Cloud

6/23/2018
08:00 AM
Steve Zurier
Steve Zurier
Slideshows
Connect Directly
Twitter
RSS
E-Mail
50%
50%

8 Security Tips for a Hassle-Free Summer Vacation

It's easy to let your guard down when you're away. Hackers know that, too.
Previous
1 of 9
Next

Image Source: Shutterstock via studiostoks

Image Source: Shutterstock via studiostoks

It's easy to let your security guard down when you're away on vacation. Worries about credit cards, online bank accounts, and sensitive medical information getting into the wrong hands tend to fall by the wayside.

Hackers know that, too. Lurking in the ether, they're waiting for you to make a misstep.

"We don't want to discourage travel, but people need to understand that when you travel, your security is at a higher risk than normal," says Daniel Eliot, director of small business programs at the National Cyber Security Alliance.

What's a traveler to do? Eliot, along with T. Frank Downs, director of SME cybersecurity practices at ISACA, offer eight security tips that corporate users and home office workers can use to stay safe this summer. After all, the last thing anyone needs when trying to wind down is a nasty ransomware attack. Have fun – and be safe.

Why Cybercriminals Attack: A DARK READING VIRTUAL EVENT Wednesday, June 27. Industry experts will offer a range of information and insight on who the bad guys are – and why they might be targeting your enterprise. Go here for more information on this free event.

 

Steve Zurier has more than 30 years of journalism and publishing experience, most of the last 24 of which were spent covering networking and security technology. Steve is based in Columbia, Md. View Full Bio

Previous
1 of 9
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Patrick Ciavolella
50%
50%
Patrick Ciavolella,
User Rank: Author
7/23/2018 | 8:26:06 AM
Basic items too often forgotten
Great read, and all very interesting items that are often forgotten when "vacation mode" kicks in.  Updating passwords, or simply change them before you leave and once you return in my case, is a great tactic that is almost never used by the general population.  Physical Security is a big item people often forget about.  Posts made on Social Media stating you are out of town and gone until a certain date open the door for home security and theft, but are almost never thought about in the moment.  
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
6/25/2018 | 11:31:53 PM
Re: Not just for vacations
@REISEN: You wouldn't believe how frequently people I barely know (if not strangers) send PDFs to me. Legitimate ones. But I refuse to open them without some sort of verification, because they should know better, period.
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
6/25/2018 | 8:18:16 AM
Re: Not just for vacations
Public Wife is a danger of course but always more dangerous is the User accessing stupidly on the network, whether corporate protected or wide open pubic.  The basics are easy - never open attachments unless WELL known and verified.  Watch web browsing always.  Watch activity.  SCAN system upon boot always.  If suspect, shut down immed.  Sys restore if you want.  Simple, easy things. 
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
6/23/2018 | 6:33:10 PM
Not just for vacations
These tips are important outside of the vacation context too. For my own part, I don't access public Wi-Fi period except in the rarest of circumstances with the least circumstantial risk.
New Cold Boot Attack Gives Hackers the Keys to PCs, Macs
Kelly Sheridan, Staff Editor, Dark Reading,  9/13/2018
Yahoo Class-Action Suits Set for Settlement
Dark Reading Staff 9/17/2018
RDP Ports Prove Hot Commodities on the Dark Web
Kelly Sheridan, Staff Editor, Dark Reading,  9/17/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Flash Poll
The Risk Management Struggle
The Risk Management Struggle
The majority of organizations are struggling to implement a risk-based approach to security even though risk reduction has become the primary metric for measuring the effectiveness of enterprise security strategies. Read the report and get more details today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-3829
PUBLISHED: 2018-09-19
In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could scale out allocators on new hosts with an invalid roles token. An attacker with access to the previous runner ID and IP address of the coordinator-host could add a allocator to an existing ECE install to ga...
CVE-2018-3830
PUBLISHED: 2018-09-19
Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
CVE-2018-3831
PUBLISHED: 2018-09-19
Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch _cluster/settings API, when queried, could leak sensitive configuration information such as passwords, tokens, or usernames. This c...
CVE-2018-3823
PUBLISHED: 2018-09-19
X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. Users with manage_ml permissions could create jobs containing malicious data as part of their configuration that could allow the attacker to obtain sensitive information from or perform destructiv...
CVE-2018-3824
PUBLISHED: 2018-09-19
X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive inf...