Skip to content

1

I found "Too late You're Hacked" a very interesting read. This is good basic information that small business managers should pay attention to.

Of particular note was in the beginning of the book where you describe who is attacking and why because far too many companies think this

is never going to happen to them!

Risk management was covered and this is a topic, once again, that too many companies ignore. Quite honestly setting up a risk management

procedure or system is not very complicated but "you have to do it and you have to manage it". I liked that point of view.

This book covers all good basic principles needed to properly defend your small business network and computers.

I found this book book an easy read and it is not directed at the highly skilled network guru's but of course it can be used by them.

This book is directed towards a person wanting to explore what they need to start to look at to defend their small business network and

computers and for that I give it a high grade.

                                                                      Mike K. with LinMot USA

Thanks Mike for the review!!

Explaining what my book "Too Late You're Hacked", Defending Small Businesses' Computers and Networks"

Order Book

Too Late, You're Hacked! - Defending Your Small Business' Computers and Networks is available from the publisher at Publishing Concepts bookstoreOpens in a new window Ebook and Paperback versions:

Yes you should use password managers, long passwords over short complex as you see below's XKCD famous image. we discussed in our blog oversitesentry before: https://oversitesentry.com/password-managers-are-impossible-to-hack/

It is useful to review the latest info on length of passwords:

But what about the password manager? How should you use it exactly? Do you let it pre-fill the password and username in your browser?

If you do you may be making it easier for a hacker to grab your information if they are on your system according to marektoth. As he says specifically:

Most password managers have the autofill feature enabled by default, even though it reduces the security of the stored password.

If a user uses the default configuration or follows the password manager's recommendation, it is possible to steal the saved login credentials from 11 of the 16 tested browsers and password managers in one mouse click. So the database/password on the website doesn't have to be leaked, and the attacker still gets your data - all in readable and unencrypted form (in plaintext).

I am always looking for more information that changes the current cybersecurity landscape in case we need to change our TTP (Tactics Techniques and Procedures) so as to help us defend from the criminal hackers.

So change your TTP everyone - and do not pre-fill !!!

Order my book for more good Cybersecurity advice (If you purchase from Publishing concepts Store we keep more than if you buy from Amazon.

Today's news is typical for Cybersecurity:

April Microsoft Patch Tuesday - (the day that Microsoft releases regular patches conveniently released once a month when possible) was on April 13th since it is the 2nd Tuesday of the month.

Are you comfortable with your ignorance? Your discomfort? Is it a standard Operating Procedure and thus since it happens every day nothing new will happen?

The problem with Cybersecurity is that it changes every month and sometimes faster:

Contact me to discuss your cybersecurity or buy the book and work on it after reading.

Example #1: March 28, 21 - Sick.codes has the information and chronology of a disturbing vulnerability found in some software.

If one looks at the details of this vulnerability and how it was found (by accident) and what was found was that some software (that includes netmask) it is included in the npm package in Unix/Linux systems or other operating Systems.

A CVE has been issued CVE-2021-28918 . Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs and reach critical VPN or LAN hosts.

Does the above explanation make sense to non-systems or programmer people?

Interesting to note that

So what does this vulnerability mean to your systems and devices?

It means that there may be software that incidentally has been downloaded 278,000 times which has this arcane problem. So we have to find out whether it will affect and then upgrade. It may not affect your program, it depends (as the sick.codes post explains.

How do we fix this? We have to have a system of upgrading/patching and testing your devices to find out if your systems are vulnerable.

Contact Us to discuss or buy my ebook for now soon paper copy coming.

To do that what I need to do is to hand you hundreds of pages of Information Technology understanding specific for your environment.

I.e. when you need to figure out how to do this thing that is cybersecurity for your environment does it seem like you are building a new house brick by brick? Well, I have good news to tell you - I have 1000 bricks to dump in your lap. Here are the bricks - build a nice house.

Good Luck!

This analogy seems a bit much, but maybe give you a better understanding that many security people have a complex explanation

So instead what i recommend is to wait for my book as it will be out soon -

Then you can develop a risk management strategy and Security policy just to get started.

You can get a fixvirus.com webcover when you join our email list for news on the book. Oversitesentry page with webcover email list form.

Psychology of security –Humans avoid security on purpose sometimes, essentially a risk gambler. In my upcoming book we will discuss the interesting phenomenon where 'enough' people are not paying attention(about 30%) so that everyone now is being attacked more. (with so many machines as an attack surface the criminal hacker has a target rich environment)

We seem to be in a kind of catch 22 in cybersecurity

A lot of people and thus companies do not want to tell others if they need help or have problems (in their cybersecurity). It could just be that it is too complex an issue.

Many managers or owners are not aware the danger that they are in, they think they are not a target(too small to get attacked). Not true, at minimum the computer itself is of use as an attack platform.

These are just some of the reasons about 30% are not doing necessary prevention tasks.No communication of problems here, causes a lot of people not to pay attention.

Ultimately this causes the rest of us problems since their machines are used to attack the rest of us.

Contact me to discuss how you can work on your processes.