Dropbox, the cloud storage services provider, disclosed a significant breach affecting its digital signature service, Dropbox Sign (formerly known as HelloSign). This breach, discovered on April 24, 2024, resulted in unauthorized access by unidentified threat actors to user emails, usernames, and general account settings associated with all users of the digital signature product. Additionally, for certain subsets of users, the attackers accessed phone numbers, hashed passwords, and authentication information such as API keys, OAuth tokens, and multi-factor authentication details.

The breach extends its impact beyond just Dropbox Sign users, as third parties who received or signed documents through Dropbox Sign but didn't create accounts themselves have also been affected, exposing their names and email addresses. Despite the severity of the breach, the investigation conducted so far...

Antivirus isn't enough to keep you safe from cyberattacks. You might feel safe, but it doesn't stop all threats. Remember to update your software, manage passwords safely, and learn about cybersecurity. Using multiple security measures is the best way to stay protected.

Do you have any queries? Submit a ticket at [PB8324.3] Data Security Support

Scams involving online surveys and market research trick people into disclosing personal information under disguises, which is then used for a fraud marketing or identity theft. You should assess questions, confirm the validity of surveys, and avoid from providing private information unless needed in order to be safe against these scams.

Do you have any quiries? Submit a ticket at [PB8324.3] Data Security Support

When visiting an illegal website, you may encounter pop-up ads claiming 'Virus Detected' or flashing red exclamation marks. This tactic, known as scareware, aims to prompt panic and trick users into downloading malicious 'antivirus software.' If you see this, don't panic. Instead, install a pop-up blocker and carefully close the ad by clicking the X button.

Beware of tempting deals on your wishlist items at unusually low prices – it could be a scam aiming to lure you into clicking on infected websites. Stay cautious, verify the legitimacy of information, double-check the source, and avoid rush clicking! 

Hello and welcome to this week's Securi-Trivia! This quiz is designed to test your knowledge and reinforce the cybersecurity tips we send out every day. Each week, we'll ask you 10 multiple-choice questions based on the daily tips and awareness we've sent out during the week. The questions will cover a range of topics, including understanding data security and more. To pass the quiz and receive dreampoints, you'll need to get at least an 80% passing score.

Remember, staying safe online is a shared responsibility. Answer the questions to test your knowledge. Don't worry if you don't get them all right on the first try - you can retake the quiz as many times as you like!

Click this link to take the quiz: https://securitytips.cloudstaff.com/quizzes/view/135 

When writing online reviews for products or services you've purchased, avoid including personal information to safeguard your privacy. Additionally, ensure that any pictures attached to your reviews don't inadvertently capture sensitive data, such as credit card numbers or addresses, to minimize the risk of identity theft. Prioritizing these precautions helps protect both yourself and other users in the online community.

Got inquiries? Submit a ticket at [PB8324.3] Data Security Support.

Be cautious with Bluetooth due to BLUFFS attacks, allowing nearby attackers to manipulate encryption and compromise data privacy. To mitigate risks, avoid using Bluetooth in public areas, turn it off when unnecessary, update device software regularly, and heed manufacturer security advice.

Do you have any queries? Submit a ticket at [PB8324.3] Data Security Support

Beware of push notification attacks, or Multi Factor Authentication (MFA) attacks, where hackers try to access MFA-protected accounts by deceiving users into approving fake authentication requests via push notifications. Stay vigilant, verify push notification requests before approving, and report any suspicious activity, including social engineering tactics like impersonating legitimate websites or services.

Got inquiries? Submit a ticket at [PB8324.3] Data Security Support.

Get ready to strengthen your grasp on cybersecurity threats within Microsoft 365. This month, we're diving into protecting your digital space in the Microsoft 365 environment. Score 80% or higher on our quiz to gain 500 DREAMPOINTS!

Dive into topics including:

• Best Practices for Handling Suspicious Emails and Attachments
• Phishing Attacks in Microsoft 365
• Malware Spread Through Microsoft Teams
• Data Security in Microsoft SharePoint and OneDrive

Join the quiz this May to enhance your ability to navigate the web safely. Complete the quiz to win PHP200 load – a great opportunity to learn and secure a win!

Click this link to take the quiz: https://securitytips.cloudstaff.com/quizzes/view/133