Author: Robert Timlick

  • Chameleon Android Banking Trojan Targets Users Through Fake CRM App

    Chameleon Android Banking Trojan Targets Users Through Fake CRM App

    Cybersecurity researchers have lifted the lid on a new technique adopted by threat actors behind the Chameleon Android banking trojan targeting users in Canada by masquerading as a Customer Relationship Management (CRM) app.
    “Chameleon was seen masquerading as a CRM app, targeting a Canadian restaurant chain operating internationally,” Dutch security outfit ThreatFabric said in a technical
  • INTERPOL Recovers $41 Million in Largest Ever BEC Scam in Singapore

    INTERPOL Recovers $41 Million in Largest Ever BEC Scam in Singapore

    INTERPOL said it devised a “global stop-payment mechanism” that helped facilitate the largest-ever recovery of funds defrauded in a business email compromise (BEC) scam. 
    The development comes after an unnamed commodity firm based in Singapore fell victim to a BEC scam in mid-July 2024. It refers to a type of cybercrime where a malicious actor poses as a trusted figure and uses email to
  • Suspicious Minds: Insider Threats in The SaaS World

    Suspicious Minds: Insider Threats in The SaaS World

    Everyone loves the double-agent plot twist in a spy movie, but it’s a different story when it comes to securing company data. Whether intentional or unintentional, insider threats are a legitimate concern. According to CSA research, 26% of companies who reported a SaaS security incident were struck by an insider. 
    The challenge for many is detecting those threats before they lead to full
  • North Korean Hackers Moonstone Sleet Push Malicious JS Packages to npm Registry

    North Korean Hackers Moonstone Sleet Push Malicious JS Packages to npm Registry

    The North Korea-linked threat actor known as Moonstone Sleet has continued to push malicious npm packages to the JavaScript package registry with the aim of infecting Windows systems, underscoring the persistent nature of their campaigns.
    The packages in question, harthat-api and harthat-hash, were published on July 7, 2024, according to Datadog Security Labs. Both the libraries did not attract
  • New Android Spyware LianSpy Evades Detection Using Yandex Cloud

    New Android Spyware LianSpy Evades Detection Using Yandex Cloud

    Users in Russia have been the target of a previously undocumented Android post-compromise spyware called LianSpy since at least 2021.
    Cybersecurity vendor Kaspersky, which discovered the malware in March 2024, noted its use of Yandex Cloud, a Russian cloud service, for command-and-control (C2) communications as a way to avoid having a dedicated infrastructure and evade detection.
    “This threat is
  • Google Patches New Android Kernel Vulnerability Exploited in the Wild

    Google Patches New Android Kernel Vulnerability Exploited in the Wild

    Google has addressed a high-severity security flaw impacting the Android kernel that it said has been actively exploited in the wild.
    The vulnerability, tracked as CVE-2024-36971, has been described as a case of remote code execution impacting the kernel.
    “There are indications that CVE-2024-36971 may be under limited, targeted exploitation,” the tech giant noted in its monthly Android security
  • Researchers Uncover Flaws in Windows Smart App Control and SmartScreen

    Researchers Uncover Flaws in Windows Smart App Control and SmartScreen

    Cybersecurity researchers have uncovered design weaknesses in Microsoft’s Windows Smart App Control and SmartScreen that could enable threat actors to gain initial access to target environments without raising any warnings.
    Smart App Control (SAC) is a cloud-powered security feature introduced by Microsoft in Windows 11 to block malicious, untrusted, and potentially unwanted apps from being run
  • Kazakh Organizations Targeted by ‘Bloody Wolf’ Cyber Attacks

    Kazakh Organizations Targeted by ‘Bloody Wolf’ Cyber Attacks

    Organizations in Kazakhstan are the target of a threat activity cluster dubbed Bloody Wolf that delivers a commodity malware called STRRAT (aka Strigoi Master).
    “The program selling for as little as $80 on underground resources allows the adversaries to take control of corporate computers and hijack restricted data,” cybersecurity vendor BI.ZONE said in a new analysis.
    The cyber attacks employ
  • 7 Important Considerations Before You Buy Smart Home Tech  

    7 Important Considerations Before You Buy Smart Home Tech  

    Smart homes seem like something straight out of a sci-fi movie. They have lights that respond to your voice commands and thermostats that auto-adjust. Not to mention robot vacuums that clean your floors while you relax.

    It’s all very tempting. But before you rush out and buy the newest gadget, there are some crucial considerations. Here are 7 essential things to ask yourself before diving headfirst into new smart home tech.

    1. Does it Solve a Real Problem?

    Not all smart home devices are created equal. Some offer genuine solutions to everyday problems. Others might be more novelty than necessity. Think critically about your daily routine. Identify tasks that you could streamline with smart technology. 

    For instance, do you constantly forget to turn off the lights when you leave a room? Then, smart bulbs with motion sensors could be a game-changer. But a smart toaster might not be the most practical addition to your kitchen. Especially if your mornings are already a hectic rush.

    2. Is It Compatible with Other Devices?

    The world of smart home devices can be a bit like a high school cafeteria. Not all device brands play well together. Many smart devices rely on a central hub or app to function. So, ensure the gadget you choose is compatible with the ones you already have or plan to buy. 

    Mixing and matching brands can lead to a frustrating user experience. Devices may refuse to communicate or need several apps to manage. Researching compatibility beforehand will save you a lot of headaches. 

    PS: Help is on the way in the future. A new Matter standard aims to address cross-brand compatibility.

    3. Is Your Wi-Fi Up to the Challenge?

    Smart homes are like data-hungry beasts. They rely heavily on a strong and stable Wi-Fi connection to function properly. Is your internet slow, unreliable, or have limited bandwidth? If so, your smart home dreams might quickly turn into a frustrating nightmare. 

    Just a few of the potential problems you might face with a weak Wi-Fi connection are:

    • Smart lights flickering on and off
    • Thermostats refusing to adjust
    • Voice assistants lagging behind your commands

    Before investing in smart devices, consider upgrading your Wi-Fi router or internet plan. This helps ensure it can handle the increased data traffic.

    4. Privacy Concerns Deserve Attention

    Smart home devices collect data on your habits and routines. From the times you turn on the lights to the temperature you prefer in your home. These gadgets are constantly gathering information. Some companies may use this data to personalize your experience. But others might sell it to third-party vendors (usually advertisers). 

    Before bringing a smart device into your home, take time to read the device’s privacy policy. What data does it collect? How is it used? Do you have any control over how your data is shared? Does the privacy policy raise red flags? Then, it might be best to look for a different device with stronger data protection practices.

    5. Security Matters: Protect Your Smart Home

    Unfortunately, the convenience of smart homes comes with an increased security risk. These devices connect to your Wi-Fi network. This means they can become vulnerable to hacking attempts. Hackers could potentially gain access to your home’s controls. As well as adjust settings or even steal sensitive data. 

    To mitigate these risks, choose devices with strong security features such as encryption and two-factor authentication. Additionally, keep your devices updated with the latest software patches. This is crucial to address any known security vulnerabilities. Consider creating a separate “guest” Wi-Fi network for your smart home devices. This isolates them from your personal computers and other data-rich devices. The isolation gives you an extra layer of security.

    6. Future-Proofing Your Smart Home

    Technology evolves at a rapid pace. What’s cutting-edge today might be obsolete tomorrow. Before investing in a smart home device, consider the manufacturer’s reputation. You should look for details on software updates and long-term device support. Will the company continue to provide security patches and updates in the years to come?

    If a device lacks a history of consistent software updates, it might be wise to look elsewhere. This helps to ensure your smart home doesn’t become outdated quickly.

    7. Start Small and Scale Up Gradually

    Don’t get carried away and try to automate your entire home overnight. Smart home technology can be a significant investment. It’s wise to take things slow. Start with a few key devices that address specific needs or pain points in your daily routine. 

    For example, consider starting with smart lights or a smart thermostat. These help you experience the benefits of smart home technology but before diving into a full-blown home automation setup. This measured approach allows you to assess the usefulness of smart home devices. As well as identify any issues before committing to a larger investment.

    Carefully consider these 7 essential questions before buying smart home devices. They’ll help ensure that your foray into the world of home automation is a success.

    Need an Expert to Help with Smart Home Setup & Security?

    Those “DIY” smart home setups are not always as easy (or secure) as they may sound. If you need help from a friendly technology expert, give us a call. We can help you craft a smart home that’s connected, secure, and truly helpful.


    Contact us today to schedule a chat.

    —

    Featured Image Credit

    This Article has been Republished with Permission from The Technology Press.

  • The Loper Bright Decision: How it Impacts Cybersecurity Law

    The Loper Bright Decision: How it Impacts Cybersecurity Law

    The Loper Bright decision has yielded impactful results: the Supreme Court has overturned forty years of administrative law, leading to potential litigation over the interpretation of ambiguous laws previously decided by federal agencies. This article explores key questions for cybersecurity professionals and leaders as we enter a more contentious period of cybersecurity law.
    Background
    What is