To protect your devices from potentially harmful software, consider implementing application approval. This approach allows only trusted applications to run, effectively blocking malicious programs from executing. By controlling which software can operate on your devices, you can create a safer environment and minimize the risk of security breaches.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Cybersecurity experts are warning about North Korean hackers trying to target potential victims on LinkedIn with malware called RustDoor.

According to Jamf Threat Labs, they discovered an attack where a user was approached on LinkedIn by someone pretending to be a recruiter for a legitimate decentralized cryptocurrency exchange called STON.fi.

This attack is part of a broader strategy by North Korean cybercriminals aiming to breach networks by pretending to conduct job interviews or coding tasks.

The financial and cryptocurrency sectors are primary targets for these state-sponsored hackers, who seek to make illegal profits and fulfill the goals of the North Korean regime.

Source: https://thehackernews.com/2024/09/north-korean-hackers-target.html

Ensure you review and understand the privacy policies and security measures of any online service before uploading sensitive documents. Opt for platforms with robust encryption and data protection practices to minimize the risk of unauthorized access and leaks. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Getting a new device is exciting, but securing and optimizing it is crucial. Follow these tips to set up and protect your device:

• Update Software: Ensure all software is up to date to fix vulnerabilities.
• Enable Security Features: Activate firewalls, antivirus, Multi-Factor Authentication (MFA), and biometrics for protection.
• Configure Privacy Settings: Adjust settings to control app and service data sharing.
• Install Reputable Apps: Download apps only from official stores to reduce malware risk.

Stay informed with ongoing cybersecurity education to protect your digital assets. Regularly update your knowledge from trusted sources like cybersecurity blogs and courses. Use strong passwords, enable multi-factor authentication, and keep devices updated for enhanced protection against evolving threats. Being proactive strengthens your cybersecurity defenses effectively. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Exercise caution when downloading or using free software and tools. They may come with hidden risks or adware that can compromise your security and privacy. Always verify the source and read reviews before installing. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

When using company devices, adopt security policies and guidelines. Avoid installing unauthorized software and follow protocols for data encryption and secure communication. Keep software updated and report lost or stolen devices promptly to IT. These practices help protect company data and maintain a secure environment. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

When sending sensitive files via email, encrypt attachments to protect them from unauthorized access. Use encryption tools provided by your email service and share the decryption password securely through a separate channel. This ensures your sensitive information remains confidential and safe during transmission. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

When parting with old devices or data, secure disposal is vital to protect your information. Follow these tips:

• Destroy devices: Factory reset, then shred or drill hard drives and SSDs.
• Recycle responsibly: Use certified e-waste centers or donation programs.
• Shred documents: Use a cross-cut shredder for confidential papers.
• Secure disposal: Utilize designated secure bins to prevent theft.

Two men have been indicted in the U.S. for allegedly running WWH Club, a dark web marketplace specializing in sensitive personal and financial information. Alex Khodyrev, 35, from Kazakhstan, and Pavel Kublitskii, 37, from Russia, face charges of conspiracy to commit access device fraud and wire fraud.

From 2014 to 2024, Khodyrev and Kublitskii are accused of managing WWH Club and its associated sites, including wwh-club[.]ws, wwh-club[.]net, and skynetzone[.]org. These sites served as platforms for cybercriminal activities, including fraud and identity theft.

The indictment follows an FBI investigation that began in July 2020. Authorities traced WWH Club's main domain to an IP address hosted by DigitalOcean, leading to a federal search warrant and subsequent charges.

If convicted, the men could each face up to 20 years in federal prison. The indictment also seeks the forfeiture of Khodyrev’s 2023 Mercedes-Benz G63 AMG and Kublitskii’s 2020 Cadillac CT5 Sport,...