Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity

Craig is on with Jack Heath this Monday morning. Jack was extremely interested in some military tech he saw in the news and the future of tech as it related to AI and medical robotics, so that is what we talked about today. 

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles 

Apple has a problem with Zoom and so should you 

New MacBooks Coming

Did You Turn of Tracking? Guess What?  Apps are Still Tracking You.

Chinese Ministry of State Security Attacks Major Companies Internal Networks

Hollywood on the Skids with Virtual Stars

Worried About Privacy? Steve Wozniak says Delete Facebook

Got Chinese Security Cameras? Just Try to Remove them.

---

Below is a rush transcript of this segment, it might contain errors.

Airing date: 07/15/2019

Flying Soldiers, AI, Robots

Craig Peterson

Hey, good morning, everybody. Craig Peterson, here. I was on with Jack Heath this morning talking about something that this was not in my weekly newsletter, right? If you get that my show notes for my weekly newsletter, in fact, I haven't even got it sent out today. It's been so busy, so busy. My brother came down with his wife and kids, late last week, and we helped them out with a few different things. It was, quite lovely to visit with them, but it threw my whole schedule off. So, you're going to be getting my weekly newsletter a little bit late this week. It was a crazy week. Earlier last week, I was down in DC, and with all of the stuff I've been doing it has been a busy time. So this morning, I got to talk with Jack about some of the futurist stuff. I don't know if you saw on the coverage of the Bastille Day celebrations over in Paris, and the guy on a kind of a board, kind of like you would see going down on Hill, a ski hill, but he was flying over Paris. Very, very cool technology. We talked about the future, and where's it going?
We discussed how artificial intelligence would impact us as we move forward as well as one or two other things right along those lines, including a small local entrepreneur who owns a limo service and the way he's fighting back against Uber and Lyft. So, it was a fun conversation this morning. I am getting ready, of course, for my security summer summit and they sponsoring today's podcast. Security summer is all about you learning the things you need to know about security. It is good for your business, for your home, and if you are a CEO, we have an exclusive track for you as a business owner as well. So keep an eye on your email box will be sending out notifications about that soon. And you can sign up just by going to Craig Peterson dot com. All right, guys. Here we go.

Jack Heath
So this is pretty cool. The Flying soldier its called and it is pretty cool and maybe the stuff of the future but Craig Peterson his show airs Saturday mornings Tech Talk, and he joins us live now, Good morning, Craig.

Craig Peterson
Hey, good morning. Yeah, Bastille Day is quite a celebration there in Paris. Is he soaring over the streets? It's kind of cool to think about, you know, we've been promised for how many years from James Bond that we would all have these jetpacks, right or at least flying cars. And somehow it just hasn't happened for any of us. There's also another interesting article, I don't know if you saw this in the union leader, but a local Manchester couple owns a limo service. And he was lobbying the state to try and get some restrictions on ride-sharing services. So he decided, hey, if you can beat them, join them. And he has started a new app called ride links RYDELIMX. And then hoping that that's going to compete with ride-sharing services like Uber and Lyft. But one of the main differences is it allows the driver to set the price. And you know, that's kind of a bit of an innovative thing for them to do. With Uber, the many people I know that that drive for Uber are not happy with the company and some of them have shifted over to Lyft. With this, there is now gives them another opportunity.

Jack Heath
Interesting, but I want to go back to the flying jet pack. You can imagine down the road like Hey, what are you doing this weekend, I'm going to just literally going to fly up and go skiing this afternoon is going to fly up and go through the notch and my jetpack just going to you know, go. Justin's going to be I mean, it's pretty cool video, have you seen it?

Justin McIsaac
I have. But you know, this isn't going to go very far. So I can let you go up to the mountains.

Craig Peterson
But they're a little bit ridiculous. But you know, this one, but there are about a half a dozen companies right now, Jack, who are making various types of personal transportation planes if you will. Most of them use electric power to charge them up. They're suitable for give-or-take an hour of flight. And they are being automated. The FAA is responsible for setting up flight rules for some of these things. They are trying to figure out how do we handle this. NASA is involved with some of the technology too. Currently, anyone could apply for a license like you would your driver's license, and with just a few hours worth of training, would be able to fly some of these. They're expecting them they hit the skies, certainly by 2025. And maybe a little bit earlier. So you could hop in your plane no matter where you are in the states fly up north in the wintertime, be up there in a matter of about 45 minutes or so and have the plane fly itself the whole way. It's that it's finally going to happen.

Jack Heath
I imagined it would and in one of our movers and shakers episodes, had a guest who's a futuristic type thinker, and he was talking about them and come back to it. But just on the personal jetpack things with a battery that you want to make. It's big. What do you want to make sure it's charged? Because if you're out there, and it doesn't work, I don't know how well the parachute works. Do you follow me? Is it hard to pull over? And like 2500 feet, right? Yeah. But um, you know, yeah, there's a gentleman that was in Florida. And he was on our movers and shakers show and one of these upcoming episodes. And his big thing was how AI really over the next 15 trying to think of the years less than 20 years. So the AI of what it's going to do to our workforce. And you know, well beyond just like automatic checkouts at the supermarket. We're talking transforming industries, not all good because you know, the reduction of jobs, but impact things in our lives that you don't think about whatever happened in our lives are going to happen. So you're very much right about that.

Craig Peterson
Well, and it's going to be huge, because there are alternate opinions on that Jack where they're saying, if you look at machine learning, Ai, right now, it has created three times as many jobs as it has eliminated. And so there's either futurists are looking at this saying we look back years ago, right when we had steam coming in, and we had cars, motorized cars, and all of these ended up creating more jobs, and they eliminated. But ultimately, I think what we need is, and I think Justin would agree with us like a Star Trek universe if we can turn energy into matter. And then we have the ability, and we have unlimited power, we can have a society where anyone can do almost anything they want to because everything is effectively free. And hopefully, we'll get to that point. But AI itself, yeah, it's going to eliminate a lot of the first jobs. But it is ultimately going to create a lot of jobs to disruption, I think, is probably the name of the game for the next 50 years, frankly, but Jack has not always been the case.

Craig Peterson 7:16
Yeah, it takes a while. But you know what, what, what I've found interesting is you could take the number of aging Americans who live alone. And as they age and get older, you know, nursing homes have been had been such an expensive thing for families. I'm reading and seeing some stories, where a small robot in a home can be beneficial. Now you see Alexa or something on the table, you can talk to it and play this or do something, but a small robot that has other capabilities like to speak to you with maybe daily instructions in an entertaining way. Or even do some functions around the house, will change the entire nursing home industry. You're going to go into some fast-food restaurants, and then maybe one human being working and five robots, not just at the checkout area, but preparing your food and hence to medical.

Jack Heath
The medical industry, you know, more procedures are going to be done by robots, you know, then surgical assistance. Yeah, well,

Craig Peterson
That's going to happen to and but it's also going to allow us to have an expert in a foreign city, do surgery, etc. But Amazon has a prototype of something called the vest, its a robot. And this thing's waist-high, it can be summoned by voice. Amazon's have already invested very heavily into robots. And Bloomberg is reporting right now that this investor robot is going to do what you were talking about Jack, it's going to be in the system for people who are at home who are aging and who may have various types of capabilities that are limited. Amazon revealed that this whole interest is frankly not only in prototype right now, but they're hoping to have it out within the next year. It should be in our homes. So yeah, you're again, you're spot on Jack, this is going to be huge. The robots as far as surgery goes, that is still a ways away but using robotic assistance, so that you can have a world-class surgeon perform surgery is going to be a big deal. As you may know, I was in emergency medicine for ten years as a volunteer, and the ability then to have a surgeon as we have right here in New Hampshire at any of our Southern central hospitals or out on the Seacoast. The ability to have those types of surgeons available and doctors available, who can then examine a patient in some small rural community in northern New Hampshire and even treat them, that's coming very, very quickly. We already have some of that technology and with the physical feedback, where the robot is remotely-controlled, but the doctor can feel exactly what that robot is feeling, right Palpate and do various things. Man, I'm so looking forward to some of this feature.

Jack Heath
I can tell. All right, thanks, Craig. Appreciate it, right. Don't fight it. Embrace it. All right. That was some tech talk. And we come back to the tropical storm.

Craig Peterson
By the way, just pointed out that if you want to sign up, right now for my regular email list. So if you're not already on my list, you can subscribe by going to Craig Peterson dot com at the top of the page. There is a little subscribe link that you can just put in your name and email. And I'll let you know when it happens. I'll also be sending you my weekly security notes, show notes, whatever you might want to call it. People call it different things right as I try and keep you up to date on the most important happenings in the world of technology and security, although I do produce exclusive newsletters for security, those are a paid subscription. Anyhow, we'll I'll talk to you tomorrow. Bye-bye.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Craig is on with Jack Heath this Monday morning. Jack was extremely interested in some military tech he saw in the news and the future of tech as it related to AI and medical robotics, so that is what we talked about today. 

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles 

Apple has a problem with Zoom and so should you 

New MacBooks Coming

Did You Turn of Tracking? Guess What?  Apps are Still Tracking You.

Chinese Ministry of State Security Attacks Major Companies Internal Networks

Hollywood on the Skids with Virtual Stars

Worried About Privacy? Steve Wozniak says Delete Facebook

Got Chinese Security Cameras? Just Try to Remove them.

---

Below is a rush transcript of this segment, it might contain errors.

Airing date: 07/15/2019

Flying Soldiers, AI, Robots

Craig Peterson

Hey, good morning, everybody. Craig Peterson, here. I was on with Jack Heath this morning talking about something that this was not in my weekly newsletter, right? If you get that my show notes for my weekly newsletter, in fact, I haven't even got it sent out today. It's been so busy, so busy. My brother came down with his wife and kids, late last week, and we helped them out with a few different things. It was, quite lovely to visit with them, but it threw my whole schedule off. So, you're going to be getting my weekly newsletter a little bit late this week. It was a crazy week. Earlier last week, I was down in DC, and with all of the stuff I've been doing it has been a busy time. So this morning, I got to talk with Jack about some of the futurist stuff. I don't know if you saw on the coverage of the Bastille Day celebrations over in Paris, and the guy on a kind of a board, kind of like you would see going down on Hill, a ski hill, but he was flying over Paris. Very, very cool technology. We talked about the future, and where's it going?
We discussed how artificial intelligence would impact us as we move forward as well as one or two other things right along those lines, including a small local entrepreneur who owns a limo service and the way he's fighting back against Uber and Lyft. So, it was a fun conversation this morning. I am getting ready, of course, for my security summer summit and they sponsoring today's podcast. Security summer is all about you learning the things you need to know about security. It is good for your business, for your home, and if you are a CEO, we have an exclusive track for you as a business owner as well. So keep an eye on your email box will be sending out notifications about that soon. And you can sign up just by going to Craig Peterson dot com. All right, guys. Here we go.

Jack Heath
So this is pretty cool. The Flying soldier its called and it is pretty cool and maybe the stuff of the future but Craig Peterson his show airs Saturday mornings Tech Talk, and he joins us live now, Good morning, Craig.

Craig Peterson
Hey, good morning. Yeah, Bastille Day is quite a celebration there in Paris. Is he soaring over the streets? It's kind of cool to think about, you know, we've been promised for how many years from James Bond that we would all have these jetpacks, right or at least flying cars. And somehow it just hasn't happened for any of us. There's also another interesting article, I don't know if you saw this in the union leader, but a local Manchester couple owns a limo service. And he was lobbying the state to try and get some restrictions on ride-sharing services. So he decided, hey, if you can beat them, join them. And he has started a new app called ride links RYDELIMX. And then hoping that that's going to compete with ride-sharing services like Uber and Lyft. But one of the main differences is it allows the driver to set the price. And you know, that's kind of a bit of an innovative thing for them to do. With Uber, the many people I know that that drive for Uber are not happy with the company and some of them have shifted over to Lyft. With this, there is now gives them another opportunity.

Jack Heath
Interesting, but I want to go back to the flying jet pack. You can imagine down the road like Hey, what are you doing this weekend, I'm going to just literally going to fly up and go skiing this afternoon is going to fly up and go through the notch and my jetpack just going to you know, go. Justin's going to be I mean, it's pretty cool video, have you seen it?

Justin McIsaac
I have. But you know, this isn't going to go very far. So I can let you go up to the mountains.

Craig Peterson
But they're a little bit ridiculous. But you know, this one, but there are about a half a dozen companies right now, Jack, who are making various types of personal transportation planes if you will. Most of them use electric power to charge them up. They're suitable for give-or-take an hour of flight. And they are being automated. The FAA is responsible for setting up flight rules for some of these things. They are trying to figure out how do we handle this. NASA is involved with some of the technology too. Currently, anyone could apply for a license like you would your driver's license, and with just a few hours worth of training, would be able to fly some of these. They're expecting them they hit the skies, certainly by 2025. And maybe a little bit earlier. So you could hop in your plane no matter where you are in the states fly up north in the wintertime, be up there in a matter of about 45 minutes or so and have the plane fly itself the whole way. It's that it's finally going to happen.

Jack Heath
I imagined it would and in one of our movers and shakers episodes, had a guest who's a futuristic type thinker, and he was talking about them and come back to it. But just on the personal jetpack things with a battery that you want to make. It's big. What do you want to make sure it's charged? Because if you're out there, and it doesn't work, I don't know how well the parachute works. Do you follow me? Is it hard to pull over? And like 2500 feet, right? Yeah. But um, you know, yeah, there's a gentleman that was in Florida. And he was on our movers and shakers show and one of these upcoming episodes. And his big thing was how AI really over the next 15 trying to think of the years less than 20 years. So the AI of what it's going to do to our workforce. And you know, well beyond just like automatic checkouts at the supermarket. We're talking transforming industries, not all good because you know, the reduction of jobs, but impact things in our lives that you don't think about whatever happened in our lives are going to happen. So you're very much right about that.

Craig Peterson
Well, and it's going to be huge, because there are alternate opinions on that Jack where they're saying, if you look at machine learning, Ai, right now, it has created three times as many jobs as it has eliminated. And so there's either futurists are looking at this saying we look back years ago, right when we had steam coming in, and we had cars, motorized cars, and all of these ended up creating more jobs, and they eliminated. But ultimately, I think what we need is, and I think Justin would agree with us like a Star Trek universe if we can turn energy into matter. And then we have the ability, and we have unlimited power, we can have a society where anyone can do almost anything they want to because everything is effectively free. And hopefully, we'll get to that point. But AI itself, yeah, it's going to eliminate a lot of the first jobs. But it is ultimately going to create a lot of jobs to disruption, I think, is probably the name of the game for the next 50 years, frankly, but Jack has not always been the case.

Craig Peterson 7:16
Yeah, it takes a while. But you know what, what, what I've found interesting is you could take the number of aging Americans who live alone. And as they age and get older, you know, nursing homes have been had been such an expensive thing for families. I'm reading and seeing some stories, where a small robot in a home can be beneficial. Now you see Alexa or something on the table, you can talk to it and play this or do something, but a small robot that has other capabilities like to speak to you with maybe daily instructions in an entertaining way. Or even do some functions around the house, will change the entire nursing home industry. You're going to go into some fast-food restaurants, and then maybe one human being working and five robots, not just at the checkout area, but preparing your food and hence to medical.

Jack Heath
The medical industry, you know, more procedures are going to be done by robots, you know, then surgical assistance. Yeah, well,

Craig Peterson
That's going to happen to and but it's also going to allow us to have an expert in a foreign city, do surgery, etc. But Amazon has a prototype of something called the vest, its a robot. And this thing's waist-high, it can be summoned by voice. Amazon's have already invested very heavily into robots. And Bloomberg is reporting right now that this investor robot is going to do what you were talking about Jack, it's going to be in the system for people who are at home who are aging and who may have various types of capabilities that are limited. Amazon revealed that this whole interest is frankly not only in prototype right now, but they're hoping to have it out within the next year. It should be in our homes. So yeah, you're again, you're spot on Jack, this is going to be huge. The robots as far as surgery goes, that is still a ways away but using robotic assistance, so that you can have a world-class surgeon perform surgery is going to be a big deal. As you may know, I was in emergency medicine for ten years as a volunteer, and the ability then to have a surgeon as we have right here in New Hampshire at any of our Southern central hospitals or out on the Seacoast. The ability to have those types of surgeons available and doctors available, who can then examine a patient in some small rural community in northern New Hampshire and even treat them, that's coming very, very quickly. We already have some of that technology and with the physical feedback, where the robot is remotely-controlled, but the doctor can feel exactly what that robot is feeling, right Palpate and do various things. Man, I'm so looking forward to some of this feature.

Jack Heath
I can tell. All right, thanks, Craig. Appreciate it, right. Don't fight it. Embrace it. All right. That was some tech talk. And we come back to the tropical storm.

Craig Peterson
By the way, just pointed out that if you want to sign up, right now for my regular email list. So if you're not already on my list, you can subscribe by going to Craig Peterson dot com at the top of the page. There is a little subscribe link that you can just put in your name and email. And I'll let you know when it happens. I'll also be sending you my weekly security notes, show notes, whatever you might want to call it. People call it different things right as I try and keep you up to date on the most important happenings in the world of technology and security, although I do produce exclusive newsletters for security, those are a paid subscription. Anyhow, we'll I'll talk to you tomorrow. Bye-bye.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Craig is in the WGAN Morning News with Ken and guest host Erik Lusk. This morning we talked about Apps and how bad they are, Why you should not use Android, Backups why they are really important now.  and what could happen in the future? 

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Be Careful What You Browse - Drive-By Malware on the Rise

Are You Ready? Iranian Cyber Counter Attacks

Cyber Breaches - How far does your liability extend?

What We Know About Apollo Missions After 50 years 

Trumping Iranian Aggression 

Is Your App Safe? Maybe Not!

We Will Need 3.5 Million Cybersecurity Professionals by 2021 and They Won't Come Out Of Our Colleges

Mac Non-Vulnerability Vulnerability

During Travel Is Your Data Safe from Snooping Eyes?

Who Is Your Biggest Cyber Liability? Maybe It Is Not Who You Think

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 07/03/2019

---

Craig Peterson
Hi everybody, Craig Peterson here. Oh my gosh, Independence Day. I want to say Happy Independence Day to everybody out there. Happy Canada Day to everybody who, of course, is from Canada. Some grand celebrations are coming up in France this summer, as well as the UK and all over the world. So, you know, let's give peace a chance as they say, right. Today I was on with my friends Ken Altshuler and Eric Lusk, and I gave Eric a bit of a kidney punch. I talked a little bit about an email I got from the FBI this week and talking about some of the security problems with Android. I am afraid I went on a bit of a rant here, you know, the whole 76% of mobile apps having flaws, security flaws, the Iranian cyber attacks against the United States. And we got into it today. At least I did. They could hardly get a word in edgewise. Anyways, here we go. Have a great week, guys, and I'll be back on Saturday. Bye-bye.

Ken Altshuler
And it's 738 on Wednesday Morning News. Eric is sitting in for Matt Gagnon, who is taking a few days off. Jeremy Fisher 'll join you after the eight o'clock news with an eye on politics but as usual on Wednesday, 738 none other than Professor Craig Peterson, our tech guru joins us. Good morning, Mr. Peterson, how are you?

Craig Peterson
Hey, good morning, doing well. I love this kind of weather. It is why I live up here. It's just like you were saying. Right?

Ken Altshuler
Exactly.

Craig Peterson
I like a warm day, frankly, in the 80s. Maybe a little much. It's a beautiful beach day. But I'm not into the humidity and not into the 90 plus degree weather and everything else. I enjoy this.

Ken Altshuler
Well, you're in the right place. Enjoy it until winter starts in a couple of weeks.

Craig Peterson
Yeah.

Ken Altshuler
It's right around the corner. Winter is coming. Mr. Peterson,

Eric Lusk
You'll notice the days are getting shorter.

Ken Altshuler
Exactly right.

Craig Peterson
Well, you're not going to notice it quite yet. It speeds up a little bit, later on. Right now. We're only losing just you know, a few seconds every day but it does accelerate. Winter is, you know, the winter isn't so bad either. You know.

Ken Altshuler
There's no good winter, you're wrong. There's no nice way to put it, winter, I mean no way to put a nice spin on it. But no winter is not good.

Craig Peterson
Well, I look at it this way can I can always put on another layer of clothes in the wintertime. I cannot take off my skin in the summer.

Ken Altshuler
But you don't need to. You can be basking in the warmth in the heat. I am from Oklahoma, so you're talking to the wrong person.

Craig Peterson
Oklahoma's nasty. They have the worst of both, right.

Ken Altshuler
But that heat is super. It's like being in a SPAAA..

Ken Altshuler
So let's get into the tech issues. You gave us a lot of tech issues that I didn't know where to start. I went to the one where 76 percent of mobile apps have flaws that allow hackers to steal passwords, money, and tech. So what my iPhone, these people can go on and steal my passwords. You tell me.

Craig Peterson
Here's the problem, I, in fact, I just forwarded an email to some friends, I'll have to send it out to my whole email list here on as part of this weekend's email that I send out. I sent out this email. It was a summary that I get from law enforcement from the FBI because of what I do with the FBI and Infragard running their webinar programs. On it was just a note that said here's the Android patches for July. It went on for I don't know three or 400 words just describing the critical patches and how only Samsung is going to be releasing fixes for these patches on Android for these significant security problems with Android software. Only Samsung going to be releasing fixes for them within the probably the next60 days. These are highly critical. These are crucial, critical, patches. Other vendors, some may never release patches for them. Okay, so let's start with that in mind. Okay, Android, forget about it. If you care about security at all. Never buy Android. Now, iOS

Erik Lusk
So much for my cell phone. Exactly.

Craig Peterson
Ditch it. I can't believe you're in the financial business and you have an Android because it is the most dangerous piece of hardware available today. It's worse than Windows.

Ken Altshuler
Wow.

Craig Peterson
Okay.

Ken Altshuler
Did you hear that?

Craig Peterson
So, don't

Erik Lusk
Do you want me to turn around so you can hit the other kidney? Holy smokes!

Craig Peterson
Is he starting to spit blood yet, Ken? Okay. Sorry about that. But most people don't know this. Right? It's not your fault, Erik. Some vendors are pretending Androids just fine. Right? So how do you know who to trust? I'm not blaming you for this, and it's why I get so upset with the antivirus software, people selling things like Android phones and tablets, televisions with built-in things like how webOS. Samsung said two weeks ago, don't forget to run an antivirus on your TV. Who knows this stuff? Right? The bottom line is, don't use Android ever. Stick with iOS. Going back to Ken's point here, where 76% of mobile apps, according to positive technologies analysis here, 76% of mobile apps have flaws that can allow hackers to steal the passwords, maybe even your money and texts. Okay. Yeah, there is not a device if it has power going to it, If it has a wire going to it - the potential is there that it can be hacked, okay. So Deal with it, bottom line. Poorly written iOS applications are going to use cloud services other than Apple. Now Apple, again, their cloud services are outstanding. However, many of these cloud services, look at the Amazon breaches, we just had another huge one yesterday, that affected TD Bank, according to the reports, they were using a third party contractor. In other words, if you are a business, think about this for a couple of minutes, you're giving your data to who? To salesforce.com to this cloud service. Do you know how good is this cloud provider's security? Many of these apps that we're using are going to the cloud, they're using cloud services, many of the vendors that are upstream from us are taking some of our data, and they're not protecting it. So I, man, I just, I can't emphasize this enough. It's terrible. It's but it's the way of the world, and it's going to continue to be the way the world. That's why I'm hosting my security summer. This summer, I have a six-week program, one hundred percent free for everybody. I want everybody to know what to do because the vendors out there are not telling you the truth. Okay. That's the bottom line. They're selling new software that they have because they have it. Right. They're not selling you solutions that solve basic things, and you need to do those first. It's brass tacks of what you need to do to keep your data safe. It's like you were talking about with distracted driving. Who can afford the latest version of Apple's Car Play? The new one that is just coming out with right now is phenomenal. Android has a similar thing. But again, I don't want you to use Android devices for distracted driving. Who can afford to pay somebody like me to help them? Well, you know, bigger businesses, obviously, Ken, right. The medium-sized companies and larger small businesses can come in, and I can secure it. There are so many defense contractors working just right south here at Portsmouth Naval Shipyard that has to have to be DFARS compliance, which is a federal regulation. But they don't know where they can go? How about the little guys that can't afford to hire the real security people that all they do is networks and security. That's what this security summer is all about, guys. If people want to find out more, listen, you got to get ahold of me, I'm more than glad to put you into this class. It's only 10 to 15 minutes sessions twice a week, during the summer. If you miss one, you can watch it on the replay you need to email me at Craig Peterson dot com if you want to be in it and I'll let you know when it starts, okay, this isn't selling new stuff. It is just getting down to the brass tacks and making sure that those are out of the way. Many of these things you can do are free. Some of them are just educational, but they need to know what to do and how to do it. And then some you might want to or need to buy some paid software. I'll tell you what to do. But email me at Craig Peterson dot com. It's not as though I care about this stuff. Guys. I don't want you to think I'm on a soapbox or anything. Okay.

Erik Lusk
Just a wee bit.

Craig Peterson
Oh, yea.

Ken Altshuler
But a good soapbox

Erik Lusk
Oh, yeah, absolutely! When the city of Baltimore was held hostage by some computer hackers that managed to figure out how to shut down the municipal website. That's no way to live. What's next shutting down our Public Utilities?

Craig Peterson
You don't? Yeah, well, that's what's happening right now. And maybe that was a cue for me right there. We had this whole thing with Iran, right, they shot down our drone. That was or was not in international waters, Right. So our response was to be in a posture to bomb bomb bomb bomb bomb Iran. Right. Then President Trump called it off at the last minute, right? It is all that we're getting from the news. And then the part that most people haven't been talking about is apparently, President Trump's idea of, hey, listen, you didn't kill anybody in the plane, we don't want to kill anybody. Then in a reciprocal response was that we hacked and shut down their radars, missile radar systems and their missile sites. Their answer is what's happening now with Iran going after our US businesses. They've got some software that wipes your computer. If they get on to your business computers, what they want to do is cause problems with the US economy. Most businesses just are protected well enough. They've got some a break-fix shop that knows a little bit about security and certainly can install the software. And those are, you know, Wow, those are the experts. And so Life is good, right? Hey guys that is not the case. Now we've got Homeland Security coming out this last week here, and warning businesses that Iranian hackers are already targeting US companies. And they're using this wipe software. They're not holding your data ransom, they are wiping clean your computers and anything they can find on your network, rather than stealing the data. That's directly from Chris Krebs. He's the director of Homeland Security's Cyber Security Division

Erik Lusk
Isn't that an easier thing to do? Rather than to go in and steal the data, isn't it easier to just wipe out somebody's data altogether?

Craig Peterson
That's the easiest thing to do. And you know what, Eric, there are no fingerprints afterward, Right? Or should I say a very few fingerprints? So for instance, we've gone into companies, we went into one company, and we found that there were Chinese back doors installed. It was a small manufacturer. And they made some dumb parts, right? There's like you think of a screw. Well, who cares about a screw. And the Chinese had multiple back doors, and they were monitoring everything that was going on. But that screw eventually ended up in our military equipment, until the Chinese went after the little guy. It made it now easier, and they had access to the portal to the big defense contractor, etc., etc. So that was very easy to trace because we could see wherever these back doors were talking to how they were accessed. We worked with the FBI, and we were able to straighten it out very quickly, we got them back in business within 24 hours. However, when you're just wiping a computer, there is nothing left because they've completely wiped the silly thing. So yeah, Eric, that's what they're doing because it is the easiest thing to do. That's part of what we're going to do with the security summer the right ways to do backups. And I can tell you 90% of the people I've ever talked to probably really close to 100 are not doing backups properly. But I don't want people to feel bad. A good backup that works can recover your data from that wipe from the Iranians. It can also recover your data from any ransomware attacks coming. Many of those are from Russia. We have one client, and we were looking at their website the other day and the security mechanisms we have in place. Their website was getting attacked five times every second it was a little website. It's crazy. And it was coming straight from Russia, by the way, anyways, blah, blah. I'm going to long in this segment. But there's so much you have to know to do it right. Just email me at Craig Peterson dot com. I want to get you in this. It is free. It's for small-medium businesses. If you're just the IT person because you know the most or you like computers, and "tagged your it" right, like in the game of tag. It is for you. And it's free. And I want you to attend email me at Craig Peterson dot com.

Ken Altshuler
Great. Craig Peterson dot com and Craig joins us every Wednesday. 738. Craig, we hope you have a great Fourth of July. We'll talk to you next week.

Erik Lusk
So much for my cell phone. I guess I'm headed over to get something else.

Ken Altshuler
iPhone time. iPhone time. Yeah.

Craig Peterson
Have a great Independence Day, everybody.

Erik Lusk
Thanks, Joe. All right, we'll take a break for CBS News, and we'll be back after this.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Craig is in the WGAN Morning News with Ken and guest host Erik Lusk. This morning we talked about Apps and how bad they are, Why you should not use Android, Backups why they are really important now.  and what could happen in the future? 

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Be Careful What You Browse - Drive-By Malware on the Rise

Are You Ready? Iranian Cyber Counter Attacks

Cyber Breaches - How far does your liability extend?

What We Know About Apollo Missions After 50 years 

Trumping Iranian Aggression 

Is Your App Safe? Maybe Not!

We Will Need 3.5 Million Cybersecurity Professionals by 2021 and They Won't Come Out Of Our Colleges

Mac Non-Vulnerability Vulnerability

During Travel Is Your Data Safe from Snooping Eyes?

Who Is Your Biggest Cyber Liability? Maybe It Is Not Who You Think

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 07/03/2019

---

Craig Peterson
Hi everybody, Craig Peterson here. Oh my gosh, Independence Day. I want to say Happy Independence Day to everybody out there. Happy Canada Day to everybody who, of course, is from Canada. Some grand celebrations are coming up in France this summer, as well as the UK and all over the world. So, you know, let's give peace a chance as they say, right. Today I was on with my friends Ken Altshuler and Eric Lusk, and I gave Eric a bit of a kidney punch. I talked a little bit about an email I got from the FBI this week and talking about some of the security problems with Android. I am afraid I went on a bit of a rant here, you know, the whole 76% of mobile apps having flaws, security flaws, the Iranian cyber attacks against the United States. And we got into it today. At least I did. They could hardly get a word in edgewise. Anyways, here we go. Have a great week, guys, and I'll be back on Saturday. Bye-bye.

Ken Altshuler
And it's 738 on Wednesday Morning News. Eric is sitting in for Matt Gagnon, who is taking a few days off. Jeremy Fisher 'll join you after the eight o'clock news with an eye on politics but as usual on Wednesday, 738 none other than Professor Craig Peterson, our tech guru joins us. Good morning, Mr. Peterson, how are you?

Craig Peterson
Hey, good morning, doing well. I love this kind of weather. It is why I live up here. It's just like you were saying. Right?

Ken Altshuler
Exactly.

Craig Peterson
I like a warm day, frankly, in the 80s. Maybe a little much. It's a beautiful beach day. But I'm not into the humidity and not into the 90 plus degree weather and everything else. I enjoy this.

Ken Altshuler
Well, you're in the right place. Enjoy it until winter starts in a couple of weeks.

Craig Peterson
Yeah.

Ken Altshuler
It's right around the corner. Winter is coming. Mr. Peterson,

Eric Lusk
You'll notice the days are getting shorter.

Ken Altshuler
Exactly right.

Craig Peterson
Well, you're not going to notice it quite yet. It speeds up a little bit, later on. Right now. We're only losing just you know, a few seconds every day but it does accelerate. Winter is, you know, the winter isn't so bad either. You know.

Ken Altshuler
There's no good winter, you're wrong. There's no nice way to put it, winter, I mean no way to put a nice spin on it. But no winter is not good.

Craig Peterson
Well, I look at it this way can I can always put on another layer of clothes in the wintertime. I cannot take off my skin in the summer.

Ken Altshuler
But you don't need to. You can be basking in the warmth in the heat. I am from Oklahoma, so you're talking to the wrong person.

Craig Peterson
Oklahoma's nasty. They have the worst of both, right.

Ken Altshuler
But that heat is super. It's like being in a SPAAA..

Ken Altshuler
So let's get into the tech issues. You gave us a lot of tech issues that I didn't know where to start. I went to the one where 76 percent of mobile apps have flaws that allow hackers to steal passwords, money, and tech. So what my iPhone, these people can go on and steal my passwords. You tell me.

Craig Peterson
Here's the problem, I, in fact, I just forwarded an email to some friends, I'll have to send it out to my whole email list here on as part of this weekend's email that I send out. I sent out this email. It was a summary that I get from law enforcement from the FBI because of what I do with the FBI and Infragard running their webinar programs. On it was just a note that said here's the Android patches for July. It went on for I don't know three or 400 words just describing the critical patches and how only Samsung is going to be releasing fixes for these patches on Android for these significant security problems with Android software. Only Samsung going to be releasing fixes for them within the probably the next60 days. These are highly critical. These are crucial, critical, patches. Other vendors, some may never release patches for them. Okay, so let's start with that in mind. Okay, Android, forget about it. If you care about security at all. Never buy Android. Now, iOS

Erik Lusk
So much for my cell phone. Exactly.

Craig Peterson
Ditch it. I can't believe you're in the financial business and you have an Android because it is the most dangerous piece of hardware available today. It's worse than Windows.

Ken Altshuler
Wow.

Craig Peterson
Okay.

Ken Altshuler
Did you hear that?

Craig Peterson
So, don't

Erik Lusk
Do you want me to turn around so you can hit the other kidney? Holy smokes!

Craig Peterson
Is he starting to spit blood yet, Ken? Okay. Sorry about that. But most people don't know this. Right? It's not your fault, Erik. Some vendors are pretending Androids just fine. Right? So how do you know who to trust? I'm not blaming you for this, and it's why I get so upset with the antivirus software, people selling things like Android phones and tablets, televisions with built-in things like how webOS. Samsung said two weeks ago, don't forget to run an antivirus on your TV. Who knows this stuff? Right? The bottom line is, don't use Android ever. Stick with iOS. Going back to Ken's point here, where 76% of mobile apps, according to positive technologies analysis here, 76% of mobile apps have flaws that can allow hackers to steal the passwords, maybe even your money and texts. Okay. Yeah, there is not a device if it has power going to it, If it has a wire going to it - the potential is there that it can be hacked, okay. So Deal with it, bottom line. Poorly written iOS applications are going to use cloud services other than Apple. Now Apple, again, their cloud services are outstanding. However, many of these cloud services, look at the Amazon breaches, we just had another huge one yesterday, that affected TD Bank, according to the reports, they were using a third party contractor. In other words, if you are a business, think about this for a couple of minutes, you're giving your data to who? To salesforce.com to this cloud service. Do you know how good is this cloud provider's security? Many of these apps that we're using are going to the cloud, they're using cloud services, many of the vendors that are upstream from us are taking some of our data, and they're not protecting it. So I, man, I just, I can't emphasize this enough. It's terrible. It's but it's the way of the world, and it's going to continue to be the way the world. That's why I'm hosting my security summer. This summer, I have a six-week program, one hundred percent free for everybody. I want everybody to know what to do because the vendors out there are not telling you the truth. Okay. That's the bottom line. They're selling new software that they have because they have it. Right. They're not selling you solutions that solve basic things, and you need to do those first. It's brass tacks of what you need to do to keep your data safe. It's like you were talking about with distracted driving. Who can afford the latest version of Apple's Car Play? The new one that is just coming out with right now is phenomenal. Android has a similar thing. But again, I don't want you to use Android devices for distracted driving. Who can afford to pay somebody like me to help them? Well, you know, bigger businesses, obviously, Ken, right. The medium-sized companies and larger small businesses can come in, and I can secure it. There are so many defense contractors working just right south here at Portsmouth Naval Shipyard that has to have to be DFARS compliance, which is a federal regulation. But they don't know where they can go? How about the little guys that can't afford to hire the real security people that all they do is networks and security. That's what this security summer is all about, guys. If people want to find out more, listen, you got to get ahold of me, I'm more than glad to put you into this class. It's only 10 to 15 minutes sessions twice a week, during the summer. If you miss one, you can watch it on the replay you need to email me at Craig Peterson dot com if you want to be in it and I'll let you know when it starts, okay, this isn't selling new stuff. It is just getting down to the brass tacks and making sure that those are out of the way. Many of these things you can do are free. Some of them are just educational, but they need to know what to do and how to do it. And then some you might want to or need to buy some paid software. I'll tell you what to do. But email me at Craig Peterson dot com. It's not as though I care about this stuff. Guys. I don't want you to think I'm on a soapbox or anything. Okay.

Erik Lusk
Just a wee bit.

Craig Peterson
Oh, yea.

Ken Altshuler
But a good soapbox

Erik Lusk
Oh, yeah, absolutely! When the city of Baltimore was held hostage by some computer hackers that managed to figure out how to shut down the municipal website. That's no way to live. What's next shutting down our Public Utilities?

Craig Peterson
You don't? Yeah, well, that's what's happening right now. And maybe that was a cue for me right there. We had this whole thing with Iran, right, they shot down our drone. That was or was not in international waters, Right. So our response was to be in a posture to bomb bomb bomb bomb bomb Iran. Right. Then President Trump called it off at the last minute, right? It is all that we're getting from the news. And then the part that most people haven't been talking about is apparently, President Trump's idea of, hey, listen, you didn't kill anybody in the plane, we don't want to kill anybody. Then in a reciprocal response was that we hacked and shut down their radars, missile radar systems and their missile sites. Their answer is what's happening now with Iran going after our US businesses. They've got some software that wipes your computer. If they get on to your business computers, what they want to do is cause problems with the US economy. Most businesses just are protected well enough. They've got some a break-fix shop that knows a little bit about security and certainly can install the software. And those are, you know, Wow, those are the experts. And so Life is good, right? Hey guys that is not the case. Now we've got Homeland Security coming out this last week here, and warning businesses that Iranian hackers are already targeting US companies. And they're using this wipe software. They're not holding your data ransom, they are wiping clean your computers and anything they can find on your network, rather than stealing the data. That's directly from Chris Krebs. He's the director of Homeland Security's Cyber Security Division

Erik Lusk
Isn't that an easier thing to do? Rather than to go in and steal the data, isn't it easier to just wipe out somebody's data altogether?

Craig Peterson
That's the easiest thing to do. And you know what, Eric, there are no fingerprints afterward, Right? Or should I say a very few fingerprints? So for instance, we've gone into companies, we went into one company, and we found that there were Chinese back doors installed. It was a small manufacturer. And they made some dumb parts, right? There's like you think of a screw. Well, who cares about a screw. And the Chinese had multiple back doors, and they were monitoring everything that was going on. But that screw eventually ended up in our military equipment, until the Chinese went after the little guy. It made it now easier, and they had access to the portal to the big defense contractor, etc., etc. So that was very easy to trace because we could see wherever these back doors were talking to how they were accessed. We worked with the FBI, and we were able to straighten it out very quickly, we got them back in business within 24 hours. However, when you're just wiping a computer, there is nothing left because they've completely wiped the silly thing. So yeah, Eric, that's what they're doing because it is the easiest thing to do. That's part of what we're going to do with the security summer the right ways to do backups. And I can tell you 90% of the people I've ever talked to probably really close to 100 are not doing backups properly. But I don't want people to feel bad. A good backup that works can recover your data from that wipe from the Iranians. It can also recover your data from any ransomware attacks coming. Many of those are from Russia. We have one client, and we were looking at their website the other day and the security mechanisms we have in place. Their website was getting attacked five times every second it was a little website. It's crazy. And it was coming straight from Russia, by the way, anyways, blah, blah. I'm going to long in this segment. But there's so much you have to know to do it right. Just email me at Craig Peterson dot com. I want to get you in this. It is free. It's for small-medium businesses. If you're just the IT person because you know the most or you like computers, and "tagged your it" right, like in the game of tag. It is for you. And it's free. And I want you to attend email me at Craig Peterson dot com.

Ken Altshuler
Great. Craig Peterson dot com and Craig joins us every Wednesday. 738. Craig, we hope you have a great Fourth of July. We'll talk to you next week.

Erik Lusk
So much for my cell phone. I guess I'm headed over to get something else.

Ken Altshuler
iPhone time. iPhone time. Yeah.

Craig Peterson
Have a great Independence Day, everybody.

Erik Lusk
Thanks, Joe. All right, we'll take a break for CBS News, and we'll be back after this.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Craig was on with Dan Ferrantino sitting in for Jim Polito. We talked in some detail about some of the things that are going on right now. Did you know that there are retaliatory strikes from Iran going on right now? Unfortunately, they are aiming them directly at your business? We went through some of the details of that what you can do. I gave some real-world examples and solution.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Trumping Iranian Aggression 

Is Your App Safe? Maybe Not!

Are You Ready? Iranian Cyber Counter Attacks

--- 

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 07/02/2019

Iran, Russia, Boeing and Keeping Safe 

Craig Peterson
Good morning, everybody. Craig Peterson here. I was on with Danny this morning because Jim is on vacation. We talked in some detail about some of the things that are going on right now. Did you know that there are retaliatory strikes from Iran going on right now? Unfortunately, they are aiming them directly at your business? We went through some of the details of that what you can do. I gave some real-world examples and solution. So here we go with Danny.

Danny Ferrantino
That music means it is Tuesday morning and our tech talk guru, Craig Peterson is joining us. Good morning, Craig.

Craig Peterson
Hey, good morning Danny. Good job,

Danny Ferrantino
I try and try and try. You're kind enough to send us the show notes early. Looking through the show notes. There seems to be kind of one correlation between all of the topics. Everyone's out to get me, buddy.

Craig Peterson
That's the bottom line. It isn't just the government coming after you for tax money. Now we're not only supporting the some of these people who are on welfare, maybe down on their luck, etc. We're also supporting people living in Eastern European countries, their entire families, extended families. There is one story from last year, or maybe it's two years ago now, this lady over there in Eastern Europe. She did what's called from doxxing. That begins with figuring out a little bit about some companies she found a guy who was at a Facebook page had a LinkedIn profile. She found out that he was the president of this company. You know, a midsize, a small, medium-sized company. After finding out more about the guy, she sent a link a LinkedIn to him, and a Facebook request friend request saying remember me back from school, you know, using the information she had she knew what school he went to because he posted it online. She did some more research on the business website. Of course on the business website, it says, here's the CEO. Here's the CFO here, all of my top guys and gals. She researches them, find out more information about them. She spent time watching the CEO and followed him for a while. She found out he was going on vacation to the Bahamas, not the D.R. Okay. So he will probably come back alive. She figured out okay, well, this is when he's going on vacation. By the way, criminals breaking entering now, robberies at homes home invasions are also using the same technique. They know when you're gone during the summer time because you post it on social media, and they use that all online information to figure out who you are? If you might have good assets, and then they break into your house while you're gone. Because you told them you're going away for a week.

Danny Ferrantino
Yep, I got it.

Craig Peterson
Yeah, exactly. In this case, the CEO is out on vacation, and he's pretty unreachable. She has found out what his email addresses, calls up, and gets his password reset. Yes, this takes a while to explain all of this. But it only takes about two-three days worth of work. She sends in an email off to the CFO saying posing as the CEO, "Hey, we got this new vendor, they're critical. We haven't paid them in three months". "If we don't send them the money right now, they're going to cut us off, or our manufacturing is going to shut down in the business. I need you to wire this money, Right now.

Danny Ferrantino
I see where this is going.

Craig Peterson
She got the CFO to wire $45 million out of the country. Now, the FBI is saying that, and the secret service as well, in the briefings I've had with them that it only takes 90 seconds for all that money to be unreachable almost guaranteed. It was in this case, as well. She's supporting not only herself the rest of her life, her family and her the extended family the rest of her life, and it is all because of what people are posting on social media. What we're doing with our devices.? So if you go to my company and mainstream dot net online, Danny, there is an Officer's page like everybody else has. Right? You've seen them here's our senior staff. So you go to that page. But ours is quite different, and it says due to security concerns, we're not telling you, sucker. That's what we need to start doing ourselves with our data with our businesses and our business data. Because they are out to get you, Danny,

Danny Ferrentino
Everyone thinks that you know, you want to be all-inclusive, and let everyone know and try to sell yourself online. More times than not that can come back to hurt you as you just discussed.

Craig Peterson
Yeah, look at how great we are. We have all these attorneys here from H-A-AR- VARD, you know, they have Native American blood and all these other things that you want to highlight. However, bragging about them, now, in this day and age can be dangerous. Even in press releases, we used to say a lot more than we say now because they are using it against us. I regularly see businesses, small businesses, here's another one where they had about $80,000 that was stolen right out of their operating account. Now, that's money that they need to stay in business. A group operating out of China took it, and it was, obviously, a big deal. The company spent 10s of thousands of dollars flying over to Hong Kong, trying to file police report trying to get their money back and they never did.

Craig Peterson
Now we've got this thing going on with President Trump and Iran. Of course, there was a whole thing in place, and we're going to bomb bomb bomb bomb bomb Iran. If you remember the early 80s, that little ditty. And he pulled it back. And what did he do instead? I don't know if you follow this. But he decided, here's what we're going to do. It wasn't reasonable. They shot down an unmanned drone, and it was not a reasonable response for us to drop bombs and maybe kill 150 people. Well, in what he did instead was he launched a cyber attack against Iran. It is all from what we can gather and public statements and everything. He began a cyber attack against the Iranian infrastructure that controls the missiles that launch the missiles. Also, do you remember this thing with Russia and the power plant? Where we flicked Russia's lights on and off a few times to let them know we were in their systems.

Danny Ferrentino
Hey just to let you know, we're here. Yeah.

Craig Peterson
Yeah, exactly. So now Iran has started attacking. They've increased their attacks now, primarily on our businesses, because they're trying to hurt our economy. They're using some special malicious software designed to wipe the contents of your computer. They're not going to bother holding it ransom. They want to put you out of business. It is straight from the Homeland Security Department. We have to be careful now. The Homeland Security is warning us that there's been a dramatic increase in Iranian hacking, and what are we doing, Danny? Our businesses are not protected. It's crazy. It's like 95% of our companies are easily penetrated. They have said that two-thirds of all companies in the SMB space will be compromised this year. That's what they're expecting. Two-thirds. And we're not doing enough about it, too.

Danny Ferrentino
We're talking with our tech talk Guru, Craig Peterson. Craig. Now, this isn't new with the hacking the cybersecurity. Why is it that people are just so far behind the eight-ball on something like this? People like you that are out here telling us we need to do something. Is it people don't care? Is that they don't believe it's going to happen to them?

Craig Peterson
Well, I, I talked to a lot of people, as you know, because I run these webinars for the FBI Infragard program. And I have a lot of clients, up pick up new clients every week, and help them out. And so here's what I hear the most right? It is confusing. It is overwhelming. They feel like they have no control over it, and there is nothing they can do. None of which is true, by the way. But at the same time, I also think that they have legitimate reasons to feel that way. You know, the software they bought, they bought Norton Antivirus and so they're all set. They purchased this Symantec software or whatever. Both companies, by the way, have had employees, high up like the CEO or Executive V.P., saying their software is useless today. I can't blame these companies for feeling that way. So I'm trying to help people I know there's a lot of businesses that can't afford to hire me. So, Danny, what I'm doing this summer for everybody that's on my email list, everyone who's on my text list is going to get an invite, I'm going to be doing a dozen 15-minute if you will give or take, webinars. It's my security summer. It's 100% free for anyone who wants to attend. We're going to go through the brass tacks of what you need to do, the basics, let's get back to the basics. Let's make sure you're securing your stuff, let's find out what the data you have, what your data assets are of your small business and medium business and what you need to protect them. I'm going to help people understand this. And, you know, I've got my fingers crossed, that we're going to help move that needle. I've helped a lot of businesses, over 5000 so far, move the needle. I am doing this for my listeners. As you were mentioning earlier today, 76% of mobile apps have flaws, that are allowing hackers to steal passwords, to get into bank accounts to find your texts and things. What this goes back to the unprofessional nature the people who are writing software. Did you see what came out about Boeing? Sorry, I am rambling a bit. On Boeing with their 737 Max 8, did you hear what came out yesterday? The software in the Boeing jet has that is having problems right now. It turns out some of that software had been written by software developers in India, who earned $9 an hour? You know, it's, how do you know how good that software is? Do they do proper code reviews? Do they have the senior people in place that understand the security implications, that understand all of the flight systems? You can't fix a problem with a computer if you don't understand all of the components involved? So I, I put a lot of blame on some of these businesses trying to save money on the bottom line. They are not hiring the experienced technical people, and I know a few people, quite a few that, that have significant experience programming and managing projects for 30 years that are having some trouble finding work. Why? They want to hire the young kid, is it going to be with them for the next 30 years, right? It's a, what do they call that, where you're you're not going to hire an older person, age discrimination.

Danny Ferrantino
You've got to have the experience. They don't know what they're doing, Craig. And so that's why there are so many of these issues nowadays with these either be poorly written code, or poorly written security measures or whatever else. And unfortunately, a lot of our cyber enemies are picking up on this.

Craig Peterson
Very, very true. I blame Microsoft. Here's why. Okay, you know how easy it is to program. Nowadays, it's drag and drop. It's like, if you want to build the car, you pull this transmission off the shelf, and you put it on top of this frame. Nothing by that you had to bolt together, by the way, you drop them on, and all the parts fit together. But when something happens, all you have is a red light on the dashboard, and you have no idea it's a problem with the transmission the drive, train somewhere, right. Or maybe you have a low tire. Bill Gates made it so easy for so many years for people to write software. And on one side, it's terrific, I'm glad that he's done that because we've got some great software because of it. But, on the other hand, we are now surrounded by people that are considered professionals. Look at the average small business their I.T. person is whoever likes computers the most. They I.T. professionals, they haven't worked at all these different levels. That's what the whole security summer is going to be about. I'm going to let everybody know. So you can attend you'll know which sessions There are so that you can go the ones that apply to you the most I'm not charging a dime, but for this, okay, so it's simple. I'm trying to get this information I'm trying to help the Small Business/medium business that says to an employee you're my computer gal now because you like computers the most. This security thing, as you pointed, out is enormous. We've got nation states coming after us who realize what our weaknesses are. Right now we've got Iran coming after our businesses, massively, as a retaliatory strike.

Danny Ferrantino
Well, Craig, as always, great stuff and now that you've scared me straight,

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Craig was on with Dan Ferrantino sitting in for Jim Polito. We talked in some detail about some of the things that are going on right now. Did you know that there are retaliatory strikes from Iran going on right now? Unfortunately, they are aiming them directly at your business? We went through some of the details of that what you can do. I gave some real-world examples and solution.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Trumping Iranian Aggression 

Is Your App Safe? Maybe Not!

Are You Ready? Iranian Cyber Counter Attacks

--- 

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 07/02/2019

Iran, Russia, Boeing and Keeping Safe 

Craig Peterson
Good morning, everybody. Craig Peterson here. I was on with Danny this morning because Jim is on vacation. We talked in some detail about some of the things that are going on right now. Did you know that there are retaliatory strikes from Iran going on right now? Unfortunately, they are aiming them directly at your business? We went through some of the details of that what you can do. I gave some real-world examples and solution. So here we go with Danny.

Danny Ferrantino
That music means it is Tuesday morning and our tech talk guru, Craig Peterson is joining us. Good morning, Craig.

Craig Peterson
Hey, good morning Danny. Good job,

Danny Ferrantino
I try and try and try. You're kind enough to send us the show notes early. Looking through the show notes. There seems to be kind of one correlation between all of the topics. Everyone's out to get me, buddy.

Craig Peterson
That's the bottom line. It isn't just the government coming after you for tax money. Now we're not only supporting the some of these people who are on welfare, maybe down on their luck, etc. We're also supporting people living in Eastern European countries, their entire families, extended families. There is one story from last year, or maybe it's two years ago now, this lady over there in Eastern Europe. She did what's called from doxxing. That begins with figuring out a little bit about some companies she found a guy who was at a Facebook page had a LinkedIn profile. She found out that he was the president of this company. You know, a midsize, a small, medium-sized company. After finding out more about the guy, she sent a link a LinkedIn to him, and a Facebook request friend request saying remember me back from school, you know, using the information she had she knew what school he went to because he posted it online. She did some more research on the business website. Of course on the business website, it says, here's the CEO. Here's the CFO here, all of my top guys and gals. She researches them, find out more information about them. She spent time watching the CEO and followed him for a while. She found out he was going on vacation to the Bahamas, not the D.R. Okay. So he will probably come back alive. She figured out okay, well, this is when he's going on vacation. By the way, criminals breaking entering now, robberies at homes home invasions are also using the same technique. They know when you're gone during the summer time because you post it on social media, and they use that all online information to figure out who you are? If you might have good assets, and then they break into your house while you're gone. Because you told them you're going away for a week.

Danny Ferrantino
Yep, I got it.

Craig Peterson
Yeah, exactly. In this case, the CEO is out on vacation, and he's pretty unreachable. She has found out what his email addresses, calls up, and gets his password reset. Yes, this takes a while to explain all of this. But it only takes about two-three days worth of work. She sends in an email off to the CFO saying posing as the CEO, "Hey, we got this new vendor, they're critical. We haven't paid them in three months". "If we don't send them the money right now, they're going to cut us off, or our manufacturing is going to shut down in the business. I need you to wire this money, Right now.

Danny Ferrantino
I see where this is going.

Craig Peterson
She got the CFO to wire $45 million out of the country. Now, the FBI is saying that, and the secret service as well, in the briefings I've had with them that it only takes 90 seconds for all that money to be unreachable almost guaranteed. It was in this case, as well. She's supporting not only herself the rest of her life, her family and her the extended family the rest of her life, and it is all because of what people are posting on social media. What we're doing with our devices.? So if you go to my company and mainstream dot net online, Danny, there is an Officer's page like everybody else has. Right? You've seen them here's our senior staff. So you go to that page. But ours is quite different, and it says due to security concerns, we're not telling you, sucker. That's what we need to start doing ourselves with our data with our businesses and our business data. Because they are out to get you, Danny,

Danny Ferrentino
Everyone thinks that you know, you want to be all-inclusive, and let everyone know and try to sell yourself online. More times than not that can come back to hurt you as you just discussed.

Craig Peterson
Yeah, look at how great we are. We have all these attorneys here from H-A-AR- VARD, you know, they have Native American blood and all these other things that you want to highlight. However, bragging about them, now, in this day and age can be dangerous. Even in press releases, we used to say a lot more than we say now because they are using it against us. I regularly see businesses, small businesses, here's another one where they had about $80,000 that was stolen right out of their operating account. Now, that's money that they need to stay in business. A group operating out of China took it, and it was, obviously, a big deal. The company spent 10s of thousands of dollars flying over to Hong Kong, trying to file police report trying to get their money back and they never did.

Craig Peterson
Now we've got this thing going on with President Trump and Iran. Of course, there was a whole thing in place, and we're going to bomb bomb bomb bomb bomb Iran. If you remember the early 80s, that little ditty. And he pulled it back. And what did he do instead? I don't know if you follow this. But he decided, here's what we're going to do. It wasn't reasonable. They shot down an unmanned drone, and it was not a reasonable response for us to drop bombs and maybe kill 150 people. Well, in what he did instead was he launched a cyber attack against Iran. It is all from what we can gather and public statements and everything. He began a cyber attack against the Iranian infrastructure that controls the missiles that launch the missiles. Also, do you remember this thing with Russia and the power plant? Where we flicked Russia's lights on and off a few times to let them know we were in their systems.

Danny Ferrentino
Hey just to let you know, we're here. Yeah.

Craig Peterson
Yeah, exactly. So now Iran has started attacking. They've increased their attacks now, primarily on our businesses, because they're trying to hurt our economy. They're using some special malicious software designed to wipe the contents of your computer. They're not going to bother holding it ransom. They want to put you out of business. It is straight from the Homeland Security Department. We have to be careful now. The Homeland Security is warning us that there's been a dramatic increase in Iranian hacking, and what are we doing, Danny? Our businesses are not protected. It's crazy. It's like 95% of our companies are easily penetrated. They have said that two-thirds of all companies in the SMB space will be compromised this year. That's what they're expecting. Two-thirds. And we're not doing enough about it, too.

Danny Ferrentino
We're talking with our tech talk Guru, Craig Peterson. Craig. Now, this isn't new with the hacking the cybersecurity. Why is it that people are just so far behind the eight-ball on something like this? People like you that are out here telling us we need to do something. Is it people don't care? Is that they don't believe it's going to happen to them?

Craig Peterson
Well, I, I talked to a lot of people, as you know, because I run these webinars for the FBI Infragard program. And I have a lot of clients, up pick up new clients every week, and help them out. And so here's what I hear the most right? It is confusing. It is overwhelming. They feel like they have no control over it, and there is nothing they can do. None of which is true, by the way. But at the same time, I also think that they have legitimate reasons to feel that way. You know, the software they bought, they bought Norton Antivirus and so they're all set. They purchased this Symantec software or whatever. Both companies, by the way, have had employees, high up like the CEO or Executive V.P., saying their software is useless today. I can't blame these companies for feeling that way. So I'm trying to help people I know there's a lot of businesses that can't afford to hire me. So, Danny, what I'm doing this summer for everybody that's on my email list, everyone who's on my text list is going to get an invite, I'm going to be doing a dozen 15-minute if you will give or take, webinars. It's my security summer. It's 100% free for anyone who wants to attend. We're going to go through the brass tacks of what you need to do, the basics, let's get back to the basics. Let's make sure you're securing your stuff, let's find out what the data you have, what your data assets are of your small business and medium business and what you need to protect them. I'm going to help people understand this. And, you know, I've got my fingers crossed, that we're going to help move that needle. I've helped a lot of businesses, over 5000 so far, move the needle. I am doing this for my listeners. As you were mentioning earlier today, 76% of mobile apps have flaws, that are allowing hackers to steal passwords, to get into bank accounts to find your texts and things. What this goes back to the unprofessional nature the people who are writing software. Did you see what came out about Boeing? Sorry, I am rambling a bit. On Boeing with their 737 Max 8, did you hear what came out yesterday? The software in the Boeing jet has that is having problems right now. It turns out some of that software had been written by software developers in India, who earned $9 an hour? You know, it's, how do you know how good that software is? Do they do proper code reviews? Do they have the senior people in place that understand the security implications, that understand all of the flight systems? You can't fix a problem with a computer if you don't understand all of the components involved? So I, I put a lot of blame on some of these businesses trying to save money on the bottom line. They are not hiring the experienced technical people, and I know a few people, quite a few that, that have significant experience programming and managing projects for 30 years that are having some trouble finding work. Why? They want to hire the young kid, is it going to be with them for the next 30 years, right? It's a, what do they call that, where you're you're not going to hire an older person, age discrimination.

Danny Ferrantino
You've got to have the experience. They don't know what they're doing, Craig. And so that's why there are so many of these issues nowadays with these either be poorly written code, or poorly written security measures or whatever else. And unfortunately, a lot of our cyber enemies are picking up on this.

Craig Peterson
Very, very true. I blame Microsoft. Here's why. Okay, you know how easy it is to program. Nowadays, it's drag and drop. It's like, if you want to build the car, you pull this transmission off the shelf, and you put it on top of this frame. Nothing by that you had to bolt together, by the way, you drop them on, and all the parts fit together. But when something happens, all you have is a red light on the dashboard, and you have no idea it's a problem with the transmission the drive, train somewhere, right. Or maybe you have a low tire. Bill Gates made it so easy for so many years for people to write software. And on one side, it's terrific, I'm glad that he's done that because we've got some great software because of it. But, on the other hand, we are now surrounded by people that are considered professionals. Look at the average small business their I.T. person is whoever likes computers the most. They I.T. professionals, they haven't worked at all these different levels. That's what the whole security summer is going to be about. I'm going to let everybody know. So you can attend you'll know which sessions There are so that you can go the ones that apply to you the most I'm not charging a dime, but for this, okay, so it's simple. I'm trying to get this information I'm trying to help the Small Business/medium business that says to an employee you're my computer gal now because you like computers the most. This security thing, as you pointed, out is enormous. We've got nation states coming after us who realize what our weaknesses are. Right now we've got Iran coming after our businesses, massively, as a retaliatory strike.

Danny Ferrantino
Well, Craig, as always, great stuff and now that you've scared me straight,

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Craig is on with Jack Heath this Monday morning. I spoke with Jack about the importance of getting back to the basics of cybersecurity and why it is so important.  We also discussed the necessity in regard to some of the political happenings around the world in re the Iranians and Russians.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles 

Are You Ready? Iranian Cyber Counter Attacks

Cyber Breaches - How far does your liability extend?

Trumping Iranian Aggression 

---

Below is a rush transcript of this segment, it might contain errors.

Airing date: 07/01/2019

Getting back to basics and Iranian and Russian Hacking

Craig Peterson
Hey, good morning, everybody. Craig Peterson here. We are getting ready for our security summer summit. It's going to be multiple times a week, twice a week you can attend the live broadcast, or you can also go ahead and get yourself a golden ticket if you'd like to, to be able to go through it all at your schedule.

This summer, we are getting back to the brass tacks, the basics of what you need to do, we're going to tell you all of the basics. And that's what the security summers summit is all about. Make sure you keep an eye out for that announcement or send an email to me at Craig Peterson dot com if you're interested in participating. As I said, it is free. I get concerned about people who don't have the money and are, you know, really need help.

Man, it seems like everybody needs this in my 30 years of doing computer security stuff, I have never been in a business where we did an audit, or we took over their IT or their security that did not have security problems, no matter what, No matter how good their people supposedly were. I know there are smaller companies out there that can't afford to pay for one of my more prominent courses. So this is free. Now you can upgrade right if you want to, but the content will be free. I want to help everybody out, I want to make this affordable, and affordable equals free. However, we are going to make it available, as well via the golden ticket so that if you want to get the whole security summer and keep a copy, you can. The security summer information is going away right as soon as the summer's over and we're only leaving the individual classes up for a week. So once the summer's over, it'll just be gone unless you upgrade to the golden ticket. But you have a week to watch each one of these videos. And I think it's important to, to watch them and to pay attention. And I'm doing the one-week thing because if there is no motivation, we have so many things going on, that will say hey, listen, I'll do this in three weeks, I'll do it at the end of the summer, I'll have time in September. And it never gets done. However, this is one of the most critical things you can do for your family and your business. If you get breached, man, oh man and not just hacked, but you get one of these new zero-day attacks. Or maybe it's something like Equifax had, the patches have been out for more than six months, and they hadn't done the updates they needed to do. Any of those things can cause great heartache on your part. If your business you might be put you out of business. We've got some new statistics will be talking about coming out of some further studies showing how things have gotten worse, but how it will affect you. So all of that's part of our security summer, it's going to be free. Send email to me at Craig Peterson dot com. We'll have a sign up ready, pretty shortly, probably next week for you and I'll give you that link. If you want to kind of poke around, it's going to be at security summer.com. How's that for simple, right? It's not there yet. But we're putting it up. It's going to be me teaching a lot of this stuff. We're going to have a few guest people on talking about things talking about their hardware and software and how it works so that you can make some informed decisions about what you might want to use. Security Summer summit.com. That's where it'll be. Anyhow, here we go.

This morning, I was on with Mr. Jack Heath. And as usual, we talked about a couple of different things, including a big security alert came up from the NSA this week. And I went off at a bit of a tangent too, because I thought it was necessary. So here we go with Jack.

Jack Heath
All right, Craig Peterson on Tech Talk guy on this Monday morning. And Craig. Good morning. How are you?

Craig Peterson
Hey, good morning doing well.

Jack Heath
Good. What's, what do we have this morning on our tech talk side? You always tell us how to avoid being
victims of scam or spam, or you name it.

Craig Peterson
Yeah, precisely and per usual a lot is going on out there. Well, you might remember about 18 months ago, the world one of the worst attacks ever hit the world. It brought down significant corporations, government offices a terrible thing. Well, we've got some significant warnings out there right now. Even the NSA has stepped in and been providing some additional notices. I want to warn everybody I know this sounds like a broken record. Right? Make sure you're patched up. But we have something even newer. Iran has been in the news, of course, a lot recently. We just had a break in that was attributed to the Iranians, their bad tech guys, their hacker groups, and the Iranian tools ended up getting released. Now you might remember back a little while when someone stole the NSA tools and released them for hacking as well. And you might think that these incidences are dropping off Jack. But they are accelerating. We're getting more and more government involved now, as well as organized crime hacking each other. Then we had just over the weekend, President Trump coming out and talking about the New York Times, saying that what they did was traitorous when they came out and said that we the United States hacking Russian power plant, and been putting malware into them. This whole thing is getting crazy. But it's just the very beginning. Jack.

Jack Heath
Yeah, there's been some reports over the weekend on that. And of course, you know, I this again, it seems that we're not going to be able to, you know, I don't see how you can stop it. Speaking of the power grid, I'm not saying it was any malware but in Argentina, the 10s of millions of people without power in the in the dark because of a problem with their grid. Such scary stuff. All right, Craig, anything else before we let you get on with your Monday?

Craig Peterson
Well, I want to say to everybody, get back-back to the brass tacks here. That's what matters. Get back to the basics. Make sure you're patching, make sure you're up to date, that's going to help protect you. But we got some cool stuff going on as well.

There is some more news about the autonomous systems that are out there. And I've got a couple of articles about that up on my website as well like Craig Peterson dot com.

Jack Heath
Craig, thanks for the Tech Talk check-in. Thank you, Craig Peterson.

Craig Peterson
Take care, Jack

Craig Peterson
All right, everybody, it is not up yet. It will be up soon. But you can always email me at Craig Peterson dot com, we'll make sure you find out about this. Again, utterly free training this summer. You can upgrade and get the whole summit if you want to keep it, as well. It's available for free because I want to get this information out to as many people as we possibly can. Because it's that important. Yes, it is. So security summer summit.com is where it will be it's not there yet. We just man. Busy year. Take care, everybody. Be back tomorrow.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Craig is on with Jack Heath this Monday morning. I spoke with Jack about the importance of getting back to the basics of cybersecurity and why it is so important.  We also discussed the necessity in regard to some of the political happenings around the world in re the Iranians and Russians.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles 

Are You Ready? Iranian Cyber Counter Attacks

Cyber Breaches - How far does your liability extend?

Trumping Iranian Aggression 

---

Below is a rush transcript of this segment, it might contain errors.

Airing date: 07/01/2019

Getting back to basics and Iranian and Russian Hacking

Craig Peterson
Hey, good morning, everybody. Craig Peterson here. We are getting ready for our security summer summit. It's going to be multiple times a week, twice a week you can attend the live broadcast, or you can also go ahead and get yourself a golden ticket if you'd like to, to be able to go through it all at your schedule.

This summer, we are getting back to the brass tacks, the basics of what you need to do, we're going to tell you all of the basics. And that's what the security summers summit is all about. Make sure you keep an eye out for that announcement or send an email to me at Craig Peterson dot com if you're interested in participating. As I said, it is free. I get concerned about people who don't have the money and are, you know, really need help.

Man, it seems like everybody needs this in my 30 years of doing computer security stuff, I have never been in a business where we did an audit, or we took over their IT or their security that did not have security problems, no matter what, No matter how good their people supposedly were. I know there are smaller companies out there that can't afford to pay for one of my more prominent courses. So this is free. Now you can upgrade right if you want to, but the content will be free. I want to help everybody out, I want to make this affordable, and affordable equals free. However, we are going to make it available, as well via the golden ticket so that if you want to get the whole security summer and keep a copy, you can. The security summer information is going away right as soon as the summer's over and we're only leaving the individual classes up for a week. So once the summer's over, it'll just be gone unless you upgrade to the golden ticket. But you have a week to watch each one of these videos. And I think it's important to, to watch them and to pay attention. And I'm doing the one-week thing because if there is no motivation, we have so many things going on, that will say hey, listen, I'll do this in three weeks, I'll do it at the end of the summer, I'll have time in September. And it never gets done. However, this is one of the most critical things you can do for your family and your business. If you get breached, man, oh man and not just hacked, but you get one of these new zero-day attacks. Or maybe it's something like Equifax had, the patches have been out for more than six months, and they hadn't done the updates they needed to do. Any of those things can cause great heartache on your part. If your business you might be put you out of business. We've got some new statistics will be talking about coming out of some further studies showing how things have gotten worse, but how it will affect you. So all of that's part of our security summer, it's going to be free. Send email to me at Craig Peterson dot com. We'll have a sign up ready, pretty shortly, probably next week for you and I'll give you that link. If you want to kind of poke around, it's going to be at security summer.com. How's that for simple, right? It's not there yet. But we're putting it up. It's going to be me teaching a lot of this stuff. We're going to have a few guest people on talking about things talking about their hardware and software and how it works so that you can make some informed decisions about what you might want to use. Security Summer summit.com. That's where it'll be. Anyhow, here we go.

This morning, I was on with Mr. Jack Heath. And as usual, we talked about a couple of different things, including a big security alert came up from the NSA this week. And I went off at a bit of a tangent too, because I thought it was necessary. So here we go with Jack.

Jack Heath
All right, Craig Peterson on Tech Talk guy on this Monday morning. And Craig. Good morning. How are you?

Craig Peterson
Hey, good morning doing well.

Jack Heath
Good. What's, what do we have this morning on our tech talk side? You always tell us how to avoid being
victims of scam or spam, or you name it.

Craig Peterson
Yeah, precisely and per usual a lot is going on out there. Well, you might remember about 18 months ago, the world one of the worst attacks ever hit the world. It brought down significant corporations, government offices a terrible thing. Well, we've got some significant warnings out there right now. Even the NSA has stepped in and been providing some additional notices. I want to warn everybody I know this sounds like a broken record. Right? Make sure you're patched up. But we have something even newer. Iran has been in the news, of course, a lot recently. We just had a break in that was attributed to the Iranians, their bad tech guys, their hacker groups, and the Iranian tools ended up getting released. Now you might remember back a little while when someone stole the NSA tools and released them for hacking as well. And you might think that these incidences are dropping off Jack. But they are accelerating. We're getting more and more government involved now, as well as organized crime hacking each other. Then we had just over the weekend, President Trump coming out and talking about the New York Times, saying that what they did was traitorous when they came out and said that we the United States hacking Russian power plant, and been putting malware into them. This whole thing is getting crazy. But it's just the very beginning. Jack.

Jack Heath
Yeah, there's been some reports over the weekend on that. And of course, you know, I this again, it seems that we're not going to be able to, you know, I don't see how you can stop it. Speaking of the power grid, I'm not saying it was any malware but in Argentina, the 10s of millions of people without power in the in the dark because of a problem with their grid. Such scary stuff. All right, Craig, anything else before we let you get on with your Monday?

Craig Peterson
Well, I want to say to everybody, get back-back to the brass tacks here. That's what matters. Get back to the basics. Make sure you're patching, make sure you're up to date, that's going to help protect you. But we got some cool stuff going on as well.

There is some more news about the autonomous systems that are out there. And I've got a couple of articles about that up on my website as well like Craig Peterson dot com.

Jack Heath
Craig, thanks for the Tech Talk check-in. Thank you, Craig Peterson.

Craig Peterson
Take care, Jack

Craig Peterson
All right, everybody, it is not up yet. It will be up soon. But you can always email me at Craig Peterson dot com, we'll make sure you find out about this. Again, utterly free training this summer. You can upgrade and get the whole summit if you want to keep it, as well. It's available for free because I want to get this information out to as many people as we possibly can. Because it's that important. Yes, it is. So security summer summit.com is where it will be it's not there yet. We just man. Busy year. Take care, everybody. Be back tomorrow.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Did the Apollo moon landings happen?. Yes they did! Listen in to find out how it is provable 50 years later.

Are we in a Cyberwar with Iran? Unfortunately, yes and why you might get caught in the crossfire.

Business Productivity, for many it means the use of Third Party Software and Cloud Services.  But is it safe?  How to protect yourself. 

Visual hacking and why it is putting Business travelers at risk.

I am planning a Security Summer for my listeners.  I will have some free courses.  I will also introduce you to some of the software that I use for my clients and how you can use it too.  Also, I have some limited opportunities for businesses who have had enough with their security issues to work with me and my team and put their security problems to rest once and for all.   So watch out for announcements on those.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Transcript: 

Below is a rush transcript of this segment; it might contain errors.

Airing date: 06/29/2019

Did the Apollo moon landings happen?. Yes they did! Are we in a Cyberwar with Iran? What you need to know the risks with third party contracts.

----

Hello, everybody and welcome. Of course, this is Craig Peterson, your host for the next give or take 27 minutes, we're going without commercial interruption again. We are going to be talking about some of the details of our digital lives. With the 50th anniversary of the moon landing coming up, we wanted to go through some of the facts about that event because for some odd reason a lot of people seem to be confused about what took place. It's kind of amazing to me because I remember it so well like it was yesterday. It's incredible to me to think that more than half of the people alive today were not even alive when the moon landing occurred. That's just a matter of perspective, right?

We'll talk a bit about the cybersecurity gap. There was an article with some interesting observations in Forbes magazine this past week about it.

We will discuss some flaws in both iOS and Android apps, and it might surprise you, but there are security flaws in almost as many iOS apps from Apple, as Android and I will tell you why and what those are.

We have some new Mac malware that's out there right now, and it is an interesting one because it could go both ways. You could call this a user error. Or you might want to call it a security problem that Apple has, or maybe one Apple created. However, it is behaving the way it's was designed to work.

This week, I did a big presentation for a University of New Hampshire mastermind group of CEOs. We were talking about the most significant cyber liabilities, and I shared that more than 60 percent of your theft is coming from inside. From inside I mean, those with authorized access which includes all Third Party Contractors. So we'll talk a little bit about that.

If you travel for business, 3M has a couple of stark warnings for business travelers.

Oh my, we've got to talk about this, the U.S. launched a cyber attack against Iran, instead of beginning with a kinetic strike. We'll talk a little bit about some significant implications to you and your business because of that.

Then a little bit more here about liability for a data breaches and we will talk about all of this right now. So, let's get into it.

First off liability for a data breach. As I mentioned, I had an excellent presentation this week at this mastermind group for the University of New Hampshire. There were a lot of interactive questions and comments about what I presented. It was kind of fascinating because there were several CEOs from various industries. For this group, they have a non-compete criterion that precludes the members from directly competing with each other. I belong to a mastermind group, a paid group, and they don't have that type of restriction, you have to be basically a decent person, and so there are many people in your same line of work, I kind of like that. As a general rule, there is a lot of business out there for everybody. And being able to talk to someone that speaks your language that's in your line of work, and discuss with them what's really happening is a huge deal.
After my presentation, I had a few people comment afterward, that the stories that I wove in about clients of mine, that experienced security problems and were unable to solve them themselves. They tried, obviously, but they weren't successful, because they got hacked, they got breached. I use a lot of stories with some of these things, and it is especially important when we're talking about a data breach and your liability. I didn't get to bring that up this week, but it's absolutely massive.

How significant is that liability for a data breach right now? We're talking about an average cost of over $7 million here in the U.S. The worldwide average is 3.8 million, but here in the U.S., it's about twice that. When we're discussing some of the data breaches that are going on and how they are continuing to grow, there's going to be more and more companies who are failing to assess their own systems for security flaws, realistically. That is why you need to have a third party come in. You can't trust your CIO or your in-house security person to do these types of audits, you need a third person to do it. Then once they have identified your weaknesses, you have to plug the holes. Sometimes that will also require the services of a third party do it because they know, exactly what they're doing. Many times, if you're a slightly bigger company, and you have your own I.T. staff. Then your I.T. team is going to do it. But it is something you have to think about.

When you get hacked, what are you going to do? Your data is stolen, and you are out of business or as the expression goes - your goose is cooked. There is an excellent article from Kiplinger that I have up on my website right now about this very thing. As a business owner, CEO you on the hook for any losses sustained by your clients. I spent some time in the presentation talking about insurance. And that is an essential thing to have. For your business. However, more and more of the cyber liability insurance claims are getting cut back or even denied. Why? It is because companies are not doing everything that they ought to do, those things that are listed in the insurance contract. There are two main ways that civil liability for a data breach can occur. One is finding negligence. That is determined by whether your company is aligned with other peers in your industry, and adherence to the best practices if you will. If you're not or if you could have had better protection, then yes, indeed, you may have civil financial liability. Including some of those excessive governmental fines and penalties, we've talked about on the show before. Secondly, even if you did everything that was required to prevent a data breach, it could still happen. The next stage is, did you do enough after the event to reduce the harm to the people affected? Did you notify them right away? Did you take immediate investigation remediation steps? Did you contact law enforcement? What did you do after the fact, was it considered reasonable? These are all the things we need to keep in mind as business people. Having that plan in advance can save you both time and money. I went through some of those statistics as well.

Here are some good points for everyone that this article makes and you should pay attention to. One you should have a breach coach who can help you put together your breach plan and who can run the breach response. It is crucial to get an attorney involved and involved early. Everyone should know what their roles are.

This will be part of our security summer this year. So make sure you're signed up. I will have some documents about what your plan should look like who should be involved whose responsible for each part of that process. It can make a huge, huge difference.

Here are the most liable people. If you're a consumer, and you've had your information breached pay attention to this as well because you have the other side.

As a business if:
You collect payment information for online sales,
You maintain a database of personal information on current past or prospective customers
You have employees, and you store information about employees digitally, including social security numbers, medical information (guess what you have HIPAA liability) I bet you thought those only applied to medical practice, you didn't have to worry about HIPAA, Well, you do.
You have employees,
You rely heavily on technology for daily operations( remember, you're going to be out of business, out of action for days, weeks, or even longer.)
You're located in any jurisdiction has a mandatory Breach Notification laws.

Right now, that is true of everywhere in the world. Well, in the first world countries, if you will, the United States has them. For every state, there are some federal notification laws. Depending on what type of business you have. The same is true in Canada and throughout Europe.

Be careful here, too, when you are selecting your cyber insurance coverage. What you should have, what you can expect from that cyber insurance coverage. We'll talk more about this during our security summer, if you haven't already, make sure you sign up, just go to Craig Peterson dot com. There you'll see a sign-up, come up right at the top of the homepage, and you can sign up right there. I'll let you know when the security summer starts. We're going to be covering all kinds of stuff about firewalls about backups about liabilities, CEO type things all the way through home users. What you can do, what you should do.

This week some are saying that Macs are infected with what they are calling malware. As I said, It's debatable whether it really is malware, because the software is behaving as expected. Mac OS has something now called gatekeeper, it keeps an eye on the programs on your computer, what you download where it came from and is it signed correctly?

It is used by developers to have software that you download that is then referred off-site to add additional files, to get into the database server, etc. In this particular case, that is being talked about over ZDNet, it lets you gain access to a file server, it's called an NFS server. ZDNet is calling this a security flaw I'm not so sure it's a security flaw. Apple has known about it for a month, they haven't patched it, it would be easy enough to, but it would also break a lot of good software out there. Here's the trick. If you're running a Mac, or a P.C. or anything, do not download software from sites that you are not 100% confident can be trusted. It's just that simple.

It's back to the brass tacks, right? Get right back to it. What are the brass tacks? In the security field, one of the first is: Don't click on stuff. Don't download and run software that is on your on a web browser on your computer.

Now we know President Trump said he was going to respond to the Iranian aggression and shooting down our drone. There's dispute by Iran whether or not the drone was in the Iranian airspace. There's some question about that, too, because the United States, for instance, claims a 200-mile jurisdiction. The international agreement says it's a 12-mile zone, and some are 20 miles. Well, when we're talking about the Straits of Hormuz, I think it's 12 miles at the narrowest point. Is it an international space? Technically, yes. Did Iran claim the area it was in as their own? Well, obviously, they did.

President Trump pulled out of a kinetic attack, we were ready to bomb their radar installations and their missile launching facilities. It came out this last weekend that instead we apparently we hacked them.

Now, I found something exciting about this Russian power security breach that happened a couple of weeks ago. I don't know if you heard about that. But apparently, the U.S. broke into and had control of some Russian power stations located in Russia. We flipped the lights on and off possibly a few times to let them know, Hey, guys, we're here, Quit messing around with our elections and quit messing around with some of the other stuff that is ours there. We have that capability. President Obama put some cyber offensive capabilities in place, and President Trump has really upped the game there. Apparently, what he did, and this was the report from last week weekend, is that he authorized our cybersecurity guys to attack Iran.

Now, when Russia attacked Ukraine, of course, that piece of malware spread worldwide and brought down hundreds of thousands of computers, as many were shut down, taken off the internet, and many others were held ransom because Russia did not have control over that malware. We apparently got malware into some of their missile launch systems. We were able to shut them down so that it didn't spread any farther.

It is just like when we got into their centrifuges for making bombs for their purification of uranium, that code did not get any further than the centrifuges and destroyed them. Now, we went after them.

U.S. businesses now should be ready for what's going to be a massive attack from Iran. We remember Iran doesn't have the finesse we do, they don't have all of the talents that we do. And they don't really care if they're hitting a military target or not. When it comes to CYBER WARS, these retaliatory strikes from Iran are very likely to be against pretty much anybody here in the U.S. They've already been attacking us before President Trump launched this attack, apparently against them. They've been bombarding us with software that's designed to wipe the contents of networks and computers, rather than steal their data. This is according to The Washington Post that I think is really kind of interesting. And that was from Chris Krebs, a director of the Homeland Security Department, Cyber Security Division. This means that if the Iranians get ahold of your business systems or your home system, they are going to wipe it clean. So make sure you have excellent backups. Again, if you don't make sure you attend my training here my security summer because we're going to be going over that. This is free people. It's absolutely free for anyone to attend, you can upgrade if you want to, to a paid version which will allow more access, but you're going to get all of the core information absolutely for free. Whether you're paid or not, you're going to get all the information for free. The same data, let me put it that way. Whether you decide to get the golden ticket, or just do it for free, that that's what I'm doing for the radio listeners, anyone can attend, because I want to get this information out there. Be prepared for the Iranian attack, they've already started attacking our businesses.

We've already had North Korea attack. Russia attack. I mentioned this, in fact, in that CEO presentation I gave this last week for the UNH group. It happened right here in N.H. I was looking at one of our customers, who just had a website, and was looking at their firewall because we have some very advanced firewalls sitting in front of even web servers. These firewalls that we were looking at, just for that one web server, we were logging, five attacks. That is just crazy. Five attacks from Russia. It wasn't as I said, it wasn't only five attacks from Russia, it was five attacks per second, on average, over the last I think it was 36 or 48 hours. It was just crazy how this company was getting just hammered. However, you guys already know, if you listen to me for a while about a client that we picked up, that had been having email issues. We looked into it, and we ended up bringing the FBI in, with the client's permission, because we found Chinese back doors into their systems. This is a small manufacturer who kept all of their plans, of course, electronically, all of the manufacturing stuff, etc., etc. Now, they get to compete against China, with their own designs. That just blows my mind, frankly, How could you do that? It's, ignorance, right? It's thinking you're okay.

In fact, going back to this story from Kiplinger, I was referring to earlier here, here's a great little quote from the author here, Dennis Beaver. And he says "My father is a dentist and is up in years, his office has all of his patient's record stored electronically, which he accesses from home from his laptop by leaving the server always on at the office. I mentioned this to a geeky friend who the next day, showed me dental records from my dad's office that he had hacked, he claimed to be doing this as a favor to get my father's attention about cybersecurity, and I believe him. By the way, be careful, never do that without permission, right?

There are ethical hackers in my business here, who are doing penetration testing, but we make sure we've got full consent from the company. So don't, don't just go and do this. Thus, the story goes on. "When I told Dad, and he immediately changed the password but didn't seem too bothered.

Here's another one. "I knew one fortune 500 company CFO who used the same password for over 10 years. Most think that it's a joke, but it was real and proved not so funny after his credentials were found in seven data breaches. His password was used to hack the company's email servers, spoof emails, and steal 10's of thousands of dollars without anyone noticing for months.

I picked up a client here, a local one here in the northeast who had had $80,000 taken out of their operations account. And of course, they realized that pretty quickly, but by the time they noticed it, the money was gone. Be very, very careful.

We're going to cover these things in our security summer, again, just Craig peterson.com. And subscribe right there on the homepage. And we'll let you know when that starts. Tentatively it is going to be mid-July by the looks of things right now. And we're talking about 10 to 15-minute sessions a couple of times a week. And we're going to keep them up for at least a week in case you miss it so that you can watch one of the replays a little bit later on.

Okay, man, we are almost out of time here. 76% of mobile apps have flaws, allowing hackers to steal passwords, money, and texts. These are some high-risk vulnerabilities. They're universal across Android and iOS, Android has a little bit more risk than iOS, we're talking about, but 5% higher risk. This is according to a company called positive technology. They went in and looked at some of these mobile apps, and the biggest problem is in secure data storage. So be careful about that.

Again, Cisco has an answer to that. And with iOS, it's just phenomenal. Nobody has anything like this other than Cisco.

Be very, very careful, there are products out there that could be useful to you. Remember that stored information can be stolen. You can't necessarily trust the app developers, they might be taking your data. Great article, you'll see it on my website. It is from Forbes, and this is about the cybersecurity skills gap and won't be solved in the classroom. So have a look on my website for that one.

Business travelers, something new called visual hacking, and this is from the Czech Republic, again, that's up on my website and in this morning's newsletter.

The U.S. launches a cyber attack aimed at Iranian rocket and missile systems, and we will talk a little bit about that. We've got a couple of great articles online.

I spoke about this with the UNH co mastermind this week third-party contractors. They are our weakest cybersecurity link. And they're just not being held accountable. You know, if you ask people who are the biggest cybersecurity threats out there who have talked about today, I mentioned what Russia, China, I said, North Korea mentioned Iran. And you'd be right. But those countries are the most significant foreign threats. And I, as I mentioned this week at the speech I gave this, is the real problem is internal. And by internal, I don't just mean your employees, I mean, your contractors. And that's one of the things you have to go through. When you're looking at the penetration testing, you're doing the analysis of your business and the data security.

Now from the Customs and Border Protection, I talked this on May 31. They had a breach where 100,000 people were photographed inside vehicles crossing the border and a couple of lanes and included images of the vehicle license plates, maybe some other stuff that was that stolen, it was taken through a third party contractor that was doing work for Customs and Border Patrol.

The most significant breaches of the last 10 years have also been self-inflicted. So let's look at this one. This is a significant number here. This is quoted in The Hill from Flexera. Patches were available for 86% of the vulnerabilities on the day of disclosure. In other words, when these companies came forward and told people about the hacks that had happened, at 86% of those were hacks, that didn't have to happen, because there were patches out already.

Okay, in other breaches, access was gained by compromising a third party like the vendors who we were just talking about and stealing their credentials to log into the corporate network of the eventual target.

Speaking of Target, look at Target, and back in 2013, 40 million credit cards were lost through a third party air conditioning provider that was connected to the corporate network. All the hacker had to do is break into the air conditioning system, and now they had a launch pad.

Think of what happened out in Las Vegas, beautiful big fish tank, they put a smart controller in it that would warn them when their temperature got too cold because the fish are so expensive. It was hooked up to their network, and it was compromised. That fish tank temperature control system was used as a launching pad.

We're seeing that all the time with cameras security cameras, the Office of Personnel Management was breached through Key Point government solutions. This is a third party used by the Office of Personnel Management. That third party gave China, 21 million personnel files, including the background checks conducted on top security clearances.

In2017, Australian defense subcontractor lost 30 gigabytes of highly sensitive data, including information on the drone strike for the Joint Strike Fighter program. Crazy. By the way, the software had not been updated for 12 months.

In 2018, China compromised the network of yet another defense contractor doing work for the Navy. Again, our technology, our advanced military superiority, has literally been stolen from us. Again from The Hill, in an assessment delivered to Navy SECRETARY RICHARD v. Spencer in March and reviewed by the Wall Street Journal, the Navy and its industry partners are under cyber siege by Chinese and Russian hackers.

So think about all of that when you are thinking about your business and even your home computer. Segment your networks, break them up, use good passwords, this is all stuff we're going to review in our security summer. Again, Craig Peterson dot com, you can email me, and I'll let you know when it happens. Just text Me at Craig Peterson dot com, we're going to cover all of this. I want you guys to know what to do, whether you're an individual or a small-medium business. In most companies, face it the computer guy or gal is whoever likes computers the most, or maybe the one who wanted a raise. They're not necessarily computer professionals. It is very, rare to find security professionals. We're working every day trying to keep up to date. Even though I've been doing this for 30 years, and I'm still learning stuff. So be careful when you go out and hire outside firms.

On to the Apollo program. I read a book back in the early 80s. And I marked it all up. And it was about how the lunar landing was a hoax. Hollywood has made some films about it. There are many people, and more and more kids nowadays think the whole thing was a setup. This is a great article written by Ethan Siegel. In the article, he talks a little bit about the moon landing. People are saying that the entire space program and NASA is nothing more than a hoax. Let's get go through a little bit of evidence. Number one, we can still see the evidence of the Apollo program on the moon even today. If you walk on the sand on a beach, the waves are going to level it out, and there won't be any sign that you were ever there. Right. But none of that exists on the moon.

Even in the Sahara Desert on the sand, you've got the shifting winds that shift that sand around. However, that is not the case on the moon.
We actually have pictures from regular people of the moon of the landing site, Apollo 12,14, and 17. Those have all been photographed from Earth. On the Apollo 12 landing sites. There is a ton of stuff you'll see this article from Forbes magazine. You can view all of the pictures. You can see it up on my website at Craig Peterson dot com. I have a link to a number to extensive photographic and video evidence from the Apollo missions themselves. The one I like the best is one that I am personally familiar with. This is a Lunar Laser Ranging, and there are many others. But this is one that we Ham Radio users use. We can bounce off of the moon there's a reflector that was left up there by the Apollo missions we can bounce a laser off, and we use that scientifically to figure out how far the moon is away. But there are also lunar seismometers there is the solar wind composition spectrum lunar surface magnetometer, a lunar dust collector, many more. It was all left up there all where it ran for years. Some of this technology is still running. We were there. Don't let them tell you otherwise.

Take care, everybody. Make sure you sign up for the security summer at Craig Peterson, dot com Take care, everybody. Bye-bye.

--- 

Related articles:

Be Careful What You Browse — Drive-By Malware on the Rise

Are You Ready? Iranian Cyber Counter Attacks

Cyber Breaches — How far does your liability extend?

What We Know About Apollo Missions After 50 years 

Trumping Iranian Aggression 

Is Your App Safe? Maybe Not!

We Will Need 3.5 Million Cybersecurity Professionals by 2021 and They Won’t Come Out Of Our Colleges

Mac Non-Vulnerability Vulnerability

During Travel Is Your Data Safe from Snooping Eyes?

Who Is Your Biggest Cyber Liability? Maybe It Is Not Who You Think

--- 

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Did the Apollo moon landings happen?. Yes they did! Listen in to find out how it is provable 50 years later.

Are we in a Cyberwar with Iran? Unfortunately, yes and why you might get caught in the crossfire.

Business Productivity, for many it means the use of Third Party Software and Cloud Services.  But is it safe?  How to protect yourself. 

Visual hacking and why it is putting Business travelers at risk.

I am planning a Security Summer for my listeners.  I will have some free courses.  I will also introduce you to some of the software that I use for my clients and how you can use it too.  Also, I have some limited opportunities for businesses who have had enough with their security issues to work with me and my team and put their security problems to rest once and for all.   So watch out for announcements on those.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Transcript: 

Below is a rush transcript of this segment; it might contain errors.

Airing date: 06/29/2019

Did the Apollo moon landings happen?. Yes they did! Are we in a Cyberwar with Iran? What you need to know the risks with third party contracts.

----

Hello, everybody and welcome. Of course, this is Craig Peterson, your host for the next give or take 27 minutes, we're going without commercial interruption again. We are going to be talking about some of the details of our digital lives. With the 50th anniversary of the moon landing coming up, we wanted to go through some of the facts about that event because for some odd reason a lot of people seem to be confused about what took place. It's kind of amazing to me because I remember it so well like it was yesterday. It's incredible to me to think that more than half of the people alive today were not even alive when the moon landing occurred. That's just a matter of perspective, right?

We'll talk a bit about the cybersecurity gap. There was an article with some interesting observations in Forbes magazine this past week about it.

We will discuss some flaws in both iOS and Android apps, and it might surprise you, but there are security flaws in almost as many iOS apps from Apple, as Android and I will tell you why and what those are.

We have some new Mac malware that's out there right now, and it is an interesting one because it could go both ways. You could call this a user error. Or you might want to call it a security problem that Apple has, or maybe one Apple created. However, it is behaving the way it's was designed to work.

This week, I did a big presentation for a University of New Hampshire mastermind group of CEOs. We were talking about the most significant cyber liabilities, and I shared that more than 60 percent of your theft is coming from inside. From inside I mean, those with authorized access which includes all Third Party Contractors. So we'll talk a little bit about that.

If you travel for business, 3M has a couple of stark warnings for business travelers.

Oh my, we've got to talk about this, the U.S. launched a cyber attack against Iran, instead of beginning with a kinetic strike. We'll talk a little bit about some significant implications to you and your business because of that.

Then a little bit more here about liability for a data breaches and we will talk about all of this right now. So, let's get into it.

First off liability for a data breach. As I mentioned, I had an excellent presentation this week at this mastermind group for the University of New Hampshire. There were a lot of interactive questions and comments about what I presented. It was kind of fascinating because there were several CEOs from various industries. For this group, they have a non-compete criterion that precludes the members from directly competing with each other. I belong to a mastermind group, a paid group, and they don't have that type of restriction, you have to be basically a decent person, and so there are many people in your same line of work, I kind of like that. As a general rule, there is a lot of business out there for everybody. And being able to talk to someone that speaks your language that's in your line of work, and discuss with them what's really happening is a huge deal.
After my presentation, I had a few people comment afterward, that the stories that I wove in about clients of mine, that experienced security problems and were unable to solve them themselves. They tried, obviously, but they weren't successful, because they got hacked, they got breached. I use a lot of stories with some of these things, and it is especially important when we're talking about a data breach and your liability. I didn't get to bring that up this week, but it's absolutely massive.

How significant is that liability for a data breach right now? We're talking about an average cost of over $7 million here in the U.S. The worldwide average is 3.8 million, but here in the U.S., it's about twice that. When we're discussing some of the data breaches that are going on and how they are continuing to grow, there's going to be more and more companies who are failing to assess their own systems for security flaws, realistically. That is why you need to have a third party come in. You can't trust your CIO or your in-house security person to do these types of audits, you need a third person to do it. Then once they have identified your weaknesses, you have to plug the holes. Sometimes that will also require the services of a third party do it because they know, exactly what they're doing. Many times, if you're a slightly bigger company, and you have your own I.T. staff. Then your I.T. team is going to do it. But it is something you have to think about.

When you get hacked, what are you going to do? Your data is stolen, and you are out of business or as the expression goes - your goose is cooked. There is an excellent article from Kiplinger that I have up on my website right now about this very thing. As a business owner, CEO you on the hook for any losses sustained by your clients. I spent some time in the presentation talking about insurance. And that is an essential thing to have. For your business. However, more and more of the cyber liability insurance claims are getting cut back or even denied. Why? It is because companies are not doing everything that they ought to do, those things that are listed in the insurance contract. There are two main ways that civil liability for a data breach can occur. One is finding negligence. That is determined by whether your company is aligned with other peers in your industry, and adherence to the best practices if you will. If you're not or if you could have had better protection, then yes, indeed, you may have civil financial liability. Including some of those excessive governmental fines and penalties, we've talked about on the show before. Secondly, even if you did everything that was required to prevent a data breach, it could still happen. The next stage is, did you do enough after the event to reduce the harm to the people affected? Did you notify them right away? Did you take immediate investigation remediation steps? Did you contact law enforcement? What did you do after the fact, was it considered reasonable? These are all the things we need to keep in mind as business people. Having that plan in advance can save you both time and money. I went through some of those statistics as well.

Here are some good points for everyone that this article makes and you should pay attention to. One you should have a breach coach who can help you put together your breach plan and who can run the breach response. It is crucial to get an attorney involved and involved early. Everyone should know what their roles are.

This will be part of our security summer this year. So make sure you're signed up. I will have some documents about what your plan should look like who should be involved whose responsible for each part of that process. It can make a huge, huge difference.

Here are the most liable people. If you're a consumer, and you've had your information breached pay attention to this as well because you have the other side.

As a business if:
You collect payment information for online sales,
You maintain a database of personal information on current past or prospective customers
You have employees, and you store information about employees digitally, including social security numbers, medical information (guess what you have HIPAA liability) I bet you thought those only applied to medical practice, you didn't have to worry about HIPAA, Well, you do.
You have employees,
You rely heavily on technology for daily operations( remember, you're going to be out of business, out of action for days, weeks, or even longer.)
You're located in any jurisdiction has a mandatory Breach Notification laws.

Right now, that is true of everywhere in the world. Well, in the first world countries, if you will, the United States has them. For every state, there are some federal notification laws. Depending on what type of business you have. The same is true in Canada and throughout Europe.

Be careful here, too, when you are selecting your cyber insurance coverage. What you should have, what you can expect from that cyber insurance coverage. We'll talk more about this during our security summer, if you haven't already, make sure you sign up, just go to Craig Peterson dot com. There you'll see a sign-up, come up right at the top of the homepage, and you can sign up right there. I'll let you know when the security summer starts. We're going to be covering all kinds of stuff about firewalls about backups about liabilities, CEO type things all the way through home users. What you can do, what you should do.

This week some are saying that Macs are infected with what they are calling malware. As I said, It's debatable whether it really is malware, because the software is behaving as expected. Mac OS has something now called gatekeeper, it keeps an eye on the programs on your computer, what you download where it came from and is it signed correctly?

It is used by developers to have software that you download that is then referred off-site to add additional files, to get into the database server, etc. In this particular case, that is being talked about over ZDNet, it lets you gain access to a file server, it's called an NFS server. ZDNet is calling this a security flaw I'm not so sure it's a security flaw. Apple has known about it for a month, they haven't patched it, it would be easy enough to, but it would also break a lot of good software out there. Here's the trick. If you're running a Mac, or a P.C. or anything, do not download software from sites that you are not 100% confident can be trusted. It's just that simple.

It's back to the brass tacks, right? Get right back to it. What are the brass tacks? In the security field, one of the first is: Don't click on stuff. Don't download and run software that is on your on a web browser on your computer.

Now we know President Trump said he was going to respond to the Iranian aggression and shooting down our drone. There's dispute by Iran whether or not the drone was in the Iranian airspace. There's some question about that, too, because the United States, for instance, claims a 200-mile jurisdiction. The international agreement says it's a 12-mile zone, and some are 20 miles. Well, when we're talking about the Straits of Hormuz, I think it's 12 miles at the narrowest point. Is it an international space? Technically, yes. Did Iran claim the area it was in as their own? Well, obviously, they did.

President Trump pulled out of a kinetic attack, we were ready to bomb their radar installations and their missile launching facilities. It came out this last weekend that instead we apparently we hacked them.

Now, I found something exciting about this Russian power security breach that happened a couple of weeks ago. I don't know if you heard about that. But apparently, the U.S. broke into and had control of some Russian power stations located in Russia. We flipped the lights on and off possibly a few times to let them know, Hey, guys, we're here, Quit messing around with our elections and quit messing around with some of the other stuff that is ours there. We have that capability. President Obama put some cyber offensive capabilities in place, and President Trump has really upped the game there. Apparently, what he did, and this was the report from last week weekend, is that he authorized our cybersecurity guys to attack Iran.

Now, when Russia attacked Ukraine, of course, that piece of malware spread worldwide and brought down hundreds of thousands of computers, as many were shut down, taken off the internet, and many others were held ransom because Russia did not have control over that malware. We apparently got malware into some of their missile launch systems. We were able to shut them down so that it didn't spread any farther.

It is just like when we got into their centrifuges for making bombs for their purification of uranium, that code did not get any further than the centrifuges and destroyed them. Now, we went after them.

U.S. businesses now should be ready for what's going to be a massive attack from Iran. We remember Iran doesn't have the finesse we do, they don't have all of the talents that we do. And they don't really care if they're hitting a military target or not. When it comes to CYBER WARS, these retaliatory strikes from Iran are very likely to be against pretty much anybody here in the U.S. They've already been attacking us before President Trump launched this attack, apparently against them. They've been bombarding us with software that's designed to wipe the contents of networks and computers, rather than steal their data. This is according to The Washington Post that I think is really kind of interesting. And that was from Chris Krebs, a director of the Homeland Security Department, Cyber Security Division. This means that if the Iranians get ahold of your business systems or your home system, they are going to wipe it clean. So make sure you have excellent backups. Again, if you don't make sure you attend my training here my security summer because we're going to be going over that. This is free people. It's absolutely free for anyone to attend, you can upgrade if you want to, to a paid version which will allow more access, but you're going to get all of the core information absolutely for free. Whether you're paid or not, you're going to get all the information for free. The same data, let me put it that way. Whether you decide to get the golden ticket, or just do it for free, that that's what I'm doing for the radio listeners, anyone can attend, because I want to get this information out there. Be prepared for the Iranian attack, they've already started attacking our businesses.

We've already had North Korea attack. Russia attack. I mentioned this, in fact, in that CEO presentation I gave this last week for the UNH group. It happened right here in N.H. I was looking at one of our customers, who just had a website, and was looking at their firewall because we have some very advanced firewalls sitting in front of even web servers. These firewalls that we were looking at, just for that one web server, we were logging, five attacks. That is just crazy. Five attacks from Russia. It wasn't as I said, it wasn't only five attacks from Russia, it was five attacks per second, on average, over the last I think it was 36 or 48 hours. It was just crazy how this company was getting just hammered. However, you guys already know, if you listen to me for a while about a client that we picked up, that had been having email issues. We looked into it, and we ended up bringing the FBI in, with the client's permission, because we found Chinese back doors into their systems. This is a small manufacturer who kept all of their plans, of course, electronically, all of the manufacturing stuff, etc., etc. Now, they get to compete against China, with their own designs. That just blows my mind, frankly, How could you do that? It's, ignorance, right? It's thinking you're okay.

In fact, going back to this story from Kiplinger, I was referring to earlier here, here's a great little quote from the author here, Dennis Beaver. And he says "My father is a dentist and is up in years, his office has all of his patient's record stored electronically, which he accesses from home from his laptop by leaving the server always on at the office. I mentioned this to a geeky friend who the next day, showed me dental records from my dad's office that he had hacked, he claimed to be doing this as a favor to get my father's attention about cybersecurity, and I believe him. By the way, be careful, never do that without permission, right?

There are ethical hackers in my business here, who are doing penetration testing, but we make sure we've got full consent from the company. So don't, don't just go and do this. Thus, the story goes on. "When I told Dad, and he immediately changed the password but didn't seem too bothered.

Here's another one. "I knew one fortune 500 company CFO who used the same password for over 10 years. Most think that it's a joke, but it was real and proved not so funny after his credentials were found in seven data breaches. His password was used to hack the company's email servers, spoof emails, and steal 10's of thousands of dollars without anyone noticing for months.

I picked up a client here, a local one here in the northeast who had had $80,000 taken out of their operations account. And of course, they realized that pretty quickly, but by the time they noticed it, the money was gone. Be very, very careful.

We're going to cover these things in our security summer, again, just Craig peterson.com. And subscribe right there on the homepage. And we'll let you know when that starts. Tentatively it is going to be mid-July by the looks of things right now. And we're talking about 10 to 15-minute sessions a couple of times a week. And we're going to keep them up for at least a week in case you miss it so that you can watch one of the replays a little bit later on.

Okay, man, we are almost out of time here. 76% of mobile apps have flaws, allowing hackers to steal passwords, money, and texts. These are some high-risk vulnerabilities. They're universal across Android and iOS, Android has a little bit more risk than iOS, we're talking about, but 5% higher risk. This is according to a company called positive technology. They went in and looked at some of these mobile apps, and the biggest problem is in secure data storage. So be careful about that.

Again, Cisco has an answer to that. And with iOS, it's just phenomenal. Nobody has anything like this other than Cisco.

Be very, very careful, there are products out there that could be useful to you. Remember that stored information can be stolen. You can't necessarily trust the app developers, they might be taking your data. Great article, you'll see it on my website. It is from Forbes, and this is about the cybersecurity skills gap and won't be solved in the classroom. So have a look on my website for that one.

Business travelers, something new called visual hacking, and this is from the Czech Republic, again, that's up on my website and in this morning's newsletter.

The U.S. launches a cyber attack aimed at Iranian rocket and missile systems, and we will talk a little bit about that. We've got a couple of great articles online.

I spoke about this with the UNH co mastermind this week third-party contractors. They are our weakest cybersecurity link. And they're just not being held accountable. You know, if you ask people who are the biggest cybersecurity threats out there who have talked about today, I mentioned what Russia, China, I said, North Korea mentioned Iran. And you'd be right. But those countries are the most significant foreign threats. And I, as I mentioned this week at the speech I gave this, is the real problem is internal. And by internal, I don't just mean your employees, I mean, your contractors. And that's one of the things you have to go through. When you're looking at the penetration testing, you're doing the analysis of your business and the data security.

Now from the Customs and Border Protection, I talked this on May 31. They had a breach where 100,000 people were photographed inside vehicles crossing the border and a couple of lanes and included images of the vehicle license plates, maybe some other stuff that was that stolen, it was taken through a third party contractor that was doing work for Customs and Border Patrol.

The most significant breaches of the last 10 years have also been self-inflicted. So let's look at this one. This is a significant number here. This is quoted in The Hill from Flexera. Patches were available for 86% of the vulnerabilities on the day of disclosure. In other words, when these companies came forward and told people about the hacks that had happened, at 86% of those were hacks, that didn't have to happen, because there were patches out already.

Okay, in other breaches, access was gained by compromising a third party like the vendors who we were just talking about and stealing their credentials to log into the corporate network of the eventual target.

Speaking of Target, look at Target, and back in 2013, 40 million credit cards were lost through a third party air conditioning provider that was connected to the corporate network. All the hacker had to do is break into the air conditioning system, and now they had a launch pad.

Think of what happened out in Las Vegas, beautiful big fish tank, they put a smart controller in it that would warn them when their temperature got too cold because the fish are so expensive. It was hooked up to their network, and it was compromised. That fish tank temperature control system was used as a launching pad.

We're seeing that all the time with cameras security cameras, the Office of Personnel Management was breached through Key Point government solutions. This is a third party used by the Office of Personnel Management. That third party gave China, 21 million personnel files, including the background checks conducted on top security clearances.

In2017, Australian defense subcontractor lost 30 gigabytes of highly sensitive data, including information on the drone strike for the Joint Strike Fighter program. Crazy. By the way, the software had not been updated for 12 months.

In 2018, China compromised the network of yet another defense contractor doing work for the Navy. Again, our technology, our advanced military superiority, has literally been stolen from us. Again from The Hill, in an assessment delivered to Navy SECRETARY RICHARD v. Spencer in March and reviewed by the Wall Street Journal, the Navy and its industry partners are under cyber siege by Chinese and Russian hackers.

So think about all of that when you are thinking about your business and even your home computer. Segment your networks, break them up, use good passwords, this is all stuff we're going to review in our security summer. Again, Craig Peterson dot com, you can email me, and I'll let you know when it happens. Just text Me at Craig Peterson dot com, we're going to cover all of this. I want you guys to know what to do, whether you're an individual or a small-medium business. In most companies, face it the computer guy or gal is whoever likes computers the most, or maybe the one who wanted a raise. They're not necessarily computer professionals. It is very, rare to find security professionals. We're working every day trying to keep up to date. Even though I've been doing this for 30 years, and I'm still learning stuff. So be careful when you go out and hire outside firms.

On to the Apollo program. I read a book back in the early 80s. And I marked it all up. And it was about how the lunar landing was a hoax. Hollywood has made some films about it. There are many people, and more and more kids nowadays think the whole thing was a setup. This is a great article written by Ethan Siegel. In the article, he talks a little bit about the moon landing. People are saying that the entire space program and NASA is nothing more than a hoax. Let's get go through a little bit of evidence. Number one, we can still see the evidence of the Apollo program on the moon even today. If you walk on the sand on a beach, the waves are going to level it out, and there won't be any sign that you were ever there. Right. But none of that exists on the moon.

Even in the Sahara Desert on the sand, you've got the shifting winds that shift that sand around. However, that is not the case on the moon.
We actually have pictures from regular people of the moon of the landing site, Apollo 12,14, and 17. Those have all been photographed from Earth. On the Apollo 12 landing sites. There is a ton of stuff you'll see this article from Forbes magazine. You can view all of the pictures. You can see it up on my website at Craig Peterson dot com. I have a link to a number to extensive photographic and video evidence from the Apollo missions themselves. The one I like the best is one that I am personally familiar with. This is a Lunar Laser Ranging, and there are many others. But this is one that we Ham Radio users use. We can bounce off of the moon there's a reflector that was left up there by the Apollo missions we can bounce a laser off, and we use that scientifically to figure out how far the moon is away. But there are also lunar seismometers there is the solar wind composition spectrum lunar surface magnetometer, a lunar dust collector, many more. It was all left up there all where it ran for years. Some of this technology is still running. We were there. Don't let them tell you otherwise.

Take care, everybody. Make sure you sign up for the security summer at Craig Peterson, dot com Take care, everybody. Bye-bye.

--- 

Related articles:

Be Careful What You Browse — Drive-By Malware on the Rise

Are You Ready? Iranian Cyber Counter Attacks

Cyber Breaches — How far does your liability extend?

What We Know About Apollo Missions After 50 years 

Trumping Iranian Aggression 

Is Your App Safe? Maybe Not!

We Will Need 3.5 Million Cybersecurity Professionals by 2021 and They Won’t Come Out Of Our Colleges

Mac Non-Vulnerability Vulnerability

During Travel Is Your Data Safe from Snooping Eyes?

Who Is Your Biggest Cyber Liability? Maybe It Is Not Who You Think

--- 

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553