Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity

Welcome Back!

We are closing up today's show with a few more articles that I found this week for all of you.  We will talk about Smart Devices and Vehicles -- so be sure to listen in.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Problems You Never Knew Could Be Solved By Smart Devices 

Bathroom Humor and High-End Executive Cars 
---

Automated Machine-Generated Transcript:

Craig 
Hey, welcome back WGAN everybody out there listening on streaming services and on my website at Craig Peterson dot com. Let's get into couple more articles but a bit of a wrap up in case you missed anything today you will find these as posters podcasts up on my website all of the segments today at Craig Peter som calm, but we just talked about Microsoft warning, as 4700 machines have compromised every day, the NSA advisory on enterprise VPN, some of the major manufacturers out there have some serious problems, and you need to make sure you get everything patched. 76% of us businesses have experienced a cyber attack in the past 12 months.

We talked about voice artificial intelligence systems are going to completely replace our phones in 10 years. It's a great little prediction by very by Gary van der Chuck, why you should lie in your password recovery questions, even lied to your bank and business email compromise attacks have spiked 269% in the past quarter. Absolutely amazing. So you'll find all of that and a whole lot more at Craig Peterson calm. And then I also have my report on passwords my special report that you can get by going to Craig Peterson comm slash passwords. Craig Peterson comm slash passwords, you'll find my 10 page report there, you can sign up for my email list, you're going to get just tons of great stuff from this. Also, if you're on my email list, you would have gotten summaries of today's articles, a little bit of a heads up so you know what I'll be talking about. You can actually kind of follow along at home. And you'll find all of these two, if you're watching this on a replay somewhere, you'll find all of this online as well. So it's a I think it's a good thing. And I get a lot of comments from people, which I love to get. So questions or comments. You can always email me ME at Craig Peterson calm, or you can text me anytime you want. And it's not you don't text like me, me. That's the email address. You're going to text 855-385-5553. And I'll give that number out again here in a minute. But 855-385-5553 that ends up in my hands and I am trying to answer and always every one of them. And sometimes I answer them on the show slash podcast. Sometimes I will respond directly to you. But in fact, because so many people were asking about VPN. That's why we spent so much time on them today. And also why I put together that special security summer cheat sheet on VPN and that email as well. So that's how you can have an impact on this show. I'd love to hear from you what questions you have. So this is fun, fun, fun. We're going to start with your Tesla. Have you ever been in a parking lot? And you're walking in the parking lot and a car comes up behind you, you know that cars there? Because you can hear it right? Unless you have hearing issues? You can hear that cars there? Well, have you ever had one of these electric cars sneak out putting you in a parking lot? I have. And it's very concerning because you, you know, you just assume that you can hear a car because they make so much noise at least enough noise that you can hear him coming right? They don't have to be these loud things like these idiots and take the pipes out of their motorcycles. Oh, did I say that? I'm you know, I'm a big motorcycle guy. I love them. I ride them. I've had 13 motorcycles. I think here's my last count. I just don't like these people that are noxious and take the pipes out and make really loud motorcycles. But anyways, so on the other end of the spectrum, you have the electric vehicles. Now there have been some laws passed in various parts of the country and the world that say that the cars these vehicles have to make noise. Now, it reminds me of the What was it called the nutty professor, like 1960 or so it was a Disney movie about flub, and he had the car, he took an old tin Lizzie. And he modified it took the engine out. And so it just was able to run on flipper. And it basically made no noise, right that kind of a bubbly sound. And he ended up putting the noise maker under the hood that made it sound like it really had an engine in it because it was very concerning to people who were out there and and saw the car driving by wasn't making any noise. So these laws are saying the cars have to make noise. So Elon Musk is kind of giving a little bit of a middle finger to this. One of the complaints that has come out in the last couple of weeks has to do with a newer, autonomous vehicle option that is available for your Tesla. Here's what happens. you park your Tesla, you go into the restaurant you come out, you hit a button on your remote, and the car then leaves its parking spot and drives over to you all by itself. So there's a video posted online, you might find a little bit amusing. I found it concerning where this happens. And a Tesla owner summons his car. And apparently he was actually trying to impress his date, right? One of those, Hey, watch this. And that that's usually followed by some sort of a major problem. So the car started driving, someone noticed the car was moving without a driver in the vehicle, and started to freak out trying to stop the vehicle. And the owner said no, no, no, it's okay. It's just an autonomous car, it's just coming over to me, don't worry about it, not a big deal. So he kind of laughed it off. And okay, I'll all's well and good. That's been a problem. So you've got these Tesla's driving themselves in a parking lot, which, by the way, is the thing that these artificial intelligence machines are worst at. And we had an excellent Don remember this about three weeks ago, who was telling us that that is the hardest part of any autonomous vehicle is the parking lot. Because if you're driving in a parking lot, and you're human, you get visual cues from other people, like they'll look at you, they'll wink, they'll, they'll kind of nod their head just ever so slightly. So you know, okay, I'm clear to go ahead. The Tesla cannot do that. It cannot recognize those little human gestures. Same thing with people walking, right, they kind of look over or they'll, they'll wave their their fingers saying, you know, come on, and because they're going to cross in front of you, but they'll let you go first. All of those types of things, these cars don't know that they can't figure it out. So right now, they just go super slow. And if anything happens, they just stop and then they expect the owner to take some intervention. So this is the most dangerous part. So here's what Tesla is doing with the whole thing thing. Elon Musk announced that the Tesla's are going to have customized horns and movement sounds. And I think this is just hilarious. So you might see a Tesla in the in a parking lot or you know, with a driver without a driver. using one of these new unique sounds this sounds include like this is according to Ilan goat, coconuts, and flatulent. I think that's just absolutely hilarious. So you, you might see a Tesla driving around passing cats in the parking lot. Now the coconut thing is really kind of fun, too. Because, you know, if you listen to me for 1020 years now on the radio, you know that I love Monty Python. And so what he's doing is he's taking the sound similar to he's probably going to recreate them but you know, the the print on supposedly on the horse, right, and they're making the galloping sounds with the coconut because of the king cannot afford the real horses, in actuality, behind just a little inside info on that scene, if you've seen it. Apparently, money, Python didn't have the budget for the horses for that scene, until they came up with the cocaine. That's absolute phenomena. If you haven't seen it. 1975 film is called Monty Python and the Holy Grail. There are so many funny things in there. Anyhow, we've had horns around forever, but this is absolutely new. You'll find that whoo guys sounds, there's just going to be all kinds of very cool stuff. Okay. California, by the way, a horn has to be capable of emitting sound audible under normal conditions from a distance of not less than 200 feet, and it cannot go over 110 decibels that's actually really loud and decibels. So keep an eye out for special sound effects for your electric vehicles, at least from Tesla. And there will be aftermarket just like we talked about Amazon and with the Samuel L. Jackson, voices that are available coming up here for your Amazon Echo for your Alexa, you will be able to buy aftermarket sounds I'm sure for some of these things. And our Our final story of the day also talking about autonomous vehicles. This would totally freaked me out more so than seeing a car without a driver moving. We have our smart homes and you know, we're constantly being warned about the Internet of Things and be careful. Some of this stuff can be very, very negative. We don't want to have you know, real problems here. So none of that is new. But there is a new device out from a company called Smart can SMARTCAN number This isn't just like having your wall talking to you, you know about the temperature. This isn't about, you know all of the normal IO to T things. This is something made by a company called Razzie that I'm going to quote from their site eliminates the need to take a homeowner's garbage can to the curb by providing a plug in play motorized trash can attachment and mobile application so you've got your personal trash can or maybe it's a city issued Trash Trash Can one of those big resin things whatever might be you just put the trash can on this thing and you can have this trash this smart can that one by the way the proto labs cool idea award and no longer do you have to take your trash to the curb it's going to happen happen automatically it's very cool looking at the picture of it I think it might have some trouble with my driveway cuz I need to get my driveway resurface. It's got some major divot but you know normal one certainly a city one where you've got a concrete sidewalk in front of your house it wouldn't work. Anyhow very cool. Smart can check it out. Alright everybody, thanks for being with me today. If you want to pick up my password special report this 10 page special report. You can get it right now. Go to Craig Peterson comm slash passwords, plural passwords Craig Peter song.com slash passwords. And I'll send it right to you have a great week. I'll be back with Ken and Matt. Wednesday morning at 730. You're listening to Craig Peterson online. Craig Peterson dot com. Take care everybody. Bye-bye

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!

We are closing up today's show with a few more articles that I found this week for all of you.  We will talk about Smart Devices and Vehicles -- so be sure to listen in.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Problems You Never Knew Could Be Solved By Smart Devices 

Bathroom Humor and High-End Executive Cars 
---

Automated Machine-Generated Transcript:

Craig 
Hey, welcome back WGAN everybody out there listening on streaming services and on my website at Craig Peterson dot com. Let's get into couple more articles but a bit of a wrap up in case you missed anything today you will find these as posters podcasts up on my website all of the segments today at Craig Peter som calm, but we just talked about Microsoft warning, as 4700 machines have compromised every day, the NSA advisory on enterprise VPN, some of the major manufacturers out there have some serious problems, and you need to make sure you get everything patched. 76% of us businesses have experienced a cyber attack in the past 12 months.

We talked about voice artificial intelligence systems are going to completely replace our phones in 10 years. It's a great little prediction by very by Gary van der Chuck, why you should lie in your password recovery questions, even lied to your bank and business email compromise attacks have spiked 269% in the past quarter. Absolutely amazing. So you'll find all of that and a whole lot more at Craig Peterson calm. And then I also have my report on passwords my special report that you can get by going to Craig Peterson comm slash passwords. Craig Peterson comm slash passwords, you'll find my 10 page report there, you can sign up for my email list, you're going to get just tons of great stuff from this. Also, if you're on my email list, you would have gotten summaries of today's articles, a little bit of a heads up so you know what I'll be talking about. You can actually kind of follow along at home. And you'll find all of these two, if you're watching this on a replay somewhere, you'll find all of this online as well. So it's a I think it's a good thing. And I get a lot of comments from people, which I love to get. So questions or comments. You can always email me ME at Craig Peterson calm, or you can text me anytime you want. And it's not you don't text like me, me. That's the email address. You're going to text 855-385-5553. And I'll give that number out again here in a minute. But 855-385-5553 that ends up in my hands and I am trying to answer and always every one of them. And sometimes I answer them on the show slash podcast. Sometimes I will respond directly to you. But in fact, because so many people were asking about VPN. That's why we spent so much time on them today. And also why I put together that special security summer cheat sheet on VPN and that email as well. So that's how you can have an impact on this show. I'd love to hear from you what questions you have. So this is fun, fun, fun. We're going to start with your Tesla. Have you ever been in a parking lot? And you're walking in the parking lot and a car comes up behind you, you know that cars there? Because you can hear it right? Unless you have hearing issues? You can hear that cars there? Well, have you ever had one of these electric cars sneak out putting you in a parking lot? I have. And it's very concerning because you, you know, you just assume that you can hear a car because they make so much noise at least enough noise that you can hear him coming right? They don't have to be these loud things like these idiots and take the pipes out of their motorcycles. Oh, did I say that? I'm you know, I'm a big motorcycle guy. I love them. I ride them. I've had 13 motorcycles. I think here's my last count. I just don't like these people that are noxious and take the pipes out and make really loud motorcycles. But anyways, so on the other end of the spectrum, you have the electric vehicles. Now there have been some laws passed in various parts of the country and the world that say that the cars these vehicles have to make noise. Now, it reminds me of the What was it called the nutty professor, like 1960 or so it was a Disney movie about flub, and he had the car, he took an old tin Lizzie. And he modified it took the engine out. And so it just was able to run on flipper. And it basically made no noise, right that kind of a bubbly sound. And he ended up putting the noise maker under the hood that made it sound like it really had an engine in it because it was very concerning to people who were out there and and saw the car driving by wasn't making any noise. So these laws are saying the cars have to make noise. So Elon Musk is kind of giving a little bit of a middle finger to this. One of the complaints that has come out in the last couple of weeks has to do with a newer, autonomous vehicle option that is available for your Tesla. Here's what happens. you park your Tesla, you go into the restaurant you come out, you hit a button on your remote, and the car then leaves its parking spot and drives over to you all by itself. So there's a video posted online, you might find a little bit amusing. I found it concerning where this happens. And a Tesla owner summons his car. And apparently he was actually trying to impress his date, right? One of those, Hey, watch this. And that that's usually followed by some sort of a major problem. So the car started driving, someone noticed the car was moving without a driver in the vehicle, and started to freak out trying to stop the vehicle. And the owner said no, no, no, it's okay. It's just an autonomous car, it's just coming over to me, don't worry about it, not a big deal. So he kind of laughed it off. And okay, I'll all's well and good. That's been a problem. So you've got these Tesla's driving themselves in a parking lot, which, by the way, is the thing that these artificial intelligence machines are worst at. And we had an excellent Don remember this about three weeks ago, who was telling us that that is the hardest part of any autonomous vehicle is the parking lot. Because if you're driving in a parking lot, and you're human, you get visual cues from other people, like they'll look at you, they'll wink, they'll, they'll kind of nod their head just ever so slightly. So you know, okay, I'm clear to go ahead. The Tesla cannot do that. It cannot recognize those little human gestures. Same thing with people walking, right, they kind of look over or they'll, they'll wave their their fingers saying, you know, come on, and because they're going to cross in front of you, but they'll let you go first. All of those types of things, these cars don't know that they can't figure it out. So right now, they just go super slow. And if anything happens, they just stop and then they expect the owner to take some intervention. So this is the most dangerous part. So here's what Tesla is doing with the whole thing thing. Elon Musk announced that the Tesla's are going to have customized horns and movement sounds. And I think this is just hilarious. So you might see a Tesla in the in a parking lot or you know, with a driver without a driver. using one of these new unique sounds this sounds include like this is according to Ilan goat, coconuts, and flatulent. I think that's just absolutely hilarious. So you, you might see a Tesla driving around passing cats in the parking lot. Now the coconut thing is really kind of fun, too. Because, you know, if you listen to me for 1020 years now on the radio, you know that I love Monty Python. And so what he's doing is he's taking the sound similar to he's probably going to recreate them but you know, the the print on supposedly on the horse, right, and they're making the galloping sounds with the coconut because of the king cannot afford the real horses, in actuality, behind just a little inside info on that scene, if you've seen it. Apparently, money, Python didn't have the budget for the horses for that scene, until they came up with the cocaine. That's absolute phenomena. If you haven't seen it. 1975 film is called Monty Python and the Holy Grail. There are so many funny things in there. Anyhow, we've had horns around forever, but this is absolutely new. You'll find that whoo guys sounds, there's just going to be all kinds of very cool stuff. Okay. California, by the way, a horn has to be capable of emitting sound audible under normal conditions from a distance of not less than 200 feet, and it cannot go over 110 decibels that's actually really loud and decibels. So keep an eye out for special sound effects for your electric vehicles, at least from Tesla. And there will be aftermarket just like we talked about Amazon and with the Samuel L. Jackson, voices that are available coming up here for your Amazon Echo for your Alexa, you will be able to buy aftermarket sounds I'm sure for some of these things. And our Our final story of the day also talking about autonomous vehicles. This would totally freaked me out more so than seeing a car without a driver moving. We have our smart homes and you know, we're constantly being warned about the Internet of Things and be careful. Some of this stuff can be very, very negative. We don't want to have you know, real problems here. So none of that is new. But there is a new device out from a company called Smart can SMARTCAN number This isn't just like having your wall talking to you, you know about the temperature. This isn't about, you know all of the normal IO to T things. This is something made by a company called Razzie that I'm going to quote from their site eliminates the need to take a homeowner's garbage can to the curb by providing a plug in play motorized trash can attachment and mobile application so you've got your personal trash can or maybe it's a city issued Trash Trash Can one of those big resin things whatever might be you just put the trash can on this thing and you can have this trash this smart can that one by the way the proto labs cool idea award and no longer do you have to take your trash to the curb it's going to happen happen automatically it's very cool looking at the picture of it I think it might have some trouble with my driveway cuz I need to get my driveway resurface. It's got some major divot but you know normal one certainly a city one where you've got a concrete sidewalk in front of your house it wouldn't work. Anyhow very cool. Smart can check it out. Alright everybody, thanks for being with me today. If you want to pick up my password special report this 10 page special report. You can get it right now. Go to Craig Peterson comm slash passwords, plural passwords Craig Peter song.com slash passwords. And I'll send it right to you have a great week. I'll be back with Ken and Matt. Wednesday morning at 730. You're listening to Craig Peterson online. Craig Peterson dot com. Take care everybody. Bye-bye

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!

I am wrapping up the discussion on VPNs and then talking about the importance of patching and why if you use Windows as your operating system it is absolutely necessary to prevent any cyberattack.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Popular VPNs Are Vulnerable To Exploit 

Keeping Windows Safe Means Patching, Patching, Patching and More Patching

---

Automated Machine-Generated Transcript:

Craig 
Hey, welcome back. Craig Peterson here on WGAN am and FM online is you know by now Craig Peters song.com. You'll also find me on YouTube on Facebook, on Soundcloud on tune in on it kind of all over the place a little bit, I guess is that the bottom line? So we were talking about VPN before the break, and I was explaining some of the pros and cons. One might you want to use them when might you not want to use them? So warning number one, your data is only safe at best when it's in transit, which means your data going from your laptop, let's say through the Wi Fi at the coffee shop, until it gets to the exit point of the VPN is pretty safe. So now all of your data is going to this one exit point. How do you think that the free VPN companies make money? Or the low cost VPN services? If you're paying nothing, or you're paying three bucks or five bucks a month or VPN? How would those companies staying in business? Well, they're staying in business because they are selling your data. Remember, your data is safe and secure. Hopefully, going from your laptop, through the coffee shops Wi Fi and their internet until it gets to the exit point. Well, the exit point is owned by the VPN company or in many cases not even owned by them. It's it's just leased space. Now it gets there, guess what the VPN company knows everywhere you have gone. They know all of that data that you are trying to hide. And in the worst case scenarios, it's really bad. In the worst case scenarios, your data is being routed through Russia, or China or even North Korea. And they are attempting to and in many cases succeeding in breaking the encryption that you have. So remember now, let's say you're trying to go to your bank site from the coffee shop. The bank site at the coffee shop is what's called a secure connection. It's not the server is not secure. The generic terminology. It's a secure server, but it is not a secure server. Okay, so let's point number one, the server itself is not secure. But your connection from your computer to the bank is encrypted completely. No matter which VPN provider you're using no matter what network you're on anything, it is secure from your computer to the bank. However, there's something called a man in the middle attack. So let's say you're you're using one of these cheap VPN services, or heaven forbid one of these free VPN services. And it's actually being run by a bad guy. So now that hacker is sitting there in the middle, and what many hackers try and do is they will use stolen master keys. Now usually when those are stolen for these Secure Sockets, layers, certificates, they are revoked pretty quickly. But when was the last time the revocation list was updated on your browser, right? Yeah, you haven't even updated windows have you? Right, that's, that's true for the most of the people in the country right there. So what they can do now is if they have one of these masters certificates, they can break the encryption. Or if they can get you to install them certificate as a master certificate on your browser, they can break encryption, that's a Mad Men in the middle attack. And many businesses use men in the middle attacks, in order to monitor all of the traffic going in and out from their employees. So they can see exactly what's going on because they don't want customer data, other private information to be leaking out. Right, particularly if you're a federal government contractor, or you deal with any sort of medical records, you have defiers it or HIPAA compliance. So you want to know, you want to make sure there isn't a person, or maybe even malware that sending this data out. Okay, so they're using that in middle attacks. So now let's say you're using, again, one of these cheap or free VPN services, and that cheaper free VPN service is going through one of these bad guy hackers out there.

And now the next step comes into play, which is they have access to all of your data, period. Okay, if they've been able to crack the SSL get you to install an SSL certificate, most of us don't know enough to not even accept one of those things. They've got your bank account and everything else. So that's my big, big warning about VPN services. And I keep threatening to build one of my own, I've got this idea for a VPN service that you you start it up, it's going to take, you know, a few minutes for to get started. So let's say you're at a coffee shop or something. And so what it does is it builds a virtual machine on one of these hosting services, and then it connects you through that. And then when you're done with a VPN service, that machine is completely destroyed. So you're never coming from the same IP address, you're never going to the same exit point. None of that stuff. I don't know, if you think that's something that would be worth doing it a lot of be a lot of work on my part and probably be, you know, 30, maybe even 50 bucks a month for people to use. But that's the only way that I can think of a real secure VPN. So be very careful about them. Now, a lot of people ask Craig, what do you do? So I'll tell you, you know already that I'm a big Cisco fan. And so at my house, we use Cisco equipment, we have mostly Meraki equipment at the house. And then at the office, we also use Cisco equipment. So when I'm on the road, I VPN into the office. And I wrote my traffic through that. And so what happens when it gets to the office, we have firewalls between the VPN and our main networks. So if let's say I'm going to Facebook, I am routed into the office VPN, but it goes directly out and never gets on to the main networks. And I can only access when I'm remotely certain services within the business when I have another layer of protection. And that's part of the whole two factor authentication. That's why we use the yubikey keys and why we use duo and everything right? Because you got to keep your data safe when we're talking about businesses. So that's what I do what I advise you to to, that's where it gets a little bit tricky. Now, some of the higher end, low end, Wi Fi and routers, including some from Netgear, and some others have VPN servers built into them now. And they even have what's called the DMZ, which is a demilitarized zone. So you you can VPN into your home or into your office. That is absolutely what I would do. Now your ISP, whether it's Comcast or whoever might be, you know, Road Runner, we have a few of them in Maine and the few new hampshire every state has a few of these guys. But they're still going to see where you're going. But it looks like you're coming from your home or your office. Which bottom line is is fine, right? You might want to do something about your DNS, cuz that's going to give them a lot of hints as well. But that's a topic for the show. Okay, man, we're almost out of time. In this segment, we only have one more left with today's show. And I want to get to these smart driving articles, which are II, you're going to love these. Okay, so we'll do that in the last segment. So coming up next. But we got to get to this article. One more security thing here. Hopefully, we haven't melted your brains already. I know this stuff's complicated, but I appreciate you sticking with me. And it's something that I think is good for everybody. And that's why I'm covering it.

But Microsoft has now issued a warning that there are 4700 new machines compromised every day, using an exploit from the National Security Agency that was leaked from them. And it is spreading at an alarming rates. And why? It's because people have not patched their machines. So make sure you update your Windows machine. This is very, very important. Because you don't want to be one of those 5000 new machines every day. That becomes compromised and gets ransomware and has information stolen. Stick around. We'll be right back and listening to Craig Peterson on WGAN and online Craig Peterson calm

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!

I am wrapping up the discussion on VPNs and then talking about the importance of patching and why if you use Windows as your operating system it is absolutely necessary to prevent any cyberattack.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Popular VPNs Are Vulnerable To Exploit 

Keeping Windows Safe Means Patching, Patching, Patching and More Patching

---

Automated Machine-Generated Transcript:

Craig 
Hey, welcome back. Craig Peterson here on WGAN am and FM online is you know by now Craig Peters song.com. You'll also find me on YouTube on Facebook, on Soundcloud on tune in on it kind of all over the place a little bit, I guess is that the bottom line? So we were talking about VPN before the break, and I was explaining some of the pros and cons. One might you want to use them when might you not want to use them? So warning number one, your data is only safe at best when it's in transit, which means your data going from your laptop, let's say through the Wi Fi at the coffee shop, until it gets to the exit point of the VPN is pretty safe. So now all of your data is going to this one exit point. How do you think that the free VPN companies make money? Or the low cost VPN services? If you're paying nothing, or you're paying three bucks or five bucks a month or VPN? How would those companies staying in business? Well, they're staying in business because they are selling your data. Remember, your data is safe and secure. Hopefully, going from your laptop, through the coffee shops Wi Fi and their internet until it gets to the exit point. Well, the exit point is owned by the VPN company or in many cases not even owned by them. It's it's just leased space. Now it gets there, guess what the VPN company knows everywhere you have gone. They know all of that data that you are trying to hide. And in the worst case scenarios, it's really bad. In the worst case scenarios, your data is being routed through Russia, or China or even North Korea. And they are attempting to and in many cases succeeding in breaking the encryption that you have. So remember now, let's say you're trying to go to your bank site from the coffee shop. The bank site at the coffee shop is what's called a secure connection. It's not the server is not secure. The generic terminology. It's a secure server, but it is not a secure server. Okay, so let's point number one, the server itself is not secure. But your connection from your computer to the bank is encrypted completely. No matter which VPN provider you're using no matter what network you're on anything, it is secure from your computer to the bank. However, there's something called a man in the middle attack. So let's say you're you're using one of these cheap VPN services, or heaven forbid one of these free VPN services. And it's actually being run by a bad guy. So now that hacker is sitting there in the middle, and what many hackers try and do is they will use stolen master keys. Now usually when those are stolen for these Secure Sockets, layers, certificates, they are revoked pretty quickly. But when was the last time the revocation list was updated on your browser, right? Yeah, you haven't even updated windows have you? Right, that's, that's true for the most of the people in the country right there. So what they can do now is if they have one of these masters certificates, they can break the encryption. Or if they can get you to install them certificate as a master certificate on your browser, they can break encryption, that's a Mad Men in the middle attack. And many businesses use men in the middle attacks, in order to monitor all of the traffic going in and out from their employees. So they can see exactly what's going on because they don't want customer data, other private information to be leaking out. Right, particularly if you're a federal government contractor, or you deal with any sort of medical records, you have defiers it or HIPAA compliance. So you want to know, you want to make sure there isn't a person, or maybe even malware that sending this data out. Okay, so they're using that in middle attacks. So now let's say you're using, again, one of these cheap or free VPN services, and that cheaper free VPN service is going through one of these bad guy hackers out there.

And now the next step comes into play, which is they have access to all of your data, period. Okay, if they've been able to crack the SSL get you to install an SSL certificate, most of us don't know enough to not even accept one of those things. They've got your bank account and everything else. So that's my big, big warning about VPN services. And I keep threatening to build one of my own, I've got this idea for a VPN service that you you start it up, it's going to take, you know, a few minutes for to get started. So let's say you're at a coffee shop or something. And so what it does is it builds a virtual machine on one of these hosting services, and then it connects you through that. And then when you're done with a VPN service, that machine is completely destroyed. So you're never coming from the same IP address, you're never going to the same exit point. None of that stuff. I don't know, if you think that's something that would be worth doing it a lot of be a lot of work on my part and probably be, you know, 30, maybe even 50 bucks a month for people to use. But that's the only way that I can think of a real secure VPN. So be very careful about them. Now, a lot of people ask Craig, what do you do? So I'll tell you, you know already that I'm a big Cisco fan. And so at my house, we use Cisco equipment, we have mostly Meraki equipment at the house. And then at the office, we also use Cisco equipment. So when I'm on the road, I VPN into the office. And I wrote my traffic through that. And so what happens when it gets to the office, we have firewalls between the VPN and our main networks. So if let's say I'm going to Facebook, I am routed into the office VPN, but it goes directly out and never gets on to the main networks. And I can only access when I'm remotely certain services within the business when I have another layer of protection. And that's part of the whole two factor authentication. That's why we use the yubikey keys and why we use duo and everything right? Because you got to keep your data safe when we're talking about businesses. So that's what I do what I advise you to to, that's where it gets a little bit tricky. Now, some of the higher end, low end, Wi Fi and routers, including some from Netgear, and some others have VPN servers built into them now. And they even have what's called the DMZ, which is a demilitarized zone. So you you can VPN into your home or into your office. That is absolutely what I would do. Now your ISP, whether it's Comcast or whoever might be, you know, Road Runner, we have a few of them in Maine and the few new hampshire every state has a few of these guys. But they're still going to see where you're going. But it looks like you're coming from your home or your office. Which bottom line is is fine, right? You might want to do something about your DNS, cuz that's going to give them a lot of hints as well. But that's a topic for the show. Okay, man, we're almost out of time. In this segment, we only have one more left with today's show. And I want to get to these smart driving articles, which are II, you're going to love these. Okay, so we'll do that in the last segment. So coming up next. But we got to get to this article. One more security thing here. Hopefully, we haven't melted your brains already. I know this stuff's complicated, but I appreciate you sticking with me. And it's something that I think is good for everybody. And that's why I'm covering it.

But Microsoft has now issued a warning that there are 4700 new machines compromised every day, using an exploit from the National Security Agency that was leaked from them. And it is spreading at an alarming rates. And why? It's because people have not patched their machines. So make sure you update your Windows machine. This is very, very important. Because you don't want to be one of those 5000 new machines every day. That becomes compromised and gets ransomware and has information stolen. Stick around. We'll be right back and listening to Craig Peterson on WGAN and online Craig Peterson calm

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!

We are continuing our discussion on VPNs and VPN usage.  Be sure to listen in.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Popular VPNs Are Vulnerable To Exploit 

---

Automated Machine-Generated Transcript:

Craig 0:05
Hi, everybody, welcome back, Craig Peterson here on WGAN am and FM new FM frequency. By the way, I am so glad to be here you hear me every Wednesday morning as well during drive time. With canon matters. We discuss some of these topics, the latest in technology and security and stuff. I'm on with Ken and Matt, during their morning show at about 738 8am every Wednesday, so I invite you to join me there. I included as part of my security summer cheat sheets, a whole sheet on VPN. And it told you what you need to know what changed to do help you save time. I also if you're on my email list, you would have gotten this about three weeks ago, I had a listener who had asked some great questions about VPN. And I wrote up a big response to him and thought, you know, since VPN questions are my number one question I get from listeners lately, right? I wrote up a big response kind of explaining it. What, why should you have a VPN? When Shouldn't you have a VPN? What kind should you use? How come some of them are so cheap, and some of them are much more expensive. So I went through all that, and I wrote a big email, I sent it out. So you should have received that if you're on my email list. And now, if you're not on my list, make sure you get on it. Because I'm sending out stuff like this every week, sometimes a couple of times a week stuff that's really useful to you, as a home user, and particularly as a business user. Okay, so some of the business advice that I give is really applicable as well to home users. So you should have a look at that. But it's, you know, again, take it all with a grain of salt, because everybody has a different situation. But at least you're going to have awareness of what to do and how to do it. So to sign up, the easiest thing to do is just go to Craig peterson.com. Right there on the homepage, there's a sign up. Now, this week, as you heard in the last hour, I have a special report, a 10 page special report, that's going to help you save time when it comes to this whole password issue. There is no charge for this stuff, guys. And it's phenomenal stuff. What I'm giving you is stuff that I charge for or will charge for, and I'm giving it to you for free. Okay, so that's a very big deal. And I'm not going to harass you, I'm not one of these internet marketers who's going to send you two emails a day for the rest of your life. Okay, when I do have things these, like the security summer, which was 100%, free 28 different cheat sheets, over 100 pages of information, well give it to you all for free. Okay, but the only way you find out about some of this stuff, and the only way you get it, then you get the clickable links to get it right away as if you're on my list. So this VPN thing went out to people on my list, they signed up on my homepage. And you know, I love it. I love the feedback that I've gotten from it. And if you would like a copy of what I wrote about the VPN, send me a quick email just me me at Craig peterson.com. And what I might try and do is tidy this up, pull all the VPN information into one document, and then make it available for for you guys, right, just like I have this password sheet. But we'll see what we have what we have for you guys next week, because we'll have something else for you listeners. So let's give a really quick rundown then, on what this is all about. I mentioned in the last segment about the National Security Agency issuing advisories on some of the enterprise, some of the commercial products that we're using for VPN. So if your business, you probably have these now, I didn't mention some of the other guys that weren't in this NSA release, like Sonic wall and others. But all of them require software updates. And many of them require manual intervention on your part to do the software updates.

So what you might have to do, if you're using a an inexpensive Wi Fi router, or little inexpensive firewall, or even some of these more expensive ones from companies I don't like you're going to have to go to their website, you're going to probably just do a search online. Now whether you use duck, duck go or you use Google or Bing, whatever, do a search for your the maker of your device, the model number of your device, which should be on the bottom or the back of the device, and then from firmware, and then download. So those are the words you want to use when you're doing the search for this stuff. So you will hopefully be able to find a download that you can use. Now normally, you're going to have to download it to your computer. Some of them require windows, they do not work on a Mac. Others of them are just fine on a Mac or finding another computers as well. But find out what you need the software and put it on your computer, you're going to have to follow the instructions from the manufacturer, many times you're going to have to connect the device directly to your computer. So you're going to have to get a USB cable of some sort, plug it into your wireless router or you know your firewall, whatever it is, plug it into your computer, and then run the special software that you got from the manufacturer. And then it will update the firmware on the device. Now a slight word of warning. Bottom line, sometimes these things fail. And hopefully you can do a hard reset on the device. So if it fails and the device isn't working anymore, you're going to want to look up a hard reset. But the odds of it failing compared with the odds of it being hacked mean that you really need to try and do an update on these things. Okay, so take the time do the update. Sometimes you don't have to hook it up by USB, sometimes it will do it over the network. In some cases, you log on to the administrative console of the device. And in many cases, it's just you know, again, on the low end side, you're going to connect to the network, your computer's on with a dot one at the end. So usually that's 192 dot 168 dot zero dot one. So you're going to connect to that, and you'll be off and running, you'll follow the instructions. Once you log in, hopefully you've changed your business password on your Wi Fi or your router or your firewall. Because the default passwords are used for hacking all of the time, make sure you have the default, the remote login disabled, you turn off some of the and there's a whole bunch of stuff, right and it's all there and that VPN cheat sheet. So make sure you have that cheat sheet and follow along. Now the VPN services are is the other thing I want to talk about. And, and they are very prevalent, you'll find them basically all over the place. But there are pros and cons to using these VPN services. So let me just explain briefly why you would want to use a VPN. If you are connecting to a public Wi Fi network, you are usually better off using a VPN when you do that. Now what does the VPN do? a VPN takes all of the data that's coming from your computer. It encrypts it, and it sends it to a remote location. So if you're going to Google or Facebook or your company's website, doesn't matter, it all goes to this one remote location in that remote location is typically controlled by the company that is selling you the VPN. Now, the reason you want to do this, if you're on a public Wi Fi is at the very least, that Wi Fi, and the other people that are on that same Wi Fi network cannot see what you're doing. They can't see where you're going. They can't see what you're doing. Because all of

your data is going through this one remote access point. The negative on all of that is all of your data is going through that one remote access point. And that can be a very negative thing. What are you trying to do with that VPN? That's the really big question here. Bottom line? Are you trying to protect your data from prying eyes? At that coffee shop? At the airport on the plane? Wherever you are? Is that what you're trying to do? Or are you trying to have real protection for your data? So we'll talk about that when we get back. What are the differences? What are your options? How can you use VPN? How should you use VPN? All right, so stick around because we will be right back we're going to talk about this VPN thing we're talking about Microsoft's latest warning. And we have a couple of fun things about autonomous vehicles coming up here. You're gonna love this. You're listening to Craig Peterson and WGAN and online at Craig Peterson. com stick around. We'll be right back.

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!

We are continuing our discussion on VPNs and VPN usage.  Be sure to listen in.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Popular VPNs Are Vulnerable To Exploit 

---

Automated Machine-Generated Transcript:

Craig 0:05
Hi, everybody, welcome back, Craig Peterson here on WGAN am and FM new FM frequency. By the way, I am so glad to be here you hear me every Wednesday morning as well during drive time. With canon matters. We discuss some of these topics, the latest in technology and security and stuff. I'm on with Ken and Matt, during their morning show at about 738 8am every Wednesday, so I invite you to join me there. I included as part of my security summer cheat sheets, a whole sheet on VPN. And it told you what you need to know what changed to do help you save time. I also if you're on my email list, you would have gotten this about three weeks ago, I had a listener who had asked some great questions about VPN. And I wrote up a big response to him and thought, you know, since VPN questions are my number one question I get from listeners lately, right? I wrote up a big response kind of explaining it. What, why should you have a VPN? When Shouldn't you have a VPN? What kind should you use? How come some of them are so cheap, and some of them are much more expensive. So I went through all that, and I wrote a big email, I sent it out. So you should have received that if you're on my email list. And now, if you're not on my list, make sure you get on it. Because I'm sending out stuff like this every week, sometimes a couple of times a week stuff that's really useful to you, as a home user, and particularly as a business user. Okay, so some of the business advice that I give is really applicable as well to home users. So you should have a look at that. But it's, you know, again, take it all with a grain of salt, because everybody has a different situation. But at least you're going to have awareness of what to do and how to do it. So to sign up, the easiest thing to do is just go to Craig peterson.com. Right there on the homepage, there's a sign up. Now, this week, as you heard in the last hour, I have a special report, a 10 page special report, that's going to help you save time when it comes to this whole password issue. There is no charge for this stuff, guys. And it's phenomenal stuff. What I'm giving you is stuff that I charge for or will charge for, and I'm giving it to you for free. Okay, so that's a very big deal. And I'm not going to harass you, I'm not one of these internet marketers who's going to send you two emails a day for the rest of your life. Okay, when I do have things these, like the security summer, which was 100%, free 28 different cheat sheets, over 100 pages of information, well give it to you all for free. Okay, but the only way you find out about some of this stuff, and the only way you get it, then you get the clickable links to get it right away as if you're on my list. So this VPN thing went out to people on my list, they signed up on my homepage. And you know, I love it. I love the feedback that I've gotten from it. And if you would like a copy of what I wrote about the VPN, send me a quick email just me me at Craig peterson.com. And what I might try and do is tidy this up, pull all the VPN information into one document, and then make it available for for you guys, right, just like I have this password sheet. But we'll see what we have what we have for you guys next week, because we'll have something else for you listeners. So let's give a really quick rundown then, on what this is all about. I mentioned in the last segment about the National Security Agency issuing advisories on some of the enterprise, some of the commercial products that we're using for VPN. So if your business, you probably have these now, I didn't mention some of the other guys that weren't in this NSA release, like Sonic wall and others. But all of them require software updates. And many of them require manual intervention on your part to do the software updates.

So what you might have to do, if you're using a an inexpensive Wi Fi router, or little inexpensive firewall, or even some of these more expensive ones from companies I don't like you're going to have to go to their website, you're going to probably just do a search online. Now whether you use duck, duck go or you use Google or Bing, whatever, do a search for your the maker of your device, the model number of your device, which should be on the bottom or the back of the device, and then from firmware, and then download. So those are the words you want to use when you're doing the search for this stuff. So you will hopefully be able to find a download that you can use. Now normally, you're going to have to download it to your computer. Some of them require windows, they do not work on a Mac. Others of them are just fine on a Mac or finding another computers as well. But find out what you need the software and put it on your computer, you're going to have to follow the instructions from the manufacturer, many times you're going to have to connect the device directly to your computer. So you're going to have to get a USB cable of some sort, plug it into your wireless router or you know your firewall, whatever it is, plug it into your computer, and then run the special software that you got from the manufacturer. And then it will update the firmware on the device. Now a slight word of warning. Bottom line, sometimes these things fail. And hopefully you can do a hard reset on the device. So if it fails and the device isn't working anymore, you're going to want to look up a hard reset. But the odds of it failing compared with the odds of it being hacked mean that you really need to try and do an update on these things. Okay, so take the time do the update. Sometimes you don't have to hook it up by USB, sometimes it will do it over the network. In some cases, you log on to the administrative console of the device. And in many cases, it's just you know, again, on the low end side, you're going to connect to the network, your computer's on with a dot one at the end. So usually that's 192 dot 168 dot zero dot one. So you're going to connect to that, and you'll be off and running, you'll follow the instructions. Once you log in, hopefully you've changed your business password on your Wi Fi or your router or your firewall. Because the default passwords are used for hacking all of the time, make sure you have the default, the remote login disabled, you turn off some of the and there's a whole bunch of stuff, right and it's all there and that VPN cheat sheet. So make sure you have that cheat sheet and follow along. Now the VPN services are is the other thing I want to talk about. And, and they are very prevalent, you'll find them basically all over the place. But there are pros and cons to using these VPN services. So let me just explain briefly why you would want to use a VPN. If you are connecting to a public Wi Fi network, you are usually better off using a VPN when you do that. Now what does the VPN do? a VPN takes all of the data that's coming from your computer. It encrypts it, and it sends it to a remote location. So if you're going to Google or Facebook or your company's website, doesn't matter, it all goes to this one remote location in that remote location is typically controlled by the company that is selling you the VPN. Now, the reason you want to do this, if you're on a public Wi Fi is at the very least, that Wi Fi, and the other people that are on that same Wi Fi network cannot see what you're doing. They can't see where you're going. They can't see what you're doing. Because all of

your data is going through this one remote access point. The negative on all of that is all of your data is going through that one remote access point. And that can be a very negative thing. What are you trying to do with that VPN? That's the really big question here. Bottom line? Are you trying to protect your data from prying eyes? At that coffee shop? At the airport on the plane? Wherever you are? Is that what you're trying to do? Or are you trying to have real protection for your data? So we'll talk about that when we get back. What are the differences? What are your options? How can you use VPN? How should you use VPN? All right, so stick around because we will be right back we're going to talk about this VPN thing we're talking about Microsoft's latest warning. And we have a couple of fun things about autonomous vehicles coming up here. You're gonna love this. You're listening to Craig Peterson and WGAN and online at Craig Peterson. com stick around. We'll be right back.

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!

It does not happen often but when it does, it is time to pay attention.  The NSA has issued an advisory about a particular vulnerability that is present in some of the top VPNs out there.  If the NSA is warning you it is probably because there are nation-states using the vulnerability. Listen in and I will break it down more 

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Popular VPNs Are Vulnerable To Exploit 

---

Automated Machine-Generated Transcript:

Craig 
Hey everybody, welcome back, Craig Peterson here on WGAN. And of course online as well, you'll find me there at Craig Peterson dot com and, you know, streaming pretty much everywhere and, and having a good old time helping people out. I just totally appreciate all of the notes from people special shout out to Brad, in fact, this week because of a couple of things he said, and I just totally, totally love it. When the listeners go ahead and let me know what they like about the show and some of the pros and cons to things so good all the way around. And you can reach me, by the way, anytime by just going ahead and emailing me me at Craig Peterson dot com or, of course, you can text me anytime. Just at 855-385-5553. All right, everybody. We'll give that number out a little bit again, later on. We have as usual, just a whole ton of stuff going on. And in this last hour, we're going to be talking about an NSA advisory on some VPN problems if you have been hearing about VPN, I'm going to talk about VPN a little bit here later on. And this is probably the number one question I have from people is all about VPN, what, you know, what should they use? When should they use it? Because we're hearing these ads for these, you know, $3 a month Norton VPN and other so why are they so cheap? And what are they doing? So we'll talk about that. And this NSA warning. And this NSA warning applies primarily to VPN, that are being used by businesses, so businesses that buy VPN, VPN software and hardware, we're going to talk about money, Microsoft, they are warning right now that there are 4700 machines compromised every day right now. So are you one of the 5000. So we'll talk about that and what you can do about it. And a couple of fun articles, as well, we'll get to about some autonomous vehicles. Both of these are about autonomous vehicles, different ones, ones from a company called Smart can and one from a company called Tesla. So anyways, everybody, thanks for being with us today. And for following along. I'm fairly new on WGAN. And so just by way of introduction, I have been doing security cyber security for businesses now for going on. Well, actually, yeah. 30 years. Now, that sounds like a long time, doesn't it? But any. I've been doing this for a very long time. And I follow it closely, because I'm what happened to me, because I was effectively hacked back in the early 90s. And I had a business that I had been building for more than a decade and, and thank goodness, I didn't lose much. But I certainly lost a lot of goodwill for my client. So it really got me to wake up find out more. I finally found out why antivirus software was even useless. Back then 2530 years ago, and also how, frankly, the bad guys use zero day vulnerabilities and everything else. So that's what I've been helping businesses with forever, because I've been on the internet since about 80. Man, what was it 83? I guess it was somewhere around there. Yeah, probably about 83. I'd have to look at my my chart, my dossier of the stuff I've done over the decades, but I've been on the internet for a very long time. And it started out as this wonderful Kumbaya place. Everybody on it was an engineer, you either were in a university, or maybe you were working for a federal government or government contractor. And it was really, it was a fun time back then. We kind of all knew everybody because there are so few people on the internet back then. And of course, the internet itself goes back a good decade before that. And then it didn't become public until October of 91, September, October, when you could finally legally conduct business on the internet, you couldn't do it legally before then. And then it's grown to the point we have it today many years later. So we've got a big anniversary coming up in 2021 will have to make sure we do little celebration there. So I've been involved for a long time I got hit I learned on I'm kind of one of those pioneers that got all the arrows in my back. And now I'm trying to get that information out to everybody. And as you know, brands comment this week, in fact, and you so you may not know. But I really try and help and I give away a ton of stuff for free, of course have to keep my lights on. So I do have paid clients as well. But I give away a lot more than anyone else in the industry. That's what I'm told all of the time. And you should have this week gotten copies of you signed up for my security summer, I reset all 28 of my so called cheat sheets that amount to over 100 pages of content on what to do in various aspects of cyber security. So that's business that's home, I have a whole retiree thing that you should have gotten yesterday, if you are on my list. So I'm I'm just you know we're producing content. And typically when I share with you guys for free is the stuff that's a beta stuff kind of my first time around it ZU very useful, as Brad and many others have said, but it also is kind of leading in so I'll take that and turn it into some paid projects as time goes on products I should check. Alright, so where to start here. Let's start with the VPN thing. And then we'll get into the Microsoft thing. And then we'll have the fun stuff here at the end. But the NSA, this is no such agency, you, man that used to be what they were called the federal government denied his existence. And, of course, we had not very long ago now, maybe a decade. I don't know, man, time flies. But we had Edward Snowden coming out who was an NSA contractor, who were saying, whoa, wait a minute now the NSA is doing all kinds of things that Americans aren't going to like and that are potentially beyond their charter ended turned out that yes, indeed, they were beyond their charter. A lot of people got very upset. And the Department of Justice ended up saying, Hey, Mr. Snowden, we've got to watch out for your arrest. So he's been hiding out in various embassies, you know, the Ecuadorian embassy for a long time over in Russia and stuff, so that the NSA doesn't find him so that they they don't abduct him and bring him back to the United States due to face trial? I don't remember if they tried him and obscenity or not.

You know, they might have I'm really not sure. But whole chain. So the NSA once again, and this is as of about a month ago, President Trump has changed their charter a little bit, which I actually like, instead of just trying to break into people's computers, monitor American citizens phone calls, who are they calling? What are they calling? Where are they calling from, etc, etc. The NSA charter has been altered a little bit to say, hey, NSA, when you find vulnerabilities instead of just trying to use them, in order to hack into foreign governments, computers or Americans computers, we want you to share that information with the public, a very, very big deal. And so the NSA actually has been doing that. And they are warning right now in this is from an article on dark reading that you'll find that Craig Peter song calm. There on my homepage, just scroll down a bit. And you'll find that on in it's called NSA issues advisor on VPN, vulnerability tree, tree Oh, here, there you go. That there are three major VPN providers out there that are in big, big trouble. Now these are called enterprise vulnerabilities. Certainly, as I've filed them with their vulnerability databases, solar winds, main major problem with their Daimler Mini, remote client, SAP Financial Consolidation, very big problems. See here, some other ones here. But they boil down to a number of specific pieces of hardware, that from some specific other vendors names you might recognize. And those names are Palo Alto, which I know a number of businesses that are running the Palo Alto stuff I have learned about that Palo Alto was definitely cheaper than Cisco. But they've had more security problems or younger company, they're criminals nowhere near as fast. And they don't have the Telos team behind them. So I'm not a fan of Palo Alto. So But anyways, big time Palo Alto global connect or excuse me, palo a global protect VPN, remote execution bug here that's in the wild. For dinette. Another company that I very familiar with, and we can sell with Mike from my company, but we don't, for the net for the gate VPN client has another one here, active exploitation. And there's a couple of others. But here's the bottom line, okay, this, this applies to everybody. If you have a VPN client, or a VPN server, if you're a business, that's usually what you do, make sure you update your software now know that it's very, very difficult to do, especially if you're talking about a piece of hardware, where you have to update the firmware that's in that device. But believe me, you want to do that. So if you have any sort of hardware right now, please take take the time this could take you hours, okay? Because if it can be very, very difficult, and I wish I could produce an information product about this stuff. But the problem is there's so many pieces of hardware, so many manufacturers, each manufacturer has multiple pieces of hardware, each piece of hardware may have multiple ways of updating it. But you've got to update it, you got to download the firmware for your Wi Fi devices. You got to download your firmware for your firewalls. And as it turns out, right now, even some of these enterprise VPN controllers need to make sure we need to make sure that you update the firmware in those things too, because there are some serious problems with it. All right, we're going to talk more about VPN when we get back so stick around. You're listening to Craig Peter sauna WGAN online. Craig Peter song.com Peterson with an old By the way, stick around We'll be right back.

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!

It does not happen often but when it does, it is time to pay attention.  The NSA has issued an advisory about a particular vulnerability that is present in some of the top VPNs out there.  If the NSA is warning you it is probably because there are nation-states using the vulnerability. Listen in and I will break it down more 

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Popular VPNs Are Vulnerable To Exploit 

---

Automated Machine-Generated Transcript:

Craig 
Hey everybody, welcome back, Craig Peterson here on WGAN. And of course online as well, you'll find me there at Craig Peterson dot com and, you know, streaming pretty much everywhere and, and having a good old time helping people out. I just totally appreciate all of the notes from people special shout out to Brad, in fact, this week because of a couple of things he said, and I just totally, totally love it. When the listeners go ahead and let me know what they like about the show and some of the pros and cons to things so good all the way around. And you can reach me, by the way, anytime by just going ahead and emailing me me at Craig Peterson dot com or, of course, you can text me anytime. Just at 855-385-5553. All right, everybody. We'll give that number out a little bit again, later on. We have as usual, just a whole ton of stuff going on. And in this last hour, we're going to be talking about an NSA advisory on some VPN problems if you have been hearing about VPN, I'm going to talk about VPN a little bit here later on. And this is probably the number one question I have from people is all about VPN, what, you know, what should they use? When should they use it? Because we're hearing these ads for these, you know, $3 a month Norton VPN and other so why are they so cheap? And what are they doing? So we'll talk about that. And this NSA warning. And this NSA warning applies primarily to VPN, that are being used by businesses, so businesses that buy VPN, VPN software and hardware, we're going to talk about money, Microsoft, they are warning right now that there are 4700 machines compromised every day right now. So are you one of the 5000. So we'll talk about that and what you can do about it. And a couple of fun articles, as well, we'll get to about some autonomous vehicles. Both of these are about autonomous vehicles, different ones, ones from a company called Smart can and one from a company called Tesla. So anyways, everybody, thanks for being with us today. And for following along. I'm fairly new on WGAN. And so just by way of introduction, I have been doing security cyber security for businesses now for going on. Well, actually, yeah. 30 years. Now, that sounds like a long time, doesn't it? But any. I've been doing this for a very long time. And I follow it closely, because I'm what happened to me, because I was effectively hacked back in the early 90s. And I had a business that I had been building for more than a decade and, and thank goodness, I didn't lose much. But I certainly lost a lot of goodwill for my client. So it really got me to wake up find out more. I finally found out why antivirus software was even useless. Back then 2530 years ago, and also how, frankly, the bad guys use zero day vulnerabilities and everything else. So that's what I've been helping businesses with forever, because I've been on the internet since about 80. Man, what was it 83? I guess it was somewhere around there. Yeah, probably about 83. I'd have to look at my my chart, my dossier of the stuff I've done over the decades, but I've been on the internet for a very long time. And it started out as this wonderful Kumbaya place. Everybody on it was an engineer, you either were in a university, or maybe you were working for a federal government or government contractor. And it was really, it was a fun time back then. We kind of all knew everybody because there are so few people on the internet back then. And of course, the internet itself goes back a good decade before that. And then it didn't become public until October of 91, September, October, when you could finally legally conduct business on the internet, you couldn't do it legally before then. And then it's grown to the point we have it today many years later. So we've got a big anniversary coming up in 2021 will have to make sure we do little celebration there. So I've been involved for a long time I got hit I learned on I'm kind of one of those pioneers that got all the arrows in my back. And now I'm trying to get that information out to everybody. And as you know, brands comment this week, in fact, and you so you may not know. But I really try and help and I give away a ton of stuff for free, of course have to keep my lights on. So I do have paid clients as well. But I give away a lot more than anyone else in the industry. That's what I'm told all of the time. And you should have this week gotten copies of you signed up for my security summer, I reset all 28 of my so called cheat sheets that amount to over 100 pages of content on what to do in various aspects of cyber security. So that's business that's home, I have a whole retiree thing that you should have gotten yesterday, if you are on my list. So I'm I'm just you know we're producing content. And typically when I share with you guys for free is the stuff that's a beta stuff kind of my first time around it ZU very useful, as Brad and many others have said, but it also is kind of leading in so I'll take that and turn it into some paid projects as time goes on products I should check. Alright, so where to start here. Let's start with the VPN thing. And then we'll get into the Microsoft thing. And then we'll have the fun stuff here at the end. But the NSA, this is no such agency, you, man that used to be what they were called the federal government denied his existence. And, of course, we had not very long ago now, maybe a decade. I don't know, man, time flies. But we had Edward Snowden coming out who was an NSA contractor, who were saying, whoa, wait a minute now the NSA is doing all kinds of things that Americans aren't going to like and that are potentially beyond their charter ended turned out that yes, indeed, they were beyond their charter. A lot of people got very upset. And the Department of Justice ended up saying, Hey, Mr. Snowden, we've got to watch out for your arrest. So he's been hiding out in various embassies, you know, the Ecuadorian embassy for a long time over in Russia and stuff, so that the NSA doesn't find him so that they they don't abduct him and bring him back to the United States due to face trial? I don't remember if they tried him and obscenity or not.

You know, they might have I'm really not sure. But whole chain. So the NSA once again, and this is as of about a month ago, President Trump has changed their charter a little bit, which I actually like, instead of just trying to break into people's computers, monitor American citizens phone calls, who are they calling? What are they calling? Where are they calling from, etc, etc. The NSA charter has been altered a little bit to say, hey, NSA, when you find vulnerabilities instead of just trying to use them, in order to hack into foreign governments, computers or Americans computers, we want you to share that information with the public, a very, very big deal. And so the NSA actually has been doing that. And they are warning right now in this is from an article on dark reading that you'll find that Craig Peter song calm. There on my homepage, just scroll down a bit. And you'll find that on in it's called NSA issues advisor on VPN, vulnerability tree, tree Oh, here, there you go. That there are three major VPN providers out there that are in big, big trouble. Now these are called enterprise vulnerabilities. Certainly, as I've filed them with their vulnerability databases, solar winds, main major problem with their Daimler Mini, remote client, SAP Financial Consolidation, very big problems. See here, some other ones here. But they boil down to a number of specific pieces of hardware, that from some specific other vendors names you might recognize. And those names are Palo Alto, which I know a number of businesses that are running the Palo Alto stuff I have learned about that Palo Alto was definitely cheaper than Cisco. But they've had more security problems or younger company, they're criminals nowhere near as fast. And they don't have the Telos team behind them. So I'm not a fan of Palo Alto. So But anyways, big time Palo Alto global connect or excuse me, palo a global protect VPN, remote execution bug here that's in the wild. For dinette. Another company that I very familiar with, and we can sell with Mike from my company, but we don't, for the net for the gate VPN client has another one here, active exploitation. And there's a couple of others. But here's the bottom line, okay, this, this applies to everybody. If you have a VPN client, or a VPN server, if you're a business, that's usually what you do, make sure you update your software now know that it's very, very difficult to do, especially if you're talking about a piece of hardware, where you have to update the firmware that's in that device. But believe me, you want to do that. So if you have any sort of hardware right now, please take take the time this could take you hours, okay? Because if it can be very, very difficult, and I wish I could produce an information product about this stuff. But the problem is there's so many pieces of hardware, so many manufacturers, each manufacturer has multiple pieces of hardware, each piece of hardware may have multiple ways of updating it. But you've got to update it, you got to download the firmware for your Wi Fi devices. You got to download your firmware for your firewalls. And as it turns out, right now, even some of these enterprise VPN controllers need to make sure we need to make sure that you update the firmware in those things too, because there are some serious problems with it. All right, we're going to talk more about VPN when we get back so stick around. You're listening to Craig Peter sauna WGAN online. Craig Peter song.com Peterson with an old By the way, stick around We'll be right back.

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!  

Businesses are being targeted by Cybercriminals more and more in fact cyberattacks against US businesses are up 75%. Listen in to find out more.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

More Than Three-Quarters of US Businesses Are CyberAtttack Targets

---

Automated Machine-Generated Transcript:

Craig 0:07
Hello, welcome back, Craig Peterson here on WGAN. And of course live streaming as well. We're on tune in, we're on iTunes, we're on Soundcloud all of the audio places that you might want to listen to the podcast. And hey, if you're a podcast fan, I'd love it if you would give me a five star rating, just go to Craig Peterson dot com slash iTunes. And that will take you right to iTunes, still the 800 pound gorilla out there. And on iTunes, it will tell you right away, hey, here's Craig's podcast and you can rate me hopefully, as I said, five stars. leave a note about what you learn every week. And if you could, I love to hear from you. Tell me what it is you'd like me to to cover on the show or maybe one of my trainings. And I would love you just to email it to me at Craig Peterson dot com. But putting in a five star review on iTunes is going to help us get this show out to a lot more people. And we continue to grow every week, I really appreciate that. We have a lot of people who have signed up for my weekly emails that I've been doing for years now. I've got about 3200 articles posted at Craig Peterson. com. Let me tell you, there's articles about almost everything there, including all of my latest, my latest podcast. So you'll find all of that there on my website, Craig Peterson calm. Also, if you sign up this week, for my email list, I'm going to provide you with that 10 page, password special report. And that's where I go through all kinds of details about passwords. And what you should be doing with passwords, I debunk the myth of the random passwords. It's a link that matters. But I go into all the statistics, all of the new findings. And you know, some places are still going to require you to have those random passwords. And we take care of that for you as well with the password managers and things. So it is an absolute must have would love it if you signed up. And you can do that by just going to Craig Peterson dot com. Also, I send out reminders about the show via text message, I take questions there. And you can always text me now, if you want to be on that list where I'm sending out emergency alerts about emergency patches and things, you can just go ahead and text WGAN to 855-385-5550 three, this is my special insider SMS list. There are about 1000 people on it. And I'm glad to have you on that list. But I tell you about my latest newsletters when they come out, you can listen because I'll send you pointers to my podcast. And I will let you know when there's a major security vulnerability that you need to know about. So again, just text, you can send your email address, you can send your questions, but if you send WGAN add you right to my list, just send WGAN to 855-385-5553. And you'll see this as well. On the bottom of my screen, I got a lower third up that is going through and talking about some of this stuff. Anyhow, that makes that simple. Let's talk about businesses for a minute. Our businesses, of course, are the backbone of the economy, right? A without business, there would be no economy out there. And when we get right down to it small business is really where things happen. big businesses, let's face it, they are rarely innovating anymore. Most of these big businesses, and this even includes Apple by companies. So what they do is they let these poor schmucks like me, who are going to invest every dime that we have that maybe we shouldn't be investing the poor schmucks like me figure out, Okay, what works, what doesn't work, what is the market going to accept or not accept, and they may let us get take some Angel money, some venture capital money, by that point, the founder of the company, is basically a slave working for nothing anymore.

Because by the time that company is sold, all of the equity is going to be totally gone. It's a terrible, terrible process to go through. And I know guys that have gone through it. And one woman I know, well, who has gone through this, but you know, it's a real problem. And it's a real problem when these smaller businesses that are the backbone of the economy, were the ones that create the most jobs, were the ones that innovate, were the ones that hope that maybe we'll get bought out, or maybe we'll have a cash cow, right. This is where we are betting our retirement is on our own businesses. And we the small business person are the major target of the bad guys. These hackers don't you just want to kill them. The these hackers out there, who are killing our businesses, who are taking away our retirement savings, that money that we needed, so we're not going to be out on the street, Heaven knows if Social Security is going to survive. And if we get one of these socialists in power, then man who knows what's going to happen, it's not going to be good, that's for sure. But we've got everything tied up in our businesses. And we have the bad guys coming after us. We were just talking a little bit earlier here. This one with the first two articles and showing them to the camera right now. business email compromise attacks, Spike 269%, over the last quarter, why you should lie in your password recovery questions, passwords, passwords, passwords, right? very big deal, because we're being attacked. business email compromise is about businesses. So now we've got an article from ZD net, that you'll find out by Craig peterson.com. And it's saying that 76% of us businesses, I'll pull this up on the screen for those people who who are watching live or on in replay, but 76% of us businesses have experienced this cyber attack in the last years. And small medium businesses, small medium enterprises in the US are a favorite attack target for the cyber criminals. This is absolutely huge. The Parliament Institute, these are guys that study these trends in the computer world, they study these trends when it comes to cyber security. But they have the 2019 Global state of SMB cyber security report, I have a copy of that myself. And it's saying that 66% of small medium businesses worldwide have reported a cyber attack within the past 12 months. And 76% of those included in the survey are based in the United States. That is absolutely huge. 76% of us businesses have experienced a cyber attack, have you? Do you know, if you have experienced one, you know, most businesses don't know for about six months that they've have been attacked? And by then, how are you going to be able to determine what was stolen, what they did, how they got in, right? Nothing's left, right, your logs are all gone. versus when when we're doing this for companies that have requirements, federal government requirements and others right for whether they're military or financial or medical practices. We know usually within six hours, and it is not just do we know within six hours that they've been attacked, but we if they've been penetrated, we know it. And we've backed out any viruses or other malware that's penetrated in all within six hours versus six months, which is the norm in the US. So it's six months when you're using some of this, you know, the Norton software, some of these other pieces of antivirus software, they just don't work. So this research was based on responses gathered from 2300 participants in the IT and cyber security industry, based in the US, UK and some other countries. So they're saying that for the third year in a row, SM bees are reporting a significant increase in cyber incidents. This is absolutely amazing. 69% of businesses in the US 69%. So let's say 70%, let's rounded on 70% of businesses in the US say that they have lost sensitive corporate or customer information within the last 12 months. 63%. That is huge. And I can tell you that that it's got to be true, because we are seeing more and more businesses coming to us that need help because they have lost their intellectual property, or they've lost their customer information. Now that 69% of businesses that have lost sensitive corporate customer information that's used to 9% figure, it is an increase of 50% from four years ago. So it is going up, it is getting worse. And unfortunately most people don't know what to do. And I understand it right? Because are you're hearing these ads, you're seeing these ads you're being told that you've been taken care of. But you're not. It's a very, very big deal. So you know, if you had your suspicions about whether or not your security was good enough, I can say with a fairly high degree of certainly certainty it is not okay, okay, your security probably needs some help. So 45% of respondents said that their organizations it posture is in effective. And 40% said there's no formal incident response in place to deal with the aftermath of a breach. So if you're one of those companies that does not have an effective cyber security policy in place, which means multiple layers of security, it means logging, it means people looking at these alerts while you're not abnormal, because 45% of the respondents said they know they don't either. And you know what? The 55% that said that they did have an effective cyber security policy and procedures in place. They're lying, right? Many of those are lying, it's just not true. So keep that in mind. Right? You're not alone there. You can get started. You can take care of these sort of things. The most common forms of cyber attacks that SMEs are facing this is again according to the part of my Institute. Fishing right we talked about that this already this show compromised or stolen devices and credential theft. So stolen devices in particular problem in that a lot of employees are BYO Dean bring their own devices to work. And smaller companies probably aren't investing in the handsets for employees. So you can't ring fences security there's you know, there's a lot to talk about. If you have questions about this as always, you can just email me at Craig Peterson calm, be more than glad to talk to you about this stuff. send you a couple emails, send you some of the reports who might have etc. Just me at Craig Peterson calm. And of course you'll find me online at Craig bitter som calm and sign up right now this week. And you will get my cyber security special report on passwords a 10 page special report on what to do and comparing password managers. You're listening to me on WGAN radio online, Craig Peterson. com slash YouTube or even Facebook

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!  

Businesses are being targeted by Cybercriminals more and more in fact cyberattacks against US businesses are up 75%. Listen in to find out more.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

More Than Three-Quarters of US Businesses Are CyberAtttack Targets

---

Automated Machine-Generated Transcript:

Craig 0:07
Hello, welcome back, Craig Peterson here on WGAN. And of course live streaming as well. We're on tune in, we're on iTunes, we're on Soundcloud all of the audio places that you might want to listen to the podcast. And hey, if you're a podcast fan, I'd love it if you would give me a five star rating, just go to Craig Peterson dot com slash iTunes. And that will take you right to iTunes, still the 800 pound gorilla out there. And on iTunes, it will tell you right away, hey, here's Craig's podcast and you can rate me hopefully, as I said, five stars. leave a note about what you learn every week. And if you could, I love to hear from you. Tell me what it is you'd like me to to cover on the show or maybe one of my trainings. And I would love you just to email it to me at Craig Peterson dot com. But putting in a five star review on iTunes is going to help us get this show out to a lot more people. And we continue to grow every week, I really appreciate that. We have a lot of people who have signed up for my weekly emails that I've been doing for years now. I've got about 3200 articles posted at Craig Peterson. com. Let me tell you, there's articles about almost everything there, including all of my latest, my latest podcast. So you'll find all of that there on my website, Craig Peterson calm. Also, if you sign up this week, for my email list, I'm going to provide you with that 10 page, password special report. And that's where I go through all kinds of details about passwords. And what you should be doing with passwords, I debunk the myth of the random passwords. It's a link that matters. But I go into all the statistics, all of the new findings. And you know, some places are still going to require you to have those random passwords. And we take care of that for you as well with the password managers and things. So it is an absolute must have would love it if you signed up. And you can do that by just going to Craig Peterson dot com. Also, I send out reminders about the show via text message, I take questions there. And you can always text me now, if you want to be on that list where I'm sending out emergency alerts about emergency patches and things, you can just go ahead and text WGAN to 855-385-5550 three, this is my special insider SMS list. There are about 1000 people on it. And I'm glad to have you on that list. But I tell you about my latest newsletters when they come out, you can listen because I'll send you pointers to my podcast. And I will let you know when there's a major security vulnerability that you need to know about. So again, just text, you can send your email address, you can send your questions, but if you send WGAN add you right to my list, just send WGAN to 855-385-5553. And you'll see this as well. On the bottom of my screen, I got a lower third up that is going through and talking about some of this stuff. Anyhow, that makes that simple. Let's talk about businesses for a minute. Our businesses, of course, are the backbone of the economy, right? A without business, there would be no economy out there. And when we get right down to it small business is really where things happen. big businesses, let's face it, they are rarely innovating anymore. Most of these big businesses, and this even includes Apple by companies. So what they do is they let these poor schmucks like me, who are going to invest every dime that we have that maybe we shouldn't be investing the poor schmucks like me figure out, Okay, what works, what doesn't work, what is the market going to accept or not accept, and they may let us get take some Angel money, some venture capital money, by that point, the founder of the company, is basically a slave working for nothing anymore.

Because by the time that company is sold, all of the equity is going to be totally gone. It's a terrible, terrible process to go through. And I know guys that have gone through it. And one woman I know, well, who has gone through this, but you know, it's a real problem. And it's a real problem when these smaller businesses that are the backbone of the economy, were the ones that create the most jobs, were the ones that innovate, were the ones that hope that maybe we'll get bought out, or maybe we'll have a cash cow, right. This is where we are betting our retirement is on our own businesses. And we the small business person are the major target of the bad guys. These hackers don't you just want to kill them. The these hackers out there, who are killing our businesses, who are taking away our retirement savings, that money that we needed, so we're not going to be out on the street, Heaven knows if Social Security is going to survive. And if we get one of these socialists in power, then man who knows what's going to happen, it's not going to be good, that's for sure. But we've got everything tied up in our businesses. And we have the bad guys coming after us. We were just talking a little bit earlier here. This one with the first two articles and showing them to the camera right now. business email compromise attacks, Spike 269%, over the last quarter, why you should lie in your password recovery questions, passwords, passwords, passwords, right? very big deal, because we're being attacked. business email compromise is about businesses. So now we've got an article from ZD net, that you'll find out by Craig peterson.com. And it's saying that 76% of us businesses, I'll pull this up on the screen for those people who who are watching live or on in replay, but 76% of us businesses have experienced this cyber attack in the last years. And small medium businesses, small medium enterprises in the US are a favorite attack target for the cyber criminals. This is absolutely huge. The Parliament Institute, these are guys that study these trends in the computer world, they study these trends when it comes to cyber security. But they have the 2019 Global state of SMB cyber security report, I have a copy of that myself. And it's saying that 66% of small medium businesses worldwide have reported a cyber attack within the past 12 months. And 76% of those included in the survey are based in the United States. That is absolutely huge. 76% of us businesses have experienced a cyber attack, have you? Do you know, if you have experienced one, you know, most businesses don't know for about six months that they've have been attacked? And by then, how are you going to be able to determine what was stolen, what they did, how they got in, right? Nothing's left, right, your logs are all gone. versus when when we're doing this for companies that have requirements, federal government requirements and others right for whether they're military or financial or medical practices. We know usually within six hours, and it is not just do we know within six hours that they've been attacked, but we if they've been penetrated, we know it. And we've backed out any viruses or other malware that's penetrated in all within six hours versus six months, which is the norm in the US. So it's six months when you're using some of this, you know, the Norton software, some of these other pieces of antivirus software, they just don't work. So this research was based on responses gathered from 2300 participants in the IT and cyber security industry, based in the US, UK and some other countries. So they're saying that for the third year in a row, SM bees are reporting a significant increase in cyber incidents. This is absolutely amazing. 69% of businesses in the US 69%. So let's say 70%, let's rounded on 70% of businesses in the US say that they have lost sensitive corporate or customer information within the last 12 months. 63%. That is huge. And I can tell you that that it's got to be true, because we are seeing more and more businesses coming to us that need help because they have lost their intellectual property, or they've lost their customer information. Now that 69% of businesses that have lost sensitive corporate customer information that's used to 9% figure, it is an increase of 50% from four years ago. So it is going up, it is getting worse. And unfortunately most people don't know what to do. And I understand it right? Because are you're hearing these ads, you're seeing these ads you're being told that you've been taken care of. But you're not. It's a very, very big deal. So you know, if you had your suspicions about whether or not your security was good enough, I can say with a fairly high degree of certainly certainty it is not okay, okay, your security probably needs some help. So 45% of respondents said that their organizations it posture is in effective. And 40% said there's no formal incident response in place to deal with the aftermath of a breach. So if you're one of those companies that does not have an effective cyber security policy in place, which means multiple layers of security, it means logging, it means people looking at these alerts while you're not abnormal, because 45% of the respondents said they know they don't either. And you know what? The 55% that said that they did have an effective cyber security policy and procedures in place. They're lying, right? Many of those are lying, it's just not true. So keep that in mind. Right? You're not alone there. You can get started. You can take care of these sort of things. The most common forms of cyber attacks that SMEs are facing this is again according to the part of my Institute. Fishing right we talked about that this already this show compromised or stolen devices and credential theft. So stolen devices in particular problem in that a lot of employees are BYO Dean bring their own devices to work. And smaller companies probably aren't investing in the handsets for employees. So you can't ring fences security there's you know, there's a lot to talk about. If you have questions about this as always, you can just email me at Craig Peterson calm, be more than glad to talk to you about this stuff. send you a couple emails, send you some of the reports who might have etc. Just me at Craig Peterson calm. And of course you'll find me online at Craig bitter som calm and sign up right now this week. And you will get my cyber security special report on passwords a 10 page special report on what to do and comparing password managers. You're listening to me on WGAN radio online, Craig Peterson. com slash YouTube or even Facebook

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553