Youths blog

After an intensive personal research and hands on experience working using the National Institute of Standards and Technology (NIST) Cybersecurity framework I spent 200 hrs working on how to Identify, Protect, Detect, Respond and Recover from various systems be it Cloud, Microservice, Hybrid and containerized and orchestrated systems.
I made a few interesting observations and hypotheses, Security loop holes are :
- 40% Human error ( configuration errors, insufficient logging and reporting)
- 30% System Design Flaws
- 20% Human behavior ( social engineering)
- 10% real hacking

Technically there’s a lot you won’t learn in a 3 months bootcamp hence you risk being an enabler of breaches.

Do you know in the USA, for Vendors and companies offering Technology aided
Healthcare that includes Personal Identifiable Information of its Clients, if you record any Security breach that Violates your compliance to Health Insurance Portability and Accountability Act(HIPAA) you enter a public board called HIPAA Wall of Shame?

For a cyber attack to occur there should exist 3 main things:

- The weakness (vulnerability)
- Advantage( exploit)
- Way to communicate ( interface)

Additionally, the Vidar malware is spreading through a phony installer for the Midjourney image generator.

"Spread via Facebook ads, Telegram groups, and dark web forums, the malicious installer purports to offer Midjourney, an AI image generator, but delivers the Vidar infostealer instead,” the researchers write.

Hello there,

Making sure you are safe should be your top priority. With tips to help you recognize and avoid scams, plus the latest security features in place, you can browse confidently knowing your data and information are protected.

How to recognize red flags of a potential scammer.

• Scammers will try to exploit your feelings by posing as a close friend or family member in need of urgent financial assistance.
• They’ll call or email you pretending to be from a bank or government agency to generate a sense of urgency and request personal information or payment.
• They might pressure you to invest or donate with the promise of returns that seem too good to be true.

One way to hide your private information to limit the potential of unsolicited emails or calls from facebook is to utilize the security and privacy settings.

Scammers can use search engines like Google to do research about you. So one way to stop this is to disable the option “ allow search engines to find you” this can be found in the Privacy checkup shortcuts section under privacy and security.

You also have a bunch of other privacy settings like who can see your email or address etc.

Shout out to my newest followers! Excited to have you onboard!

Dinnyuy Clothild, Lambiv Akikea, Glad Liti, Jaguar King

BleepingComputer states, “In our tests, we contacted Mercku via its Zendesk portal and received the above message in place of an automated acknowledgment. The acknowledgment email is a phishing message. Users should not respond to it and not open any links or attachments contained therein. MetaMask is a cryptocurrency wallet that uses the Ethereum blockchain and is available as a browser extension and a mobile app. Given its popularity, MetaMask has often become a target for attackers including phishing actors and crypto scammers.”

The phishing emails contain well-written and grammatically correct messages that appear to come from the Metamask team, informing users that they need to update their accounts’ security settings. The emails state, “Your account will experience temporary inaccessibility until you complete the update. To prevent any inconvenience and potential loss of account access, we kindly request that you complete this mandatory update within the next 24 hours.”

If a customer files a support ticket through the company’s Zendesk portal, they’ll receive an automated response that attempts to trick them into granting access to their Metamask cryptocurrency account.