🟡 This list contains some of the most common types of cyberattacks and key security concepts.

-> CYBERATTACKS

- Phishing: A hacker pretends to be a trusted company or person to steal your private information. Identity theft.

- Man-in-the-Middle (MITM) attack: When a hacker secretly gets between two parties to steal or change their communication.

- Denial of Service (DoS / DDoS): This attack makes the website unavailable because too much traffic overwhelms it.

- Ransomware: A type of malicious software that locks or hides your files and asks you to pay money (a ransom) to get them back.

- Crippling: This attack causes very serious damage to a computer system or network, making it almost impossible to use.

- Privilege escalation: When a hacker, who already has some access to a system, finds a way to gain more control or higher permissions.

-> SECURITY CONCEPTS

- Authentication: The process of confirming you are who you say you are.

- Authorization: The process of giving you permission to access specific things or do specific actions.

- Multi-Factor Authentication (MFA): A security method that requires you to provide more than one way to prove your identity to log in.

- Hashing: Is a process that changes data into a fixed code. It cannot be reversed back to the original data.

- Encryption: Is a process that changes data into secret code. It can be reversed if you have the correct key.

- Intrusion Prevention System (IPS): A tool that not only finds security threats but also actively tries to stop them in real time.

- Vulnerability: A weakness in a system that a hacker can use to cause problems.

- Social engineering: When a hacker tricks people to give private information instead of hacking a computer.

- Incident response: The plan and actions that a company takes after a cyberattack or problem happens.

🟢 Here you will find strategies that some businesses and individuals are using today to stay safe online.

• Zero trust architecture: This is a model where no one is trusted by default; each user or device must be authenticated and verified continuously.

  
  

• Incident response planning: A clear plan for cyberattacks is important to ensure a quick response. It should include roles, step-by-step actions, and practice drills.

  
  

• Secure remote work policies: Make sure that those who work from home or outside the office use protected devices, VPNs, and secure connections.

  
  

• Data encryption everywhere: Encrypt stored information as well as data in transmission, using protocols such as HTTPS or VPN.

  
  

• Continuous monitoring of the attack surface: Constant supervision of all apps, contracted services, and devices helps detect weaknesses and vulnerabilities in the systems. This allows corrections before something happens and protects access points.

  
  

• Regular data backups & disaster recovery: One way to recover lost information is to make frequent security copies and store them in a safe place. This is especially useful to recover data in case of a ransomware attack.

  
  

• Employee training & awareness: Train employees/family to recognize phishing, fraud, and social engineering techniques is a good way to promote a culture of online safety in your company/home.

  
  

• AI-powered threat detection and autonomous defenses: AI can help detect unusual behaviors, malware, or phishing in real time and can also block or isolate threats automatically.

WEEK 5 - Both, either, and neither.

🔴 Some sentences

1. No me gusta ninguno de los computadores que hemos probado hoy.

- I like neither of the computers we have tested today.

- I don’t like either of the computers we have tested today.

2. El jefe pidió que ambos técnicos revisaran el servidor.

- The manager has asked both technicians to check the server.

3. Les voy a dar el reconocimiento a los dos por su buen trabajo en el proyecto.

- I’ll give you both the award for your good performance.

- I’ll give the award to both of you for your good performance.

4. No me gustan ni Windows ni macOS.

- I don’t like either Windows or macOS.

5. Ni laptop ni tablet, prefiero trabajar con mi PC de escritorio.

- Neither laptop nor tablet, I prefer to work with my desktop computer.

6. Ambos sistemas fallaron; ni el programador ni el ingeniero de soporte pudieron resolver el problema. Ahora, cualquier experto del equipo que logre hacerlo está bien para mí.

- Both systems failed. Neither the programmer nor the support engineer could fix the issue. Now, either expert on the team who can solve it is fine with me.

7. No he recibido todavía ninguno de los dos correos con el archivo adjunto.

- I haven’t received either of the emails with the attachment yet.

- I have received neither of the emails with the attachment yet.

8. Vamos a revisar cada uno de los dispositivos conectados a esta red.

- We are going to check each of the devices connected to this network.

9. Cualquiera de los dos softwares me parece bien para el proyecto.

- I like either of the softwares for the project.

- Either of the programs is fine for me.

10. Ambos servidores del laboratorio son rápidos, pero si alguno de ellos presenta errores, simplemente usaré otro; al fin y al cabo, ninguno de los dos tiene buena conexión a internet.

- Both servers in the lab are fast, but if either of them shows errors, I’ll just use another one; after all, neither of them has a good internet connection anyway.

🟣 Security protocols: keep yourself safe online

1. 2FA (Two-Factor Authentication):

This protocol adds an extra layer of security when logging in. After entering your password, you receive a code on your phone or email.
How to use it: Enable 2FA in your account settings. Keep your phone close.

2. SSL (Secure Sockets Layer):

SSL secures the connection between your browser and a website.
How to use it: Check for the padlock and “https” in the address bar when browsing.

3. TLS (Transport Layer Security):

It is the newer and more secure version of SSL. It protects your data when sending emails or making online payments.
How to use it: Make sure your email service or website hosting uses TLS certificates.

4. VPN (Virtual Private Network):

A VPN hides your location and encrypts your internet traffic. It is very useful when using public Wi-Fi.
How to use it: Download a VPN app, turn it on before going online, and choose a secure server.

5. HTTPS (HyperText Transfer Protocol Secure):

HTTPS is the secure version of HTTP. It protects your data when visiting websites.
How to use it: Use websites that start with “https://”. Avoid sharing personal data on sites without it.

6. Firewall:

A firewall blocks unwanted access to your computer or network. It helps stop hackers and viruses.
How to use it: Keep your system firewall active and update it regularly.

🟡 Phrasal Verbs in Real IT Situations

• I had to call the engineer up because the system suddenly started slowing down. I hope he can look over the situation and finally fix the problem up. If that doesn’t work, I’ll personally put in a ticket at the IT office.

  
  

• I’m used to checking my Wi-Fi service out every week, because sometimes the speed goes down for no reason, and I’m paying a good rate for good speed.

  
  

• Despite the main laptop breaking down, the information could be saved because the IT team had done a complete backup.

  
  

• When my computer froze, I tried to figure out what went wrong before calling the IT team. Luckily, I managed to sort it out by restarting the system.

  
  

• The IT department asked everyone to back their files up regularly and log off before leaving the office to prevent data loss.

-> You must make sure to use unique and hard to guess passwords, even if it means remembering them with a secure password manager app.

-> You must not share your passwords or access codes, even if someone tells you they are part of the support team.

-> You should always verify the sender’s address before opening any email that looks suspicious.

-> You have to update your programs and software frequently to avoid security vulnerabilities.

-> You could install a trusted antivirus program to reduce the risk of attacks, although it’s not mandatory.

🟣 Some things that I consider will probably happen in the future of technology.

-> In twenty years, artificial intelligence will transform the way we live, work, and interact with the world.

-> In 2045, millions of people will be using personal robots capable of anticipating their needs and adapting to their emotional state.

-> By then, scientists will have created clean energy systems powerful enough to meet the demands of entire cities without polluting the air.

-> Within two decades, humanity will have been developing biological technologies that integrate the human body with digital devices.

-> In the near future, augmented reality will be changing education by offering fully immersive learning experiences.

🟡 Announcement for IT Team