Cybersecurity Digest - Making Hard Targets - 02Sep2023 | KD Sec & Tech

Hello, Hard Targets!

Welcome back to another edition of our cybersecurity digest, presented by KD Sec & Tech. In a world where the digital realm is constantly shifting, threats are not far behind, always adapting and evolving. This issue dives deep into the latest vulnerabilities plaguing our favorite platforms, breakthroughs in cybersecurity, and a special highlight on the most recent scams that are tricking users worldwide.

Why is this edition a must-read? Because the cyber threats of today aren't just about a stolen password or a hacked account; they touch every aspect of our lives, from our personal data to our financial security. Knowledge is your best defense, and we're here to equip you with just that.

But remember, cybersecurity is a collective effort. The more informed we are, the safer our digital community becomes. So, if you find value in our digest, please consider subscribing and sharing it with friends, family, and colleagues. Let's build a community that's not just connected but also protected.

Stay sharp, stay updated!

Don't forget to hit that subscribe button and share the knowledge. Together, we can make the digital world a safer place for all.

The Rise of Quantum Computing and its Implications for Cybersecurity

Source: TechCrunch

Summary: Quantum computing is on the horizon with its unparalleled processing capabilities. While it promises to revolutionize various sectors, it also poses significant threats to the realm of cybersecurity. Traditional encryption methods might become obsolete, making data protection a challenge.

Everyday Life: As quantum computing becomes more mainstream, our digital security measures might need a complete overhaul. The encryption that protects our online banking, emails, and other sensitive data could become vulnerable.

Action: Stay informed about advancements in quantum computing and be prepared to adapt to new security measures as they emerge.

The Growing Threat of Ransomware Attacks on Healthcare Institutions

Source: BBC News

Summary: Ransomware attacks targeting healthcare institutions are on the rise. These attacks not only jeopardize patient data but can disrupt critical care. The recent attack on a major hospital led to delayed surgeries and rerouted ambulances.

Everyday Life: The healthcare sector holds sensitive data, and any disruption can have life-threatening consequences. Institutions must prioritize cybersecurity to ensure patient safety and data integrity.

Action: If you're associated with the healthcare sector, advocate for robust cybersecurity measures. As a patient, inquire about the data protection measures in place at your healthcare provider.

The Role of Artificial Intelligence in Modern Cybersecurity

Source: Forbes

Summary: Artificial Intelligence (AI) is playing an increasingly vital role in cybersecurity. From detecting threats to predicting future vulnerabilities, AI tools are becoming indispensable in the fight against cybercrime.

Everyday Life: As cyber threats evolve, traditional security measures might not suffice. AI can analyze vast amounts of data quickly, spotting anomalies and threats that might go unnoticed by human analysts.

Action: Embrace AI-driven security solutions. If you're in a decision-making role, consider investing in AI tools to bolster your organization's cybersecurity.

The Importance of Cyber Hygiene in the Age of Constant Connectivity

Source: CNET

Summary: In our interconnected world, maintaining good cyber hygiene is more crucial than ever. Simple practices, like regularly updating software, using strong passwords, and being wary of suspicious links, can go a long way in safeguarding one's digital presence.

Everyday Life: Just as we maintain personal hygiene, cyber hygiene is essential to protect our digital lives. With increasing online threats, basic precautions can prevent potential cyberattacks.

Action: Adopt good cyber hygiene practices. Regularly update your devices, use multi-factor authentication, and educate yourself about the latest cyber threats.

Google Fixes Serious Security Flaws in Chrome and Android

Source: WIRED

Summary: Google has addressed and rectified significant security vulnerabilities in both its Chrome browser and Android operating system. These updates are crucial as they patch potential entry points for cyber attackers.

Everyday Life: With the majority of users relying on Google's Chrome browser and Android OS for their daily tasks, it's vital to keep these platforms updated. Security flaws can lead to data breaches, loss of personal information, and other cyber threats.

Action: Users are advised to update their Chrome browsers and Android devices regularly. Ensuring that you're running the latest version can protect you from potential security threats.

Is it possible to downgrade my iPhone to an older version of iOS?

Macworld
Summary: Stuck on a version of iOS you don't like? We explore your options. Apple updates iOS every year without fail, bestowing upon our iPhones a range of new features and security improvements as well as the occasional redesign. In September 2023, iOS 17 will debut, and it’s expected that most iPhone users will move to the new platform pretty much immediately.
Everyday Life: Keeping your iPhone's software up-to-date is crucial for security and accessing the latest features. However, sometimes new updates might not be to everyone's liking.
Action: Before updating your iPhone, always check the new features and changes in the latest iOS version. If you've already updated and are not satisfied, consider seeking expert advice before attempting to downgrade, as it might affect your device's performance and security.

Emirates iO: The Ultimate Exclusive Frequent Flyer Program

stupidDOPE
Summary: Emirates Airlines has redefined luxury travel with the introduction of Emirates iO, an invitation-only frequent flyer program that caters exclusively to a select group of elite travelers. In a league of its own, Emirates iO offers an unparalleled experience that outshines even the gold and platinum membership tiers.
Everyday Life: Frequent flyer programs can offer exclusive benefits and luxury experiences for travelers. Being informed about such programs can enhance your travel experiences.
Action: If you're a frequent traveler, especially with Emirates, consider exploring their frequent flyer programs and benefits. It might offer you exclusive perks and luxury experiences.

Apple releases iOS 17 beta 8

9to5Mac
Summary: It’s not just the iPhone 15 event announcement day. Fresh iOS 17 betas are here as well. Apple has released iOS 17 beta 8 for developers. Apple unveiled iOS 17 at its annual Worldwide Developers Conference on June 5, previewing new features coming to the iPhone including StandBy, Live Voicemail, AirDrop updates, and much more.
Everyday Life: Staying updated with the latest iOS versions ensures you have the latest features and security patches.
Action: Keep an eye on iOS updates and consider updating your device when the stable version is released to benefit from the latest features and security improvements.

New Android spyware targets Signal and Telegram users

Tech Radar
Summary: Users of Telegram and Signal, two instant messaging apps known for their emphasis on privacy, are being targeted with a novel malware on the Android platform. This malware poses as a legitimate app and has sneaked into thousands of mobile phones. The findings come from cybersecurity researchers ESET.
Everyday Life: Privacy-focused messaging apps are often chosen for their enhanced security features. However, malware targeting such platforms can compromise user data and privacy.
Action: Ensure you download apps only from trusted sources like the Google Play Store. Regularly update your apps and be cautious of granting unnecessary permissions.

This is one of the most important new Android phones of 2023

Digital Trends
Summary: Fairphone has introduced the Fairphone 5, a smartphone that stands out due to its potential longevity. It promises to be up-to-date and functional until 2031, thanks to the longest software upgrade commitment seen so far. The phone also allows users to replace 10 different key components if they expire or break. Moreover, purchasing the Fairphone 5 supports a device made with care for the environment and ethical labor practices.
Everyday Life: Sustainable and ethical consumer choices can make a significant difference in the world. The Fairphone 5 offers a blend of technology and sustainability.
Action: When considering a new smartphone, research its environmental and ethical impact. Brands like Fairphone offer alternatives that prioritize sustainability and ethical production.

New Android malware MMRat puts phones and bank accounts at risk

newsink.com
Summary: A sophisticated Android malware named MMRat is raising concerns among security experts. This malware can remotely wake up, unlock a smartphone, steal data, and even conduct bank fraud in real time. While MMRat is currently targeting Android users in Southeast Asia, there's potential for it to spread globally.
Everyday Life: Malware can compromise personal data, privacy, and financial security. It's essential to be aware of potential threats and take precautions.
Action: Regularly update your Android OS and apps. Avoid downloading apps from untrusted sources and be cautious about granting app permissions, especially those related to banking and personal data.

macOS Sonoma vs. macOS Ventura: What’s the Difference

Source: Guiding Tech 

Summary: Apple has released the macOS Sonoma Public Beta for users interested in trying out the new Mac software upgrade. The stable release is expected in September. This article delves into the differences between macOS Sonoma and its predecessor, macOS Ventura.

Everyday Life: With Apple's continuous software updates, it's essential to understand the differences and benefits of each version. This helps users decide whether to upgrade and what new features they can expect.

Action: If you're using macOS Ventura, consider reading up on the new features and improvements in macOS Sonoma to determine if an upgrade would be beneficial for you.

macOS Sonoma on Intel Macs

Source: MacRumors Forums 

Summary: The discussion revolves around the performance of the new macOS Sonoma on older Macs with Intel processors. Users share their experiences and insights on how the OS runs on these machines.

Everyday Life: For those using older Macs, understanding how the latest OS updates will affect their device's performance is crucial. It helps in making informed decisions about upgrades.

Action: If you have an older Mac with an Intel processor, it might be worth checking user reviews and discussions before upgrading to macOS Sonoma to ensure compatibility and performance.

Office / MS365 Update for MacOS

Source: MacRumors Forums 

Summary: The post discusses an update waiting for the MS365 suite (Outlook, Word, PPT) on Mac. Users are inquiring about whether they should wait for potential bugs to be resolved before updating.

Everyday Life: Software updates can sometimes introduce new issues. Being cautious and informed about updates, especially for essential software like MS365, can prevent potential disruptions.

Action: If you use MS365 on your Mac, consider waiting a few days after an update is released. Monitor user feedback to ensure there are no significant issues before updating.

Windows 10's Taskbar Is a Security Nightmare

Source: Gizmodo

Summary: The Windows 10 taskbar has been identified as a potential security risk due to its integration with Microsoft's PowerToys utility. This utility, while useful, can be exploited by malicious actors to gain unauthorized access to a system.

Exploitation: Malicious actors can exploit the integration of the taskbar with PowerToys to gain unauthorized system access.

Mitigation: Users are advised to be cautious when downloading third-party utilities and to always ensure they are sourced from reputable vendors. Regular system updates and the use of reliable security software can also help mitigate such risks.

Windows 10 has a new security flaw, and it's a nasty one

Source: TechRadar

Summary: A new security flaw in Windows 10 allows for the potential escalation of privileges. This flaw can be exploited by malicious actors to gain higher-level permissions on a compromised system, potentially leading to data theft or further system compromise.

Exploitation: Attackers can exploit this flaw to escalate their privileges on a compromised system.

Mitigation: It's crucial to keep your system updated with the latest security patches. Regularly check for updates and ensure that any security software is active and up-to-date.

Windows 10 security targeted via new critical vulnerability

Source: TechRadar

Summary: A critical wormable vulnerability, CVE-2021-3166, has been discovered in the latest versions of Windows 10 and Windows Server. This vulnerability is found in the HTTP Protocol Stack (HTTP.sys) used by the Windows Internet Information Services (IIS) web server.

Exploitation: To exploit this flaw, an attacker would send a specially crafted packet to servers using the vulnerable HTTP Protocol Stack.

Mitigation: Microsoft has already released a patch for this vulnerability as part of its recent Patch Tuesday updates.

Microsoft Already Ruined Windows 11 Widgets

Source: TECHTELEGRAPH

Summary: Microsoft has reintroduced widgets in Windows 11. However, instead of providing useful information, they have transformed into a platform for promoted content that users don’t want. Widgets have a history in Microsoft’s operating systems, such as Active Desktop and Desktop Gadgets, but they were eventually discontinued or replaced due to various reasons.

Everyday Life: Widgets are tools that provide quick access to information and functions. With Microsoft reintroducing them in Windows 11, users might expect a seamless experience. However, the promoted content might disrupt the user experience.

Action: Users should be cautious and aware of the content they are accessing through widgets. They can customize or disable widgets if they find the promoted content intrusive.

Windows 11 pushes Bing with ‘unintended’ notification

Source: TECHTELEGRAPH

Summary: Microsoft is showing a prompt to use Bing to some people who use Google Chrome. Microsoft claims that the notification is “unintended behavior” and has paused it. Many are dubious of Microsoft’s claim since the company has aggressively pushed Bing to users in the past.

Everyday Life: Search engines are the primary way users access information online. Being prompted to switch search engines can be disruptive and might not align with user preferences.

Action: Users who receive such notifications can ignore them or adjust their settings to ensure their preferred search engine remains the default.

How to use Google Assistant on Windows 11

Source: Tech Advisor

Summary: Voice assistants have established themselves as an important way of interacting with our tech. It’s one of the most handy ways of interacting with your smart home appliances all in one place, but it’s also great for much simpler tasks.

Everyday Life: Voice assistants, like Google Assistant, offer a hands-free way to interact with devices, making multitasking easier and more efficient.

Action: Windows 11 users interested in using Google Assistant can explore guides and tutorials to set it up and integrate it with their system.

Post-Hurricane Scams: What to watch out for

Source: WJHG

Summary: In the aftermath of hurricanes, communities rally together to rebuild and support one another. However, this period also sees a rise in scammers aiming to exploit the vulnerable. WJHG's video report sheds light on the various scams that surface post-hurricane and offers advice on steering clear of these deceptive tactics.

Key Takeaways:

• Post-hurricane scenarios are prime opportunities for scammers to prey on victims.

• Verification of contractor credentials is crucial; avoid making payments upfront.

• Unsolicited calls or emails offering repair services or claiming affiliation with government agencies should be approached with caution.

• Comprehensive research, seeking references, and depending on trusted information sources are essential steps to avoid scams.

We deeply appreciate you joining us on this journey through the intricate world of cybersecurity. Your commitment to staying updated and proactive is what truly defines a "hard target" in this ever-evolving digital age. Remember, knowledge is power, and sharing this knowledge only amplifies our collective strength against cyber threats.

A special shoutout to ChatGPT, our AI-powered assistant, for making this digest possible and ensuring we bring you the most relevant and timely information.

Continue to delve into our future issues for more insights and updates. If you haven't already, please consider subscribing to stay ahead of the curve: https://secntechsecure.beehiiv.com/subscribe

For those who've been with us and for newcomers alike, sharing is caring. Pass this digest to friends, family, and colleagues to fortify our digital community.

Catch the latest issue and past editions online at: https://secntechsecure.beehiiv.com

For an even deeper exploration into cybersecurity, don't forget to visit our official site: kdsecntech.com

Thank you once again, and here's to a safer digital tomorrow!

Kingdom Dominion Security & Technology