In case you missed the news...

Re-cap of this week's Newsletters

Hey Techies! In case you may have missed this week’s Newsletters, here is a recap:

We want to raise awareness about a concerning trend that is affecting more and more people: text-messaging scams. These scams have resulted in significant financial losses for individuals across the United States. Scammers are using various tactics to deceive and exploit unsuspecting victims.

Text-messaging scams have become increasingly effective by offering enticing rewards or creating a sense of urgency. They rely on the convenience and speed of texting to catch people off guard, making it harder to think critically about the messages they receive.

To protect yourself, it is crucial to be cautious and take necessary precautions. Never click on any links or respond to unexpected text messages. Instead, report all suspicious texts to ReportFraud.ftc.gov or forward the potential scam message to 7726 (SPAM). By reporting these scams, you assist cellphone-service providers in identifying and eliminating fraudulent activities.

We want to inform you about a recent security vulnerability that has been discovered and addressed by Eaton, a prominent power and electronics giant. This vulnerability affected their cloud-based system called SecureConnect, which enables customers to remotely access, manage, and control their security alarm systems through a mobile app. 

Security researcher Vangelis Stykas identified a specific vulnerability known as an insecure direct object reference (IDOR). This flaw allowed unauthorized individuals to sign up as new users and assign themselves to different user groups, including the "root" group. The root group had unrestricted access to all smart alarm systems connected to Eaton's cloud.

Social media post

At a time when cyberattacks are becoming increasingly common, it's essential to remain vigilant and take necessary steps to protect your personal information. We recommend implementing safe cybersecurity practices such as using strong passwords, enabling multi-factor authentication, and keeping software up-to-date, among others.

We also suggest staying up-to-date on the latest cybersecurity news and trends to be aware of potential threats and vulnerabilities. Finally, we encourage you to subscribe to and Share our newsletter to receive regular updates and insights on the ever-changing cybersecurity landscape. Let’s continue to grow our community of cybersecurity techies!

Link to cybersecurity newsletter: https://cybereducation101.beehiiv.com/subscribe

#stayvigilant

cybereducation101