Think you’re safe, hooking your devices up to public Wi-Fi and public charging stations? Think again. In today’s episode we talk about the sneaky cyber back doors you open every time you connect a device in a public space.

Show Notes for Ssn 1 Ep 9

Spies at the Coffee Shop:Public Wi-Fi, Charging Stations, and Other Cyber Traps

SHOW NOTES

1.Public Wi-Fi

• All public Wi-Fi should be considered unsafe, and untrusted.
• Solution: When at a place like Starbucks, access via your own hot spot or VPN if you have one on your company laptop.
• DO NOT access at Starbucks or any public Wi-Fi unless you have one of these options.

2.Charging Stations

What Is Juice Jacking?

When using a public charging station, cybercriminals can potentially access all the information on your device or initiate a full backup of your phone. Cybercriminals can also inject malware into your phone.

Solution: Don’t use public charging stations.

• Keep your battery full. 
• Carry an external battery pack.

If you absolutely must use a third-party power source, use a USB data blocker or power-only USB cables. These cables are missing the two wires necessary for data transmission, ensuring that they can only be used for charging.

Blog Post: https://eastatlanticsecurity.com/2021/01/05/why-you-shouldnt-use-public-charging-kiosks/

3.Flash Drives and Data Sharing

Flashdrives can easily be infected with malware. If your flashdrive becomes infected—this can happen at any shared computer—and you insert it back into your computer, it only takes a moment to transfer that malware onto your device.

Solution: Use a commercial-grade cloud-based system for transferring data.

Your hosts: Rex Nance and Penny O'Halloran of East Atlantic Security, LLC @ https://EastAtlanticSecurity.com/

Voiceover Artist: Paul Kadach at www.voices.com

Remote workstations are here to stay, but lax home network security is putting corporate networks at risk. Here are some steps to help secure your network and close the doors to a cyber breach.

You can get your copy of "8 Security Threats for Remote Workstations and How You Can Mitigate Your Risk," at:

https://eastatlanticsecurity.com/hackers-go-phish/

Why Remote Workstations Put You at Risk of a CyberBreach

Show Notes for Ssn 1 Ep 8

• Remote workstations pose specific risks and require additional security measures, staff training, and work-from-home protocols to keep the corporate network secure.
• Many companies have not yet set aside time and resources to set up secure workstations, company devices, and protocols for remote employees.
• Employees working remotely are more vulnerable to falling prey to phishing emails and other scams, potentially giving cybercriminals direct access to the corporate network.

What do employers need to do to secure their employees’ remote workstations and protect company data?

1. Company Device

• When possible, a company-issued laptop is the safest workstation:
• A foundational caveat for using a company laptop: DO NOT USE FOR ANY PERSONAL USE.
• There are times when a personal device is being used at work, and those need special protocols.

1. Public Wi-Fi

• All public Wi-Fi should be considered unsafe, and untrusted.
• We'll be covering this in-depth in Ssn 1 Ep 9: Spies at the Coffee Shop

1. Accessing Company Resources and VPNs

• Users will probably need to access resources that are in their corporate offices.
• Employers have the ability to implement a sophisticated VPN from an untrusted workstation back to the corporate network, allowing that user access to specific resources from restricted channels.

1. Passwords and Two-Factor Authentication

• Turn off autocomplete, and any saved passwords.
• Better solution: Use a password management app, like LastPass.
• Follow current industry recommendations for secure, unique passwords. (LastPass will generate secure passwords for you!)
• Enabling multi-factor authentication is an easy way to tighten security and should be used for all accounts.
• Check out Ep 5, Password Secrets and the Book of Codes for a deeper discussion of this topic.

1. Firewalls

• Use firewalls for personal networks. Always have your provider firewall enabled, like Windows. Depending on how many devices you have on your home network, you should go even deeper than an anti-virus like Webroot.
• Don’t rely on your ISP access point or anything it provides. Go out and buy your own security device or firewall and plug it into theirs--and then keep it updated. Some recommendations:

• • Sonicwall Tz105 UTM
  • Cisco RV110W
  • Ubiquity UniFi USG

• Get a hardware firewall hooked up that allows you to create virtual networks. Put your primary computer on one, and IOT devices on a separate network with no access to the computer in case an IOT device gets compromised.
• Listen to: Ep 4 IoT Devices and Network Security for more on this topic.

1. Phishing emails

• Phishing is the #1 way of getting inside your network.
• Check out our back episodes on phishing, #2 and #3, and Ep 7: The Perimeter is Dead, for more information.
• Don’t open PDFs, Word docs, images, or any attachments that come in an email without first verifying with the sender.

1. Beware of Bogus Websites, Apps

• Phishing emails and bogus websites centered around information about current events can crop up by the thousands (e.g. apps with global tracking maps during the pandemic containing spyware and malware.).
• Do not seek information from untrusted sources. Doing so can compromise your device and the company network.

1. Personal Devices

• An employee’s personal device can be managed through a Bring Your Own Device policy
• Use a VPN when connecting remotely, or use Microsoft’s cloud offering.
• Best Practice: Use Microsoft Windows Virtual Desktop in the cloud. 
• Using your personal phone or tablet to check work emails, files, etc. is a big NO when working from home.
• In the event an employee’s device is infected with malware, spyware, etc., Mobile Device Management sets up a "business space" and will keep that area separated and protected from the rest of the items on the device.

You hosts: Rex Nance and Penny O'Halloran of East Atlantic Security, LLC @ https://EastAtlanticSecurity.com/

Voiceover Artist: Paul Kadach at www.voices.com

In today's episode we dive into the current cyber landscape and discuss why you need more than just a great firewall to protect your network.

Your hosts: Rex Nance and Penny O'Halloran of East Atlantic Security, LLC @ https://EastAtlanticSecurity.com/

Voiceover Artist: Paul Kadach at www.voices.com

Rex and Penny talk about the radical changes to the work environment and the need for flexible IT systems that can accommodate a mobile workforce.

Your hosts: Rex Nance and Penny O'Halloran of East Atlantic Security, LLC @ https://EastAtlanticSecurity.com/cyber-savvy-cafe

Voiceover Artist: Paul Kadach at www.voices.com

How to make passwords that take a hundred years to crack and storing passwords securely with minimal hassle. This week's episode dives into the secrets of password security.

Your hosts: Rex Nance and Penny O'Halloran of East Atlantic Security, LLC @ https://EastAtlanticSecurity.com/cyber-savvy-cafe

Voiceover Artist: Paul Kadach at www.voices.com

In today's episode, we talk about the ever-growing popularity of IoT devices and how to ensure you or your employees' use of IoT is not putting your network at risk.

Your hosts: Rex Nance and Penny O'Halloran of East Atlantic Security, LLC @ https://EastAtlanticSecurity.com/cyber-savvy-cafe

Voiceover Artist: Paul Kadach at www.voices.com

Continuing on with the discussion of how to guard against phishing attacks.

Your hosts: Rex Nance and Penny O'Halloran of East Atlantic Security, LLC @ https://EastAtlanticSecurity.com/cyber-savvy-cafe

Voiceover Artist: Paul Kadach at www.voices.com

Rex and Penny discuss the growing rates of phishing attacks and how to avoid being a victim.

Your hosts: Rex Nance and Penny O'Halloran of East Atlantic Security, LLC @ https://EastAtlanticSecurity.com/cyber-savvy-cafe

Voiceover Artist: Paul Kadach at www.voices.com

Rex and Penny discuss the top 3 methods hackers use to breach your network security.

Your hosts: Rex Nance and Penny O'Halloran of East Atlantic Security, LLC @ https://EastAtlanticSecurity.com/cyber-savvy-cafe

Voiceover Artist: Paul Kadach at www.voices.com