https://padlet.com/niku1195/4w90w0zuzsunxe0b Social Engineering and Cybersecurity en-us 2021-11-23 05:32:13 UTC 2025-01-25 19:07:50 UTC hello@padlet.com niku1195 https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907646101 1. We can be suspicious of unsolicited phone calls, visits, or email messages from individuals asking about employees or other internal information. If an unknown individual claims to be from a legitimate organization, we can try to verify his or her identity directly with the company.

2. We should not provide personal information or information about our organization, including its structure or networks, unless we are certain of a person's authority to have the information.

3. We should not reveal personal or financial information in email, and should not respond to email solicitations for this information. 

4. We should pay attention to the Uniform Resource Locator (URL) of a website. We should look for URLs that begin with "https"—an indication that sites are secure—rather than "http.” We should also look for a closed padlock icon—a sign your information will be encrypted.

5. Install and maintain anti-virus software, firewalls, and email filters to reduce some of this traffic.

6. We should take advantage of any anti-phishing features offered by your email client and web browser.

7. Enforce multi-factor authentication (MFA). ]]> 2021-11-23 05:36:56 UTC https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907646101 niku1195 https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907650656 https://www.nytimes.com/2020/07/15/technology/twitter-hack-bill-gates-elon-musk.html

https://portswigger.net/daily-swig/security-breach-at-trading-platform-robinhood-sparks-phishing-fears

https://techgenix.com/netflix-phishing-scheme/]]> 2021-11-23 05:41:19 UTC https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907650656 niku1195 https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907651083 https://www.youtube.com/watch?v=GE5J_26Ut1Q&ab_channel=NetworkChuck

https://www.youtube.com/watch?v=PWVN3Rq4gzw&ab_channel=CNNBusiness

https://www.youtube.com/watch?v=CV39QzFpJx4&ab_channel=CNBC

]]> 2021-11-23 05:41:42 UTC https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907651083 niku1195 https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907653582 Social engineering has posed a serious threat to cyberspace security. In the context of cybersecurity, social engineering describes a type of attack in which the attacker exploit human vulnerabilities (by means such as influence, persuasion, deception, manipulation and inducing) to breach the security goals (such as confidentiality, integrity, availability, controllability and auditability) of cyberspace elements (such as infrastructure, data, resource, user and operation).  Many distinctive features make social engineering to be a quite popular attack in hacker community and a serious, universal and persistent threat to cyber security. Social engineering threat is increasingly serious along with its evolution in new technical and cyber environment. Social engineering gets not only large amounts of sensitive information about people, network and devices but also more attack channels with the wide applications of Social Networking Sites (SNSs), Internet of Things (IoT), Industrial Internet, mobile communication and wearable devices. And large part of above information is open source, which simplifies the information gathering for social engineering. ]]> 2021-11-23 05:43:43 UTC https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907653582 niku1195 https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907653955 Social engineering is a type of attack wherein the attacker exploit human vulnerability through social interaction to breach cyberspace security.

1) Compared to classical attacks such as password cracking by brute-force and software vulnerabilities exploit, social engineering exploits human vulnerabilities to bypass or break through security barriers, without having to combat with firewall or antivirus software by deep coding. 

2) For some attack scenarios, social engineering can be as simple as making a phone call and impersonating an insider to elicit the classified information. 

3) Especially in past decades when defense mainly focus on the digital domain yet overlooks human factors in security. As the development of security technology, classical attacks become harder and more and more attackers turn to social engineering. 

4) Human vulnerabilities seem inevitable, after all, there is not a cyber system doesn’t rely on humans or involve human factors on earth and these human factors are vulnerable obviously or can be largely turned into security vulnerabilities by skilled attackers.

Social engineering has become more efficient and automated by technology such as machine learning and artificial intelligence. As a result, a large group of targets can be reached and specific victims can be carefully selected to craft more creditable attack. The spread of social engineering tools decrease the threat threshold. Loose office policy (bring your own device, remote office, etc.) leads to the weakening of area-isolation of different security levels and creates more attack opportunities.]]> 2021-11-23 05:44:04 UTC https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907653955 niku1195 https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907678179 2021-11-23 06:05:37 UTC https://padlet.com/niku1195/4w90w0zuzsunxe0b/wish/1907678179