Cloud

6/23/2018
08:00 AM
Steve Zurier
Steve Zurier
Slideshows
Connect Directly
Twitter
RSS
E-Mail
50%
50%

8 Security Tips for a Hassle-Free Summer Vacation

It's easy to let your guard down when you're away. Hackers know that, too.
Previous
1 of 9
Next

Image Source: Shutterstock via studiostoks

Image Source: Shutterstock via studiostoks

It's easy to let your security guard down when you're away on vacation. Worries about credit cards, online bank accounts, and sensitive medical information getting into the wrong hands tend to fall by the wayside.

Hackers know that, too. Lurking in the ether, they're waiting for you to make a misstep.

"We don't want to discourage travel, but people need to understand that when you travel, your security is at a higher risk than normal," says Daniel Eliot, director of small business programs at the National Cyber Security Alliance.

What's a traveler to do? Eliot, along with T. Frank Downs, director of SME cybersecurity practices at ISACA, offer eight security tips that corporate users and home office workers can use to stay safe this summer. After all, the last thing anyone needs when trying to wind down is a nasty ransomware attack. Have fun – and be safe.

Why Cybercriminals Attack: A DARK READING VIRTUAL EVENT Wednesday, June 27. Industry experts will offer a range of information and insight on who the bad guys are – and why they might be targeting your enterprise. Go here for more information on this free event.

 

Steve Zurier has more than 30 years of journalism and publishing experience, most of the last 24 of which were spent covering networking and security technology. Steve is based in Columbia, Md. View Full Bio

Previous
1 of 9
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Patrick Ciavolella
50%
50%
Patrick Ciavolella,
User Rank: Author
7/23/2018 | 8:26:06 AM
Basic items too often forgotten
Great read, and all very interesting items that are often forgotten when "vacation mode" kicks in.  Updating passwords, or simply change them before you leave and once you return in my case, is a great tactic that is almost never used by the general population.  Physical Security is a big item people often forget about.  Posts made on Social Media stating you are out of town and gone until a certain date open the door for home security and theft, but are almost never thought about in the moment.  
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
6/25/2018 | 11:31:53 PM
Re: Not just for vacations
@REISEN: You wouldn't believe how frequently people I barely know (if not strangers) send PDFs to me. Legitimate ones. But I refuse to open them without some sort of verification, because they should know better, period.
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
6/25/2018 | 8:18:16 AM
Re: Not just for vacations
Public Wife is a danger of course but always more dangerous is the User accessing stupidly on the network, whether corporate protected or wide open pubic.  The basics are easy - never open attachments unless WELL known and verified.  Watch web browsing always.  Watch activity.  SCAN system upon boot always.  If suspect, shut down immed.  Sys restore if you want.  Simple, easy things. 
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
6/23/2018 | 6:33:10 PM
Not just for vacations
These tips are important outside of the vacation context too. For my own part, I don't access public Wi-Fi period except in the rarest of circumstances with the least circumstantial risk.
Valentine's Emails Laced with Gandcrab Ransomware
Kelly Sheridan, Staff Editor, Dark Reading,  2/14/2019
High Stress Levels Impacting CISOs Physically, Mentally
Jai Vijayan, Freelance writer,  2/14/2019
Mozilla, Internet Society and Others Pressure Retailers to Demand Secure IoT Products
Curtis Franklin Jr., Senior Editor at Dark Reading,  2/14/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-8933
PUBLISHED: 2019-02-19
In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and then execute this file, via this sequence of steps: visiting the management page, clicking on the template, clicking on Default Template Management, clicking on ...
CVE-2019-7629
PUBLISHED: 2019-02-18
Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote attackers to execute arbitrary code by sending a long message to the client.
CVE-2019-8919
PUBLISHED: 2019-02-18
The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.
CVE-2019-8917
PUBLISHED: 2019-02-18
SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may b...
CVE-2019-8908
PUBLISHED: 2019-02-18
An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" screen, and uploading an image file, as demonstrated by a .php filename and the "Content-Type: image/g...