Cybersecurity: Articles for Discussion Boards - A. Durham

The use of Internet of Things devices (IoT) by individuals in their homes has led to new opportunities for companies, to adapt their products, services and offers, based on the user profile. At the same time, these new services involve the reinterpretation of existing requirements regarding data protection, especially in terms of the ethics of using data and the security of personal data.

The article focuses on Smart home technology and smart devices which provide convenience and independence, but it's important to manage security risks. Topics discussed include the default data permissions on most smart home devices are often very generous and carefully evaluate all privacy settings and requested permissions on each device and its associated apps.

When talking about IoT securities — smart homes are the hot new trend that is completely changing the house security situation’s face.

Article about how 3rd party providers can hack accounts through smart devices while consumer is unaware.

Document from Jerry Davis, Director, Information Technology and CIO NASA Ames Research Center giving an overview of The Internet of Things and where we go next.

How do you secure "smart" devices that are constantly connected to the internet and sharing data? That is a question many cybersecurity experts are wrestling with as the Internet of Things takes off.

In the United States the Federal Trade Commission may be able to get device-makers to step up their security game. While the agency can influence the market through enforcement actions, it can't set hard and fast security standards, according to former FTC Consumer Protection Bureau director David Vladeck.

"House approval of the Save the Internet Act is a big victory for consumers and a major step towards restoring Net Neutrality and making it a permanent law," Congressman Doyle said after passage of the bill on a bipartisan vote of 232 to 190. "Now supporters of Net Neutrality have to get it through the Senate."

Many countries have fallen victim to state-linked cyberattacks and malicious activities. State-linked cyber operations pose serious legal threats and challenges to the stability and security of cyberspace.

This article explains modern efforts to create a new battlespace within the civil societies of Western countries. This battlespace consists of the internet, social media, and other technologies that can be used to foment social and political discontent. The article includes recommendations for countering such efforts.

According to ThreatMetrix, a global cybersecurity network used by banks and e-commerce firms to help determine the authenticity of digital transactions, 210 million attempted attacks were made on its network during the first quarter of 2018, a 62% increase over the same period last year.

The Colonial attack led the head of the Federal Energy Regulatory Commission to call for consideration of pipeline cybersecurity standards similar to the North American Electric Reliability Corp.'s Critical Infrastructure Protection standards.

A notorious Russia-linked hacking group is behind the cyberattack against JBS, a source familiar with the matter said.

The Solar Winds hack, which was revealed in December, highlighted the challenge and amped up the pressure on the federal government to do more to secure the nation's systems. A rare joint statement issued in January by the Cybersecurity and Infrastructure Security Agency, FBI, National Security Agency and Office of the Director of National Intelligence, stated: "An advanced persistent threat actor [API], likely Russian in origin, is responsible for most or all of the recently discovered, ongoing cyber compromises of both government and non-governmental networks.

China, the US and Russia were most targeted. * Trickbot and Emotet malware are rebundling and rebranding themselves to take advantage of the COVID-19 threats and were reusing various lures. * Roughly 60,000 emails include COVID-19-related malicious attachments or malicious URLs. * From May 6, 2020. Attackers are impersonating official organizations to wiggle into your inboxes. * SmartScreen tracked more than 18,000 malicious COVID-19 themed URLs and IP addresses

IntSights report: Major threat groups capitalize on health crisis with phishing scams, malware and more

Dong-won, K., Jin-young, C., & Keun-hee Han. (2020). Risk management-based security evaluation model for telemedicine systems. BMC Medical Informatics and Decision Making, 20, 1-14. doi:http://dx.doi.org/10.1186/s12911-020-01145-7
Journal article about telemedicine and security, especially in light of the increase of telemedicine during the Covid pandemic.

Companies should take steps to ensure that remote access to their corporate applications and data is carefully monitored, follows least privilege principles and is done from secure devices using multi-factor authentication (MFA).

Looking to bounce back from a spate of recent security miss-steps, video conferencing platform Zoom today announced a variety of new privacy and security capabilities in Zoom 5.0, a key milestone in the company’s recently launched 90-day security plan.

July 31 2020 article about what we've learned from Covid and work from home.

From August 2020. We have seen the COVID-19 pandemic deliver additional security challenges to businesses around the globe. We have seen organizations quickly move their workforces en-mass to remote working; e-commerce has increased, with many industries - and especially retail and food services now relying more heavily on their online presence and cloud-based workflows; and health providers have also moved to online service delivery, to name just a few industries the pandemic has impacted.

From the Idaho Business Review. July 2020. As the U.S. economy reopens, small business are particularly vulnerable to renewed and increasingly sophisticated cyberattacks. In fact, an estimated 43% of all cyberattacks involve small business victims.

From May 4, 2020

A public Wi-Fi network is inherently less secure than your personal, private one, because you don't know who set it up, or who else is connecting to it.

One of the biggest online threats for travelers is free public WiFi. Hackers often position themselves as free WiR hotspots and steal personal information, credit card details, and other data-and many identity thieves are using wireless sniffers, a type of software designed to intercept and decode data when it is transmitted over a network.

A VPN can protect you from snooping hackers on public Wi-Fi networks in places like airp

With just a year to go before the 2020 Census, the U.S. government is urgently working to safeguard against hacking and disinformation campaigns as it perfects a plan to count about 330 million people largely online for the first time.

The reports reveal how the Russian efforts go far beyond election interference. The real goal is outright sabotage by tearing apart America's social fabric.

According to Michael Osterman of Osterman Research, Inc., there is more than a one-in-four chance that a user will mistakenly click on a phishing email and infect a corporate network.

As part of its effort to develop effective AI, Instagram has been surveying thousands of users in hopes of better understanding all the forms that bullying can take, in the eyes of many beholders.

Instagram is rolling out a feature that will urge users to think twice before posting hateful comments, in an effort to minimize cyberbullying on the massive social media platform. The new feature uses artificial intelligence to screen content and notify users if their post may be harmful or offensive.

From Singapore, a look at how cybersecurity is more than protecting people and companies from hackers.

If the content filters used by the world's biggest tech companies can't effectively stop a terrorist's video being shared, they might not be reliable enough for use in other organisations looking to protect themselves from the wrath of new EU law.

The Google+ social network inadvertently gave app developers access to about 52.5 million users' information — even data not meant to be public — because of a bug in its software, Google says.

Personal information of up to 87 million people — mostly in the United States — may have been "improperly shared" with Cambridge Analytica, a data analytics firm used by the Trump campaign that has recently come under fire.

"The Marriott Breach Compared with Past Security Breakdowns."ProQuest, Nov 30, 2018, https://proxy154.nclive.org/login?url=https://search.proquest.com/docview/2140146166?accountid=13601.

Shaban, Hamza. "What You should do After the Marriott Data Breach."ProQuest, Nov 30, 2018, https://proxy154.nclive.org/login?url=https://search.proquest.com/docview/2147754688?accountid=13601.

A woman has been charged in connection with a hacking breach at Capital One bank that exposed information from more than 100 million credit applications over a 14-year period – what is thought to be one of the largest such attacks in recent years.

As more and more activities, processes and assets move to the cloud, it will become increasingly difficult to secure transactions, especially since general awareness of the breadth, depth and severity of threats is ill-defined and underappreciated, and because cybersecurity funding is incredibly inadequate.