If you want early The Best instructions on how to Free play the quizzes, go to One-Hour bit.ly/how-to-kahoot Cybersecurity Awareness Training Ever
Starting at 12PM Eastern
About us About Destiny
About Joshua
Cybersecurity is not your mission
Things you can do that make a big difference. Nurture Educate ● Protect ● Verify ● ●
A security culture at your organization Yourself and others about risks Your accounts and devices with secure practices When in (ANY) doubt, VERIFY!
Hint: don’t do this
When in ANY doubt, VERIFY
Ways we get breached
Layers of Defense
Keep all your devices up-to-date with patches (and software updates)
Phishing
Bad Phish, Not Phish Sex Phish, Sly Phish
Bad Phish
Not W
alma
rt.co
m
Did I even place an order from Walmart?
Poor grammar
Not Phish
Where does the link go? https://www.netflix.com/password
Sex Phish A
e’l
r th e ov
is
r. e t la
lc
!W
ar e F
Urg
enc
y! W
e’ll
cov
er th
is la
ter.
lp ctua
ary!
u us
sc ed -
w
ass
yo ord
Sly Phish
Rea d ca
refu l
ly -
NO
T lin
ked
in.c
om
Wonder where this link goes? Me too!
https://jk3bt83s.r.eu-west-1.awstrack.me/L0/https:%2F%2Fwww.linkedn.co%2
To the bad guys, you are just a commodity
Who is out to get you? Nation-State-Based Adversaries Panda = China Bear = Russia Kitten = Iran India = Tiger North Korea = Chollima
Non-Nation-State Adversaries Jackal = Activist groups Spider = Criminal groups Not listed - young men around the world
Giving away your personal information
What town were you born in? What was the name of your first pet? Where did you go to High School? First street you lived on?
W M L
’ YOUR P ?
Phishing for Passwords
Social Engineering
Initiation
Authority
Fear
Urgency
Pretexting
About Passwords
123456 is THE BEST password LinkedIn breach (2012)
Ashley Madison breach (2015)
A long time ago in a galaxy far, far away...
Credential Stuffing
Monitor the dark web For your email address
Which one is the strongest password? 7!G2Kq@q Or xCuBZE$$%^s2 Or I like to eat donuts on Wednesdays.
7!G2Kq@q
xCuBZE$$%^s2
I like to eat donuts on Wednesdays.
Scores from: https://howsecureismypassword.net/
When it comes to passwords...
Sadly, even long pass phrases can be vulnerable ● ● ● ●
They can still get phished They can still be reused They can still be shared in insecure ways They can still be part of a breach
Too Many Passwords
Password Managers to the Rescue
Password Managers - Basics ● ● ● ● ●
Create long, complex and random passwords Inexpensive (generally <$30/year/person) Protect against phishing Audit your passwords Share passwords securely
Use a Password Manager
Multi-Factor Authentication (MFA) Also referred to as Two Factor Authentication or 2FA
Form of 2FA Most of us Use Already
Common Methods of 2FA Push
SMS
Authenticator app
Most Secure 2FA Universal Two-Factor (U2F)
Use Two-Factor Authentication (2FA)
Use it everywhere you can. Start with your most important accounts. Email first.
Risks with Public Wi-Fi
Defending against the Evil Twin
Man in the Middle (MITM)
Virtual Private Network or VPN
Avoid using public wi-fi (and take steps to protect yourself if you choose to use public wi-fi) ● Use your mobile hotspot instead ● Use a Virtual Private Network (VPN) ● If you have to use public wi-fi, VERIFY both the correct network and means of accessing the wi-fi you want to use.
Focus on the small things you can do that make a big difference.
Nurture Educate ● Protect ● Verify ● ●
A security culture at your organization Yourself and others about risks Your accounts and devices with secure practices When in (ANY) doubt, VERIFY!
Before you go, how would you like all of the following for free? ● ● ● ● ● ● ● ● ● ●
A Cybersecurity Health Checkup Check the Dark Web for compromised passwords with Stolen Password Scanning Build an Incident Response Plan Create a Technology and Data Use Policy Stay in the know about Recent Threat Alerts Educate your personnel with Security Training Videos Test your staff with Phishing Simulations Download Awareness Posters to print and post around the office Run a Website Scan to check for malware and blacklisting on your website Work with a dedicated RoundTable expert
Go to defendify.me, use the code “Defense” and get a free 30-day trial that includes everything you see above.
January 29th (2 weeks from today) High Noon 12:00-12:30 PM
Introducing Defendify by RoundTable