Hello, Hard Targets!

I hope you had a great Thanksgiving and an awesome Black Friday. Welcome back to our latest issue where we continue to fortify our defenses in the ever-evolving digital world. This week we've crafted yet more artwork that embodies our commitment to cybersecurity excellence.

If you're joining us for the first time, we invite you to become part of our community by subscribing here. Our newsletter, released semi-weekly every Monday and Friday, is an essential tool for staying informed and secure.

Check out the latest additions to our Hard Targets Merchandise here and delve deeper into the world of cybersecurity with our Artwork Insider Access here.

This issue is packed with insights into cybersecurity developments and easy-to-implement tips to enhance your digital safety. Plus, we're thrilled to introduce our new merch designs that symbolize precision and mastery—traits of a true Hard Target. The front features the "Hard Targets" logo, combining royalty and precision symbolism. The back showcases a shield design with intricate details, embodying elite protection and defense.

Remember, sharing is caring! Refer our newsletter to friends and family and earn rewards as you help us grow. To get a referral link, you need to be signed in. To sign in, click the menu icon in the top right corner of the online version. Let's continue our journey towards becoming unyielding in the face of cyber threats.

Stay secure, stay informed, and embrace your identity as a Hard Target.

Thank you for your unwavering support and for being the shield against digital adversity.

Thanks to Beehiiv for hosting this newsletter. Sign up for other newsletters here.

Test Your Cybersecurity Knowledge with Our Quick Quiz. Let's See If You're a True Hard Target!

Question 1: Which cybersecurity framework primarily focuses on improving the resilience of critical infrastructure?

• a) ISO/IEC 27001

• b) NIST Cybersecurity Framework

• c) CIS Controls

• d) OWASP Top 10

Question 2: In cybersecurity, what is a 'kill chain' used to describe?

• a) The process of revoking digital certificates

• b) A sequence of events to detect and prevent threats

• c) The steps of a ransomware attack

• d) Methodology for system hardening

Question 3: What is the purpose of 'cryptographic hashing' in cybersecurity?

• a) To encrypt and decrypt user data

• b) To ensure data integrity by creating a unique digital fingerprint

• c) To manage cryptographic keys

• d) To hash user passwords for secure storage

Answers:

1. b) NIST Cybersecurity Framework

2. b) A sequence of events to detect and prevent threats

3. b) To ensure data integrity by creating a unique digital fingerprint

Best Buy Cyber Monday 2023: Top Early Deals

Source: IGN

Summary: 
Best Buy's Cyber Monday sale offers a range of deals, including:

• TV Deals:

  • 85" TCL Q6 4K QLED HDR Smart TV: $899.99 (31% off)

  • 86” LG UR7800 LED 4K UHD Smart TV: $899.99

  • 77” Samsung S89C OLED 4K UHD Smart TV: $1999.99

• Video Game Deals:

  • Nintendo Switch OLED - Super Smash Bros. Bundle: $349.99 (16% off)

  • Nintendo Switch - Mario Kart 8 Deluxe Bundle: $299.99

• Gaming Laptop Deals:

  • OMEN 16 Laptop: Save up to $170 off at Best Buy

• Apple Deals:

  • iPads as low as $249.99

  • Save up to $1000 on iPhone with trade-in

What’s the importance of this article? 
The article is a valuable resource for consumers looking to save on electronics and gadgets, providing a curated list of significant discounts available during Best Buy's Cyber Monday event.

How could this affect me? 
If you're in the market for electronics, these deals could offer substantial savings on high-end items, ranging from home entertainment systems to the latest gaming consoles and mobile devices.

Google Adds New Benefits to Its YouTube Premium Service

Source: PhoneArena

Summary: 
Google is expanding YouTube Premium with a new feature called Playables, allowing users to play mobile games directly in the app. The feature is currently experimental and offers:

• Nearly three dozen mobile games are available for free play.

• Access to games both on desktop and mobile, though currently only mobile is supported.

• Free availability of this feature until March 28, 2024.

What’s the importance of this article? 
This article is significant as it announces YouTube Premium's new Playables feature, indicating Google's continuing investment in gaming and subscription services.

How could this affect me? 
If you're a YouTube Premium subscriber, you now have access to additional entertainment options within the app, potentially enhancing your subscription value.

I Test Cameras for a Living: 14 Best Cyber Monday Camera Deals

Source: Tom's Guide

Summary: 
Tom's Guide highlights the best Cyber Monday camera deals, offering substantial discounts on a variety of cameras, including:

• Sony Alpha a7 III: A full-frame mirrorless camera, reduced by $300.

• Canon EOS R5: A mirrorless camera, available with a $200 discount.

• GoPro HERO10 Black: This action camera is $150 cheaper.

• Nikon Z6 II: A versatile mirrorless camera, now $200 off.

• Fujifilm X-T4: An APS-C mirrorless camera, reduced by $200.

What’s the importance of this article? 
This article is crucial for photography enthusiasts and professionals looking for quality cameras at discounted prices during Cyber Monday sales.

How could this affect me? 
If you're in the market for a new camera, these deals offer an opportunity to purchase high-end cameras at significantly reduced prices, potentially saving you hundreds of dollars.

Indoor Gardens for Fresh Herbs and Veggies All Winter Long

Source: Forbes

Summary:
Forbes features an article on indoor gardening solutions for winter, highlighting hydroponic systems like Gardyn Home Kit 3.0 and Auk. These systems enable growing up to 30 plants, incorporating integrated pumps, grow lights, cameras, and AI-powered apps. The author shares their successful experience growing a variety of fresh produce indoors.

What’s the importance of this article?
The article emphasizes the value of indoor gardening, offering a year-round, sustainable solution for fresh produce, particularly in unfavorable outdoor conditions.

How could this affect me?
This technology can be a game-changer for those interested in gardening or sustainable living, providing an innovative way to maintain a garden and eat healthily, regardless of the season.

United Imaging to Unveil New Technology at RSNA

Source: AuntMinnie

Summary: 
United Imaging Healthcare is set to showcase an array of innovative technologies at RSNA 2023. Highlights include the latest whole-body MRI scanner, the uMR Jupiter 5T, and new medical AI solutions. The uMR Jupiter 5T, awaiting FDA clearance, offers extensive applications in ultra-high-field MRI. Additionally, the uAIFI Technology Platform will be displayed, featuring ACS, an AI-assisted MR acceleration technology, and EasySense, a belt-free respiratory gating and monitoring system.

What’s the importance of this article? 
This article is significant as it introduces groundbreaking medical imaging technologies that could revolutionize the healthcare industry, particularly in diagnostics and patient care.

How could this affect me? 
For individuals involved in healthcare, these advancements could greatly enhance diagnostic accuracy and patient comfort. For patients, this means more efficient and less invasive imaging experiences. For the broader public, it signifies significant progress in medical technology and its potential to improve healthcare outcomes.

Specialized Turbo Tero Electric Bike on Sale

Source: WIRED

Summary: 
WIRED's article highlights a significant discount on the Specialized Turbo Tero electric bike during the Black Friday 2023 sale. This robust, all-terrain e-bike, originally priced at $4,000, is now available for $2,000. Known for its durability and versatility, the Turbo Tero is an ideal choice for both urban commuting and off-road adventures.

What’s the importance of this article? 
The article provides valuable information for consumers seeking high-quality, cost-effective e-bikes, especially those interested in eco-friendly transportation options or outdoor activities.

How could this affect me? 
For individuals contemplating an e-bike purchase, this deal offers a substantial savings on a premium model. This opportunity is particularly appealing for environmentally conscious commuters or outdoor enthusiasts looking for a reliable and versatile e-bike.

Social Engineering Defense Strategies: Safeguarding Against Human-Centric Cyber Attacks

Summary:
Social engineering attacks manipulate individuals into divulging confidential information or performing actions that compromise security. These attacks exploit human psychology, often through phishing, pretexting, baiting, or tailgating, and are a significant threat across all technological platforms.

Why is this important?
Understanding and defending against social engineering is crucial because these attacks target the most vulnerable aspect of security systems: human behavior. They can bypass even the most robust technical defenses, making awareness and education key to prevention.

How to Implement:

1. Education and Awareness: Regular training sessions on recognizing and responding to social engineering tactics.

2. Verification Procedures: Establish and follow strict protocols for verifying identities and requests for sensitive information.

3. Reporting Mechanisms: Implement a system for reporting suspicious activities or communications.

4. Limiting Information Sharing: Encourage minimal sharing of personal and company information on social media and other public platforms.

5. Regular Security Audits: Conduct audits to identify potential vulnerabilities in human interactions and processes.

6. Security Culture: Foster a security-conscious culture where employees feel responsible and equipped to deal with security threats.

40+ Apple Cyber Monday Deals for AirPods, iPad, Apple Watch, and More

Source: MacRumors

Summary:
Apple's Cyber Monday 2023 sale offers a range of discounts, including AirPods Pro at $199.99 (down from $249), iPad 9th Generation for $269.99 (reduced from $329), and the Apple Watch Series 8 at $349 (originally $399).

What’s the importance of this article?
This sale presents a significant savings opportunity for consumers, highlighting Apple's strategy to attract a larger customer base during the holiday season.

How could this affect me?
Consumers can save money on high-demand Apple products, making advanced technology more accessible during the holiday shopping period.

Oakland County Sheriff's Office Issues Warning for Apple iPhone NameDrop

Source: FreeP

Summary:
The Oakland County Sheriff's Office, along with other law enforcement agencies, is warning users about a new feature in Apple's iOS 17 update, called NameDrop. This feature, which automatically turns on after updating, allows iPhone users to share contact details by placing their phones close to each other. Law enforcement agencies caution against its use due to potential risks of accidental sharing of personal information.

What’s the importance of this article?
The warning emphasizes the need for caution with personal information sharing in the digital age, particularly with new technology features that enable easier data exchange.

How could this affect me?
For iPhone users, especially those who have updated to iOS 17, it's important to be aware of the privacy risks associated with the NameDrop feature. Users are advised to disable this feature to prevent inadvertent sharing of personal details. Instructions to turn off NameDrop are provided, and it's recommended to also update these settings on children's phones for added safety.

Not a typo! iPhone SE is just $35 right now for Cyber Monday deal

Source: Tom's Guide

Summary:
The iPhone SE is available at a significantly reduced price of $35 in a standout Cyber Monday deal, making it one of the most affordable Apple smartphones.

What’s the importance of this article?
Highlights Apple's strategy to offer competitively priced products, appealing to budget-conscious consumers.

How could this affect me?
Provides an opportunity for consumers to purchase a modern iPhone at a substantially lower price, making advanced technology more attainable.

Tim Cook Says Apple Hires People With These Traits

Source: Business Insider

Summary: 
Apple CEO Tim Cook, in a recent podcast interview with Dua Lipa, highlighted the key traits that Apple looks for in its employees. Cook emphasized the importance of collaboration, believing in the idea that "one plus one equals three" in terms of combined effort, curiosity, asking questions, creativity, and teamwork. He also mentioned that Apple hires people from diverse backgrounds, with or without college degrees, and coding skills are not a necessity for all roles at Apple.

What’s the importance of this article? 
It offers a rare glimpse into the hiring philosophy of one of the world's most successful tech companies, emphasizing traits that go beyond technical skills.

How could this affect me? 
If you’re aiming for a career at Apple or just seeking to understand what drives its innovation, this insight into their hiring process could be incredibly valuable. It may also inspire you to develop similar traits to enhance your employability in the tech industry.

Apple Ecosystem Security Tip of the Issue

Social Engineering Defense Strategies: Safeguarding Against Human-Centric Cyber Attacks on Apple Devices

Summary:
Implementing social engineering defense strategies on Apple devices involves educating users about common attack tactics like phishing, baiting, and pretexting. Regular training on recognizing suspicious activities and secure communication methods is crucial.

Why is this important?
Apple device users are often targeted by cybercriminals through social engineering attacks. Strengthening human defenses is as critical as technical measures in cybersecurity.

How to Implement:

1. Educate users on recognizing phishing attempts in emails and messages.

2. Promote the use of Apple's built-in security features like two-factor authentication and phishing detection in Safari.

3. Encourage regular software updates on iOS, iPadOS, macOS, and watchOS for security enhancements.

4. Conduct mock social engineering drills to test user awareness.

5. Instruct users to verify the legitimacy of requests for sensitive information, even if they appear to come from within the organization or trusted sources.

Samsung Galaxy Z Fold 5 Cyber Monday Deal

Source: Android Central

Summary:
The Cyber Monday deal at Best Buy offers a substantial $800 discount on the Samsung Galaxy Z Fold 5, with no trade-in required. This deal brings the phone down to $999 from its original price of $1,799. The Z Fold 5 features the Qualcomm Snapdragon 8 Gen 2 processor, a cover display like a tall narrow phone, and an inner display akin to a tablet. It also introduces a new hinge design for a flatter fold, enhancing its sleekness. Additionally, Amazon offers a discount on the Samsung Slim S Pen case for the Z Fold 5.

Deal Highlights:

• Samsung Galaxy Z Fold 5 256GB: Original Price: $1,799, Sale Price: $999 at Best Buy

• Samsung Slim S Pen case for Z Fold 5: Original Price: $99.99, Sale Price: $51.25 at Amazon

What’s the Importance of This Article?
This deal makes the premium Z Fold 5 more accessible to a broader audience, offering high-end features at a significantly reduced price.

Impact:
For consumers looking for a high-tech, foldable smartphone, this deal presents an opportunity to own a cutting-edge device at nearly half its usual cost, making it an excellent value proposition.

Cyber Monday TV Deals: The Samsung Frame TV

Source: Engadget

Summary:
Engadget reports that Samsung's Frame TV, renowned for its art-inspired design, is available at a significant discount of up to $1,000 during the Cyber Monday sale. This TV blends seamlessly into home decor, doubling as a digital art display when not in use. The 2023 model, with its customizable bezel, boasts 4K QLED technology, offering crisp images and vibrant colors.

What’s the Importance of This Article?
This article is significant as it highlights a major discount on a unique, aesthetically pleasing TV that combines technology with interior design, making it a sought-after item during the Cyber Monday sale.

How Could This Affect Me?
If you're interested in home entertainment and interior design, this deal offers a rare opportunity to purchase a high-quality, artful TV at a significantly reduced price, enhancing your home viewing experience and decor simultaneously.

Samsung Leak Confirms Powerful Galaxy S24 Ultra Upgrade

Source: Forbes

Summary:
Forbes reveals an anticipated upgrade for the Samsung Galaxy S24 Ultra, focusing on its display and S-Pen stylus. The leak suggests significant enhancements in screen technology, potentially offering improved visual experiences. Details on the S-Pen hint at more precise and responsive interactions, signaling a major step forward in Samsung's smartphone technology.

What’s the Importance of This Article?
This article is crucial for tech enthusiasts and Samsung users, as it unveils potential advancements in Samsung's flagship smartphone, indicating the brand's ongoing commitment to innovation and user experience enhancement.

How Could This Affect Me?
If you're considering upgrading your smartphone or are a fan of Samsung products, this information could influence your purchasing decisions. The anticipated improvements in display and stylus technology might offer a more immersive and efficient user experience, aligning with the needs of users who prioritize high-end tech feature

Samsung & Google Security Tip of the Issue

Social Engineering Defense Strategies: Safeguarding Against Human-Centric Cyber Attacks

Summary:
Social engineering attacks exploit human psychology to gain unauthorized access to information or systems. These attacks can be particularly effective against Google and Samsung device users, as they often rely on deceiving individuals into breaking standard security procedures.

Why is this important?
Understanding and implementing defenses against social engineering is crucial as these attacks target human vulnerabilities, which are often the weakest link in cybersecurity.

How to Implement:

1. Educate users about common social engineering tactics.

2. Implement strict policies for sharing sensitive information.

3. Encourage skepticism and verification of unexpected requests, especially those seeking personal or company data.

4. Use multi-factor authentication on devices to add an extra layer of security.

5. Regularly update security protocols and training to address evolving social engineering techniques.

OpenAI Turmoil Exposes Threat to Microsoft’s Investment

Source: Financial Times

Summary: Recent changes at OpenAI, including the departure of co-founder Sam Altman, have raised concerns about the organization's future direction and stability. This shift poses potential risks to Microsoft's significant investment in OpenAI, which includes exclusive cloud computing rights and collaboration on AI research and development.

What’s the importance of this article? Microsoft's deep involvement with OpenAI is a strategic move in the rapidly evolving field of AI. Any instability within OpenAI directly impacts Microsoft's AI ambitions and investments.

How could this affect me? For users and developers relying on Microsoft's AI tools and services, developments within OpenAI might influence the future trajectory of these technologies and their accessibility.

At Meta, Millions of Underage Users Were an ‘Open Secret,’ States Say

Source: The New York Times

Summary: A coalition of state attorneys has accused Meta, Instagram's parent company, of knowingly allowing millions of underage users on its platform. Despite community standards that restrict use to those 13 and older, Meta allegedly turned a blind eye to this issue, raising serious concerns about children's online safety and privacy.

What’s the importance of this article? This highlights a critical issue of child safety and privacy on major social media platforms and questions the effectiveness of existing age verification methods.

How could this affect me? If you're a parent or guardian, this information is vital for understanding the risks children face online and underscores the importance of monitoring and guiding their internet usage.

Why CEO Sam Altman's Firing at ChatGPT Maker Open AI Was Bound to Happen

Source: NPR

Summary: Sam Altman's recent firing from OpenAI, the organization behind ChatGPT, reveals deeper issues within the company. The article explores the reasons behind the firing, which include disagreements on the direction of the organization and challenges in managing a rapidly growing AI firm.

What’s the importance of this article? The leadership change at OpenAI, a key player in AI development, could signal a shift in the organization's focus and approach to AI research and development.

How could this affect me? For those interested in AI technologies, especially users of tools like ChatGPT, these changes could impact the future development and availability of such technologies.

Microsoft, OpenAI, & Meta Security Tip of the Issue

Social Engineering Defense Strategies: Safeguarding Against Human-Centric Cyber Attacks on Microsoft Products

Summary: Implementing social engineering defense strategies across Microsoft platforms, including Windows, Office 365, and Azure, is essential. These strategies involve educating users about common social engineering tactics and ensuring system configurations are optimized to prevent unauthorized access.

Why is this important? Social engineering attacks target human vulnerabilities to gain unauthorized access to sensitive data. Microsoft products, widely used in various sectors, are often targets of such attacks.

How to Implement:

• Education and Awareness: Regularly train employees on recognizing phishing attempts, suspicious links, and unusual requests. Utilize Microsoft's resources and training modules for cybersecurity awareness.

• Secure Configuration: Ensure Microsoft products are configured with security in mind. For example, activate phishing filters in Outlook and use multi-factor authentication for Office 365 accounts.

• Regular Updates: Keep all Microsoft software up-to-date to ensure the latest security patches are applied.

• Monitor and Report: Use tools like Microsoft Defender for Endpoint to monitor suspicious activities and encourage employees to report any suspicious behavior or emails.

Beware Email Scams This Holiday Shopping Season

Source: NPR

Summary: 
With the holiday season upon us, consumers need to be extra cautious about email fraud and cyberattacks. Cybercriminals exploit the rush of Black Friday and Cyber Monday deals to conduct scams or cause disruption. They may disguise themselves as legitimate retailers in urgent emails offering limited-time deals. Inherent email vulnerabilities, like lack of encryption or verified senders, make cybercrime lucrative. Companies are encouraged to adopt the DMARC (Domain-based Message Authentication, Reporting & Conformance) protocol to prove their authenticity over email. However, many are not fully compliant, leaving consumers vulnerable.

Key Takeaways:

• Email scams spike during the holiday season, especially around Black Friday and Cyber Monday.

• Email is inherently insecure, typically lacking encryption and verified sender/recipient identities.

• Advancements like DMARC are available, but many companies are not fully compliant.

• Consumers need to be vigilant about phishing emails and suspicious links.

• Major email providers like Google and Yahoo are pushing companies towards DMARC compliance by February 2024, with non-compliant emails likely being flagged as spam.

• Consumers are encouraged to protect themselves online by verifying deals directly through retailers’ websites instead of clicking email links.

A Big Thank You to Our Hard Targets

Thank you for joining us in this latest issue of "The Cybersecurity Crucible." Your engagement and support are what make this community thrive. As we continuously work to bring you the most relevant and valuable content in the world of cybersecurity, your role in this journey is invaluable.

We're counting on your support to expand our reach. Before our next release, we encourage you to share this newsletter with a friend or family member. Your referrals are crucial for our growth, allowing us to offer even more enriching content and attractive discounts on tech and security products and services. Plus, remember, our referral program is a fantastic way for you to benefit as well.

Your ongoing support is greatly appreciated. It's what fuels our commitment to providing you with the best cybersecurity insights and tips. For those who haven't yet delved into it, don't miss out on our Artwork Insider Access. Priced at just $1.99 per month, it offers an exclusive glimpse into the intersection of art and digital security. Explore it here.

Being a "Hard Target" isn't just about reading; it's about applying the knowledge, staying informed, and constantly enhancing our defenses against the ever-evolving digital threats. Your proactive stance in the digital world is what defines you as a Hard Target.

Once again, thank you for your unwavering support. Stay safe, stay informed, and continue to stand strong as a Hard Target in the cybersecurity realm.

Links

• Read online

• Subscribe

• Visit our Website for more insights and resources

• Contact Us

• Instagram

• YouTube

• Hard Target Merchandise

• Artwork Insider Access Upgrade

Kingdom Dominion Security

& Technology

Subscribe to Premium to read the rest.