Cybersecurity Tips (Rebroadcast)

This week we take a dive into our archive for this gem. In 2021, Angela interviewed IT specialist Mike Ahern from Kennedy Computer Solutions about cybersecurity threats and best practices. They discuss the rise in cyberattacks since COVID-19, password security, email phishing, and physical access risks, offering practical advice for protecting personal information.

Key Takeaways 💡

• Rising Cyber Threats Post-COVID: Cyberattacks have increased exponentially since the start of COVID-19, with phishing attacks tripling from about 1 million per year in 2019. Attackers are now targeting busy individuals, not just the elderly, because they are more likely to click on malicious links or enter credentials without thinking. The increase is partly attributed to more people working from home and spending more time online.
• Enable Two-Factor Authentication: The most important step to protect accounts is enabling two-factor authentication (2FA) on everything you log into. This adds a second verification step, like a text message code or fingerprint, which prevents attackers from accessing your accounts even if they have your username and password. Most phishing attacks are broad and opportunistic, so adding this simple hurdle often makes attackers move on to easier targets.
• Use a Password Manager: Using the same password for multiple accounts is dangerous because attackers will try stolen credentials across various services. A password manager, like Bitwarden, stores all your passwords in an encrypted database, requiring you to remember only one master password. It can generate long, random passwords (e.g., 18 characters) that are practically unbreakable by brute force, and you can access it on your phone with a fingerprint.
• Email Security and Social Engineering: Email is the easiest entry point for cyber threats, as even with strong security, malicious emails can slip through. Social engineering attacks involve emails that appear harmless but contain a phone number; when you call, the attacker uses conversation to extract sensitive information. Always verify the identity of callers before sharing personal details, and be cautious of unsolicited requests for information.
• Physical Access Risks: Physical access to your computer is a serious threat; an expert can extract data within 90 seconds to 3 minutes using a USB drive. To mitigate this, limit physical access to devices, especially during gatherings, and consider setting up a separate guest Wi-Fi network to isolate visitors from your main network. This prevents remote access to your computers from someone on your property.