Center for Security Studies and Cyber Defense

Happy Thanksgiving from the CSSCD! 🦃🍂

‘The global networking giant Cisco released software updates addressing a critical 10 out of 10 vulnerability affecting Ultra-Reliable Wireless Backhaul (URWB) access points, which are commonly deployed in industrial environments, such as manufacturing plants. The bug allows unauthenticated, remote attackers to inject commands with root privileges.’

MC2 Data is an incredibly popular background check firm. Despite the strict federal regulations that such firms are supposed to comply with, MC2 Data exposed sensitive information by leaving their 2.2TB database passwordless and easily accessible online.
Follow the link below for more! https://cybernews.com/security/us-mc2-background-check-data-leak/

Today, we would like to introduce Jordan B.

Jordan is apart of our analyst team for the CSSCD.

🔹What inspired you to pursue cybersecurity?

"Cyber Security has always been a field I am fascinated by and have a strong interest in because it allows you to continually learn new skills, concepts, and technologies to keep people protected from evolving threats in our digital world." - Jordan B.

🔹If you were a wrestler what would be your entrance theme song?

"Voices by Randy Orton." - Jordan B.

⭐Stay tuned to meet the next member of our team!

As you clamor to get tickets, it is important to keep scams in mind. Ticket scammers try to take advantage of people’s desperation for event tickets by using social engineering to scam them in numerous ways.

Access the full article at the link below!

https://hubs.ly/Q02tP0XS0

Happy Earth Day! Let's all come together to appreciate the beauty of our planet. Here are 5 technologies that have benefited our planet:

1. Carbon Capture and Storage - an emerging technology that separates carbon dioxide from other gases that industrial processes generate.

2. Solar Glass - a material used for making windows and other glass surfaces that capture the energy of the sun and convert it into electricity.

3. Smart Grids - track and decrease overproduction and energy waste, an improvement from current grids.

4. Environmental Sensors - tracks water and energy use, pollution, air quality, etc.

5. LED Lighting - consumes much less power compared to iridescent bulbs.

🌎💫 https://www.doforms.com/technologies-that-help-environment/

Roku users should check their email and their account to ensure that this exploit has not affected them. Any unauthorized purchases made on their account will be refunded by Roku, but it is vitally important that the users get in contact with Roku to make the refund happen. Users should also ensure they reset their passwords to a safe alternative, and make sure that other accounts are not being compromised, especially accounts that use the same password as their Roku account.

follow the link below for more!

https://hubs.ly/Q02ttGpp0

Antivirus software is extremely important for keeping your computer safe from various kinds of malware distributed by threat actors on the internet. The goal of an antivirus is to ensure that no vital information or functionalities are compromised on your computer. However, antivirus' cannot do this on their own - they do need proper setup and understanding in order to properly protect your computer.

Follow the link below to learn more!

https://hubs.ly/Q02tmj8-0

Today, we would like to introduce Brendan T.

Brendan is apart of our analyst team for the CSSCD.

🔹What inspired you to pursue cybersecurity?

"The ability to help people in a rapidly growing field that interests me." - Brendan T.

🔹If you were a wrestler what would be your entrance theme song?

"live wire- Motley Crue" -Brendan T

⭐Stay tuned to meet the next member of our team!

💡'Man in the Middle'

"You might have heard of the phrase ‘Man in the Middle’ when referring to cybersecurity vulnerabilities and breaches, and believe it or not, Man in the Middle (MiTM) attacks usually involve a threat actor inserting themselves in between a user and an application, positioning themselves to either eavesdrop on conversations or to impersonate a legitimate party too receive that information."

Follow the link below to access the full article!

https://hubs.ly/Q02t2MHt0

Today is the deadline to get your taxes filed. Remember to watch out for potential scams offering to do your taxes and steal your refund.

Analysis: Before the attack, LinkedIn functions as an easy reconnaissance vector, allowing a potential threat actor to gauge the location and tech stack employed by the company. It has been found that in recent years, LinkedIn has also become an attack surface, as users have been targeted heavily with HR scams and malicious job offers, typically loaded with malware, which are created by attackers trying to appear as legitimate potential employers. After the user clicks on a link, they are directed to a fake login page, where the threat actor steals the valid credentials and now has a way into the company’s systems.

Follow the link below to access the full article!

https://hubs.ly/Q02sH1cX0