4 Cybersecurity Tips from a Threat Intelligence Expert

Americans are spending more time online, but our increasing dependence on technology creates opportunities for cybercriminals to take advantage of gaps in security and personal knowledge.1?

We recently spoke with Geoffrey Floding, SECU Vice President of Threat Intelligence, for some insight and information on keeping ourselves, our families, and our businesses protected from cybercrime. Here, he talks about what to watch for, the possible impact on small businesses, keeping kids safe online, and what IT professionals do for themselves.

Question: What can people do to protect themselves against cybercrime? Can I do anything to protect my family, like an elderly parent?

?Geoffrey: The best anyone can do is to remain vigilant and only click on links from or respond to individuals that the user knows or is expecting communication from. Just like you would not answer a phone call or give information to a stranger over the phone, you should be just as cautious with emails and text messages. It is also important to remember that a legitimate company or service will never ask you for your password.

Question: Are small businesses vulnerable to attacks?

Geoffrey: Small businesses are vulnerable to attacks. A cybercriminal’s objective is to make money, and the last few years have seen a sharp rise in ransomware and other attacks on small businesses. To make matters worse, smaller organizations may not have the ability to hire staff versed in cybersecurity or afford costly security controls. Unpatched firewalls and other devices can leave them susceptible to attack.

Question: How do we start to teach kids about staying cyber-safe today?

Geoffrey: Letting kids know that regardless of the medium, they need to keep their personal information private and not overshare online is essential.?The U.S. Cyber Security and Infrastructure Agency (CISA) has published a list of tips and recommendations for parents with some additional links for more information

Question: Do you do anything differently as an IT specialist that we should also do?

Geoffrey: It seems like you hear about new security breaches every other week and people’s personal information being stolen. Protecting your passwords and sensitive data should be a priority.

• Try to limit the amount of personal information you share with different applications.
• It is important not to reuse passwords across applications.
• Take advantage of a password generator and password vault application. Many options are available for day-to-day and mobile device use. Threat actors hope that individuals will reuse passwords and will try to use a stolen password across the internet in the hope that they can login to different services with stolen credentials.
• Consider using multi-factor authentication to further enhance your security. When setup, even if your password is stolen the attacker may be prevented from accessing your account.

Every October in the U.S. is Cybersecurity Awareness Month. “To build a more resilient nation, everyone—from K through Gray—has a role to play,” said CISA Director Jen Easterly. “We are taking this message directly to the American people because whether you’re a network defender or anyone with an internet connection, we all have a role to play in strengthening the cybersecurity of our nation. Throughout [Cybersecurity] month, CISA will be engaged with communities across the country to promote cyber hygiene—simple but effective ways to keep Americans safe online through basic steps like enabling multi-factor authentication, using strong passwords and a password keeper, recognizing and reporting phishing, and promptly updating software. Together, we will make better cybersecurity a reality.1”

Now that October is behind us and the holidays are coming soon, we should all take extra efforts to keep ourselves and our family members safe and secure by practicing proper cyber hygiene. This is also a good time to take the initiative to become a cyber advocate for your children and your elderly parents and grandparents. ?

Read more about Cybersecurity Awareness Month and this year’s theme from Cybersecurity & Infrastructure Security Agency .

1About the CISA Cybersecurity Awareness Program. Cybersecurity and Infrastructure Security Agency CISA. (n.d.). Retrieved cisa.gov

#Cybersecurity #CybersecurityAwarenessMonth #Cybercrime #Cybercriminals #StrongPasswords #MultiFactorAuthentication #OnlineSafety #OnlineSecurity