mail providers have this protection now available.
• Ignore messages asking for personal info and don’t click on any links unless you know the sender.
• Don’t enter your email or password on a public computer or network.

If someone does get control of your account you’ll need to supply lots of information to verify that you are the real owner of the account including the answers to security questions, listing subjects of recent messages, and the emails of regular correspondents.

Twitter Warns Media to Expect More Hacking of Accounts

Journalists should expect more hacking incidents in the wake of a fake Associated Press tweet that sparked a stock-market sell-off, Twitter warns. "We believe that these attacks will continue, and that news and media organizations will continue to be high value targets to hackers," the network said in a memo to members of the media. AP was the latest victim in a series of hacking cases against news outlets, including the Twitter accounts of CBS News’ “60 Minutes.” Some of National Public Radio’s Twitter accounts were hacked as well, the company said.

To bolster security, Twitter plans to introduce a mechanism called two-step authentication. In addition to a password, the security measure usually requires a code to be sent as a text message to a user’s mobile phone, or generated on a device or in software. This is just another reason to remember to verify everything you read no matter the source.

Two Step Security Coming From Twitter

We have written before about companies like Apple and Google adding two-step verification for their web services. Now, Twitter reportedly is preparing to roll out a two-step security system that will make it markedly harder for hackers to hijack users' accounts. The system will likely require that users who log in from unfamiliar devices enter not just a password, but also a randomly generated code sent by Twitter to a known device, such as a registered phone.

Keeping Your Mac Secure – 13 Tips

Macs have had a reputation over time of being more “hacker-free,” but don’t fool yourself. Hackers would love to have their way with the insides of your Mac and all the information it holds about you. To protect yourself, you might take a look at 13 tips for keeping your Mac secure that were recently featured on the USA Today site. One of the easiest things to do is to keep your Mac updated, but people seem to forget that they need to do that. You should also take a look at FileVault 2, Apple's encryption solution, that can be used to secure your entire hard drive instead of just your home folder. It might not be something you've had much occasion to consider previously, but it's a handy, built-in solution that will protect your hard drive quickly and easily in case your computer is lost or stolen.

Are We Doomed?

It seems like identity theft and cybercrime are always looming. My local police department, yet again, devoted their entire newsletter this week to the subject, and it is a topic that is always there in the background every time I sign up for anything online. But if you really want to be shocked into starting to think more about this issue, read Shelly Palmer’s column on Cyberwar 1.0: China vs The USA … We’re in trouble! As Palmer points out, China is home to some of the most dangerous hackers in the world, some of whom may be government recruited or sponsored, and while America’s high tech community is one of the best in the world, that group is not in charge of cybersecurity. Instead it is American civil servants, whose digital skill sets perfectly positioned them for government work versus Chinese hackers, who are government-sponsored, highly paid (in relative terms) and fully incentivized. Is Palmer being an alarmist? Not really. Cybersecurity is something that everyone talks about, but not much is done in a collective fashion.

Friends Exchanged for Email

Take a look at this article in the New York Times about how easy it is to unwittingly give your friends' email addresses away when you “sign up” for a site. As I read the article I realized that the same thing had happened to me recently when I got an form letter email from MyLife.com from one of the dads from my son's soccer team, who I didn’t really think was suddenly interested in social networking. Thankfully I didn’t sign up, but the article details how in exchange for your email many of these sites are given permission in the fine print to scour your address book for emails to send offers to. As always, be careful what you sign up for, the friends you save may be your own.