While it’s convenient to let your browser auto-save passwords for easy login, this practice poses significant security risks. Browsers often store passwords in a less secure way, making them vulnerable to theft if your browser or device is compromised. Instead, use a dedicated password manager to securely store and autofill your passwords, as these tools offer stronger encryption, two-factor authentication, and more robust protection for your sensitive information across all devices.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Never click on "Unsubscribe" links in suspicious or unsolicited emails, as they may confirm your email address to scammers. This can lead to even more spam or phishing attempts targeting you. Instead of clicking the link, mark the email as spam to block future messages. If unsure, simply delete the email to protect your personal information. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Enable security alerts on all accounts to monitor suspicious activity in real-time, such as unknown logins or unauthorized changes. This lets you act quickly to prevent fraud.

Why You Need Security Alerts:

• Instant notifications of unrecognized logins or device access
• Alerts for changes to account settings
• Quick action to secure accounts before damage occurs
• Stay informed across all accounts with sensitive information

Set alerts for all accounts holding sensitive information to prevent future issues.

Be cautious when accepting LinkedIn invitations from people you don’t know, as scammers may use fake profiles to gather personal information or spread malicious links. Always verify profiles for red flags and avoid sharing sensitive details or clicking on suspicious links. Stay vigilant and prioritize security to ensure your LinkedIn experience remains safe and professional.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Be cautious when encountering file extensions such as .exe, .scr, and .vbs, as they are commonly used in phishing attacks. These types of files can potentially harm your device or steal personal information. Always ensure that files come from a trusted source before opening them. If you are unsure about the legitimacy of a file, it's better to avoid clicking on it. Verifying the file's safety can prevent potential security breaches and protect your device and sensitive data. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

IMSI catchers can intercept communications and track your location by tricking your phone into connecting to fake cell towers, exposing your IMSI (International Mobile Subscriber Identity). To protect yourself, use secure 4G/5G networks, encrypted messaging apps like  WhatsApp, and a VPN. Also, disable mobile data when not in use and monitor network connections for suspicious activity to safeguard your privacy.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

OpenAI announced Friday that it banned several accounts using its ChatGPT tool to develop an AI-powered surveillance system, likely originating from China. The tool, leveraging Meta's Llama model, was used to monitor anti-China protests in the West, collect data from social media, and share insights with Chinese authorities. This operation, codenamed Peer Review, also helped analyze posts related to Uyghur rights protests, though the authenticity of some images remains unclear. Additionally, OpenAI disrupted other malicious campaigns, including a North Korea-linked job scam, anti-U.S. content creation in Latin America, and Iranian influence efforts.

The rise of AI-driven disinformation highlights growing concerns over bad actors using tools like ChatGPT for cybercrime. OpenAI urges stronger monitoring, access controls, and clearer policies to detect and block malicious activities. Users are advised to update security practices, report suspicious content, and collaborate...

Before entering your login details, always double-check the URL to ensure you're on the official website. Phishing sites often use URLs that look like the real ones, tricking you into giving away your credentials. Stay vigilant and make sure the website starts with "https://" and has a padlock icon next to the URL for added security. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Treat text messages like emails, especially from e-wallet companies, as scammers may impersonate trusted services. Always verify the sender and avoid clicking suspicious links or sharing sensitive info.

Do's:

• Verify the sender's phone number/contact info.
• Check URLs before clicking links.
• Use official apps/websites to log in.
• Report suspicious messages.

Avoid:

• Clicking unknown links.
• Sharing personal/payment info without verification.
• Installing apps from untrusted sources.
• Responding to unsolicited requests for confidential info.

To further enhance the security of your devices, combine biometric authentication (like fingerprint or facial recognition) with a strong backup screen lock (such as a PIN or password). Your device remains protected by the secondary lock if the biometric scan fails or is bypassed, ensuring unauthorized access is blocked. This dual-layer protection adds an extra level of security, keeping your device safe.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support