Newsletter Archives

• You think you’ve been hacked?

  Posted on March 8th, 2021 at 01:02 Susan Bradley Comment on the AskWoody Lounge

  PATCH WATCH

  

  By Susan Bradley

  Have you been hacked?

  Attackers these days are of two varieties — those that want you to know you’ve been attacked and those that don’t. The first camp is quite obvious about it. They are the ransomware attackers, the ones that throw up a note to let you know that your system is no longer your own and is instead held hostage. The second type of attacker is silent, lurking inside your computer with the goal of harvesting information or — worse yet — as a means to attack someone or something else.

  Read the full story in the AskWoody Plus Newsletter 18.9.0 (2021-03-08).

  AskWoody Plus Newsletter, On Security, Patch Watch AskWoody Plus Newsletter, Patch Lady Posts, security

• More on Win10’s Ransomware protection

  Posted on February 8th, 2021 at 01:45 Fred Langa Comment on the AskWoody Lounge

  LANGALIST

  More on Win10’s Ransomware protection

  By Fred Langa

  Many subscribers tried enabling this optional security enhancement, only to discover it can be hard to get going!

  There are at least five reasons why Ransomware protection — and other Win10 security features — might not be available on your PC.

  Here’s what they are, and what you can do about them.

  Read the full story in AskWoody Plus Newsletter 18.5.0 (2021-02-08).

  AskWoody Plus Newsletter, LangaList AskWoody Plus Newsletter, LangaList, Ransomware, security, Windows 10

• Have you enabled Win10’s ransomware protection?

  Posted on February 1st, 2021 at 01:05 Fred Langa Comment on the AskWoody Lounge

  LANGALIST

  Have you enabled Win10’s ransomware protection?

  By Fred Langa

  This free, optional feature is disabled by default but, if enabled, can help protect and recover your PC from a ransomware takeover!

  It’s easy to enable the ransomware protection, but you should know about its quirks and drawbacks before doing so. Here’s how to decide whether this optional protection is for you and, if so, how to get it going!

  Read the full story in AskWoody Plus Newsletter 18.4.0 (2021-02-01).

  AskWoody Plus Newsletter, LangaList AskWoody Plus Newsletter, security, Windows 10

• Business cyber insurance: A sea change

  Posted on November 15th, 2020 at 21:00 Tracey Capen Comment on the AskWoody Lounge

  SMALL-BUSINESS COMPUTING

  By Amy Babinchak

  For IT businesses — and by extension, their clients — adapting to a rapidly shifting technology environment has been a challenge.

  Not the least of those changes is insuring for data-related privacy and security losses.

  Not that long ago, insuring my business was relatively simple. We were covered primarily for liability and errors/omissions. Today, the array of events covered by my policy is mind-boggling — much of it focused on data security and privacy.

  Read the full story in AskWoody Plus Newsletter 17.45.0 (2020-11-16).

  AskWoody Plus Newsletter, Small Business Computing AskWoody Plus Newsletter, Business insurance, IT changes, privacy, security

• Web presence: Working with search engines

  Posted on September 20th, 2020 at 21:00 Tracey Capen Comment on the AskWoody Lounge

  SMALL-BUSINESS WEBSITES

  By Will Fastie

  Leveraging Web-based services is an essential part of building an effective online presence — and search engines are a top priority.

  In my previous installment, I stated that this article would focus on social networks. I’d intended to include some information on search engines, but during the research and writing process, I realized there was more to say about search.

  One of the buzz words constantly thrown about when discussing online searches is “search-engine optimization.” I’ll state right from the start that I’m dubious about the value of current SEO practices — and practitioners.

  Read the full story in AskWoody Plus Newsletter 17.37.0 (2020-09-21).

  AskWoody Plus Newsletter, Web Development AskWoody Plus Newsletter, Business websites, Google Search, Online advertising, security, SEO

• Hybrid attack can extract data from inert RAM

  Posted on November 11th, 2019 at 01:10 Tracey Capen Comment on the AskWoody Lounge

  LANGALIST

  By Fred Langa

  It sounds impossible, but data can be recovered from RAM chips — even after they’ve been removed from a PC.

  Specialized attacks on memory modules can reveal working passwords and cryptographic keys still stored random-access memory, possibly allowing malicious hackers to bypass encryption services such as BitLocker, VeraCrypt, FileVault, and others!

  Plus: Disabling Windows Firewall and its nags.

  Read the full story in AskWoody Plus Newsletter 16.41.0 (2019-11-11).

  LangaList AskWoody Plus Newsletter, RAM attacks, security, Windows notifications

• Freeware Spotlight — CipherShed

  Posted on July 8th, 2019 at 01:00 Tracey Capen Comment on the AskWoody Lounge

  Best Utilities

  By Deanna McElveen

  In a digital world that’s becoming increasingly less safe, data encryption is one of the better tools for keeping cyber thieves at bay.

  That’s especially true if you travel with a laptop or a flash drive — just imagine the damage you might incur if your device were lost or stolen. But keeping sensitive files, folders, and/or entire disks encrypted will make your files inaccessible to the device’s “new owner.”

  Read the full story in the AskWoody Plus Newsletter 16.25.0 (2019-07-08).

  AskWoody Plus Newsletter, Utilities AskWoody Plus Newsletter, CipherShed, encryption, security

• Windows 7: Preparing for an uncertain future

  Posted on July 1st, 2019 at 01:15 Tracey Capen Comment on the AskWoody Lounge

  ON SECURITY

  By Susan Bradley

  By now every Win7 user should know that official support for the venerable OS ends next year.

  The final updates should go out on January 14, 2020 (more MS info) — at least they’ll end for those of us who don’t have deep corporate pockets to pay for extra patches.

  Read the full story in the AskWoody Plus Newsletter 16.24.0 (2019-07-01).

  On Security, Windows 7 AskWoody Plus Newsletter, safety, security, updates, windows 7

• Really useful Windows 10 features

  Posted on July 1st, 2019 at 01:00 Tracey Capen Comment on the AskWoody Lounge

  WINDOWS 10

  By Amy Babinchak

  When Microsoft releases a new version of Windows, I’ll bet lots of users don’t bother to investigate the changes and new features — unless Microsoft moved the users’ cheese.

  Then I hear from clients, complaining that something in the UI is different and they’re not happy with the change. After upgrades, most Windows users tend to just continue doing what they’ve always done. And that’s too bad, because some of the new features are truly useful.

  Read the full story in the AskWoody Plus Newsletter 16.24.0 (2019-07-01).

  Windows 10 AskWoody Plus Newsletter, clipboard, fonts, night light, security, Windows 10

• Microsoft security’s unseemly jab at Google

  Posted on October 19th, 2017 at 08:29 woody Comment on the AskWoody Lounge

  In yesterday’s Windows Security blog post Browser security beyond sandboxing, Microsoft’s Jordan Rabet (part of the “Microsoft Offensive Security Research team” – no, I didn’t make that up) took aim at Google. There’s a whole lot of technical discussion about the superiority of Edge in that article. There’s also a deep dig at Google.

  Catalin Cimpanu at Bleepingcomputer boils it down:

  The problem that Rabet pointed out was that the fix for the bug they reported was pushed to the V8 GitHub repository, allowing attackers to potentially reverse engineer the patch and discover the source of the vulnerability.

  It didn’t help that it took Google three more days to push the fix to the Chromium project and the Chrome browser, time in which an attacker could have exploited the flaw.

  Taking into account that this happened in mid-September, Microsoft had no reason to detail a bug in a Chrome version that’s not even current. Chrome 62 is the latest Chrome version.

  Paul Thurrott has a great article, turning Microsoft’s old words against itself.

  What Microsoft should have done is take the high ground. Do the right thing for your shared customers and just shut up about it. But it didn’t.

  It’s time for both sides to grow up and work together. Take potshots at each other, sure. But not over security.

  If you’re interested in browser security, I suggest you read it.

  Windows Patches/Security Browser security, Google, Microsoft, security

• Snapchat’s new Snap Map shares your location

  Posted on June 23rd, 2017 at 02:51 Kirsty Comment on the AskWoody Lounge

  A furore has erupted over Snapchat’s new location-sharing Snap Map – unless you set the app to “Ghost Mode”, your location is shared with your contacts.

  We’ve built a whole new way to explore the world! See what’s happening, find your friends, and get inspired to go on an adventure!

  It’s easy to get started — just pinch to zoom out and view the Map! You decide if you want to share your location with friends, or simply keep it to yourself with Ghost Mode.

  If your friends are sharing their location with you, their Actionmoji will appear on the Map. Actionmojis only update when you open Snapchat.

  We hope you enjoy the new Map as much as we do!
  Happy Snapping!
  Team Snap

  Many are retweeting instructions on how to set the Ghost Mode, while many are debating why anyone thought this was a safe idea…

  If you are using Snapchat, please check your settings now.

  Other PSA, security, Snapchat

• The Dangers of Posting Your X-Rays to Social Media

  Posted on June 16th, 2017 at 02:53 Kirsty Comment on the AskWoody Lounge

  Malwarebytes Labs published a post by William Tsing on June 9, 2017, explaining the problems that can occur when x-rays are shared online.

  The problem stems from the private details of both the patient and the hospital that are shown on x-rays. Most contain the patient’s full name, date of birth, and sometimes their Social Security Number, and will often contain the name of the medical facility that took the x-ray.

  The information can be used together to enable either identity theft or doxing, but it could also be used to jeopardise the security of the network of the medical facility. Personally, the name of the hospital would give your location, to add to your name and date of birth, and could be used to access property tax, tax or voting records. For the hospital, a networked x-ray machine connected to the internet could be identified in the x-ray details, which could be used to access the system. Malwarebytes were able to gain a lot of information from one x-ray they checked.

  “Yikes. Medical infrastructure security has problems. A lot of problems. But while the responsibility for an insecure network lies with the organization running it, posting photos that have exploitable information is also not a great thing. Given that vulnerabilities in the medical space can have catastrophic consequences, we should take extra care before exposing any data from inside a hospital or doctor’s office.”

  If you really must share an x-ray online, crop it first, so no identifying information remains. Read the full article on blog.malwarebytes.com

  Other Malwarebytes, security
• « Older Entries