September 5, 2023
Good morning, everyone!
This week’s critical vulnerabilities:
Patch All the Things! |
Verify apps & developers before downloading
Recently a fake Signal app was found on the Google Play Store. Developed by threat actors linked to China, it managed to pass copies of all messages to an account controlled by the bad guys. Just a friendly reminder to verify apps before you download -- do you know the developer? do they have a good rating? are there multiple apps with the same name?
Close applications, log off and reboot occasionally
Yep, I know you know this because I've talked about it before, but this is another reminder -- because people seem to forget!
When you are done with your device for awhile, after logging out of websites and any open applications, go ahead and close all those applications (yes, even on your mobile devices -- do you know how to close apps on your Apple and Android devices?)
Why? Many applications, like Google Chrome for example, only "automatically" apply updates when the browser is closed and reopened. Say what? Yep, even if you have automatic updates turned on, you may not always be getting them installed, only downloaded -- and that doesn't do much good.
After you have closed all those applications, go ahead and log off your computer! Sometimes those "automatic updates" only get installed when you log off.
Finally, maybe once a week or so, go ahead and reboot your devices. Sometimes those "automatic updates" only get installed when you reboot.
There may be non-security benefits to all these things as well -- reducing memory usage, improving battery life, reducing the risk of file corruption, and more.
So pick up this new habit this week!
Remember, you can read past editions of this newsletter on our website, along with tons more information under the Resources tab.
Have a great week!
Glenda R. Snodgrass
grs@theneteffect.com
(251) 433-0196 x107
https://www.theneteffect.com
For information security news & tips, follow me!
Security Awareness Training Available Here, There, Everywhere!
Thanks to COVID-19, lots of things went virtual, including my employee Security Awareness Training. Live training made a comeback a few months
ago, but many organizations are retreating. No worries. Wherever you and your employees may be, I can deliver an interesting and informative training session in whatever format you prefer.
Contact me to schedule your employee training sessions. They're fun! ☺