Recent News

Vacation Travel Scams Increase by 900%: What You Need to Know

Source: Vector choice - URS Preferred Partner

Summer is a peak time for vacation travel, and if you're planning a last-minute getaway, there's a new scam you should be aware of. With rising costs for everything from food to travel, it's tempting to scour the internet for the best deals to plan a memorable trip without overspending. Unfortunately, cybercriminals are taking advantage of this trend, using sophisticated AI-generated phishing emails that can drain more than just your vacation fund. According to Booking.com’s Chief Information Security Officer, Marnie Wilking, there’s been a staggering 500% to 900% increase in travel-related scams over the past 18 months due to this malicious tactic.

How Are Scammers Pulling This Off?

Phishing emails have been around for as long as the internet, but AI tools like ChatGPT are making them more convincing than ever. In the past, phishing attempts were often easy to spot due to obvious spelling and grammatical errors. Now, with AI, scammers can produce polished, professional-looking emails that are far more likely to deceive even the cautious reader.

Here's their method: Scammers exploit popular platforms like Booking.com or Airbnb, which allow users to list properties as short-term rentals. They send out emails offering amazing deals or urgent discounts on fake listings. Once someone pays, the scammers either vanish with the money, leaving the victim without a place to stay, or they continue to extract additional "fees" through follow-up emails before disappearing.

It's important to note that vacation-related phishing scams aren't new, but the rise of AI has made them more convincing, leading to more victims.

How Can You Protect Yourself?

Here are some crucial steps to avoid falling victim to these scams:

  • Enable Two-Factor Authentication: Whenever possible, use two-factor or multi-factor authentication. This adds an extra layer of security by requiring a confirmation code sent to your phone each time you log in, helping to prevent phishing attacks and credential theft.

  • Avoid Clicking on Email Links: If you receive an email offering a deal that seems too good to be true, it probably is. Instead of clicking on the link, visit the website directly and search for the offer. If you can’t find it, you might have just dodged a scam.

  • Verify Before Booking: Before booking any property online, ensure that contact information and reviews are easily accessible. Look for verified reviews from other users who have stayed at the property; this reduces the likelihood of falling for a scam.

  • Use Credit Cards for Online Purchases: Credit cards offer an extra layer of protection compared to debit cards, which are linked directly to your bank account. If your debit card is compromised, recovering stolen funds can be difficult, if not impossible. Credit cards provide greater security against fraudulent charges.

Stay Vigilant

The key to protecting yourself is vigilance. Scrutinize every email offer you receive and adhere to cybersecurity best practices. While standard security software can catch some scam emails, it won't catch them all, so it's crucial to remain cautious and alert to potential red flags.

A personal scam might ruin your vacation, but a breach of your business could have far-reaching consequences for you and your family. Stay informed and protect yourself from these evolving threats.

To learn more Contact us

Beware of Sneaky Software: Protecting Your Business from Browser Threats

Beware of Sneaky Software: Protecting Your Business from Browser Threats

Running a business involves managing countless tasks, and cybersecurity shouldn't add to the burden. Yet, in our increasingly digital landscape, even minor threats can have major consequences. This article highlights two common browser-based attacks that target businesses like yours and provides straightforward steps to protect your data.

LinkedIn Impersonation in Phishing Attacks: A Growing Threat

LinkedIn Impersonation in Phishing Attacks: A Growing Threat

A recent report from Check Point Research revealed a startling statistic: LinkedIn, the Microsoft-owned business platform, is impersonated in nearly half of all phishing attacks globally.

Common Phishing Tactics on LinkedIn

  1. Phishing Emails: Scammers often target job seekers with emails that mimic LinkedIn notifications, such as "You have 1 new invitation" or "Your profile has been viewed by 63 people." While these messages can appear authentic, it's crucial to verify the sender's email address to ensure it's genuinely from LinkedIn. These fraudulent emails often contain links to fake LinkedIn pages designed to steal your personal information.

  2. Fake Profiles and Job Offers: Cybercriminals create fake LinkedIn profiles to message users about job opportunities. Once engaged, they may ask for a small payment to process the application or direct you to a phishing link disguised as a form to fill out.

Steps to Take During the CrowdStrike Outage

As organizations work to remediate affected systems, it's crucial to stay alert to phishing campaigns and spoofed domains set up by threat actors attempting to exploit the outage.

CrowdStrike's Remediation Measures

CrowdStrike has provided a solution utilizing the Falcon sensor’s built-in quarantine functionality to remove the problematic channel file causing Windows systems to crash. According to CrowdStrike, when a Windows system with Falcon installed contacts the CrowdStrike Cloud, a request is issued to quarantine the faulty file, visible in the Falcon UI. If the file does not exist, no quarantine occurs, and systems operate normally. The solution may require two or three reboots to take effect due to a timing issue between the file's quarantine and activation. For best results, CrowdStrike recommends using a wired network connection to minimize latency.

FTC to Investigate Data Privacy Practices of U.S. Car Dealerships

FTC to Investigate Data Privacy Practices of U.S. Car Dealerships

The Federal Trade Commission (FTC) has announced plans to investigate the data privacy practices of car dealerships across the United States. This initiative represents a significant expansion of the FTC's oversight into an industry that has traditionally operated with less regulatory scrutiny compared to others.

CrowdStrike Update Causes Global IT Outage and Security Concerns

On July 19, 2024, at approximately 1:00 a.m. ET, a widespread IT outage began due to a defect in a single CrowdStrike content update. This outage affected numerous Windows hosts globally, including critical U.S. State, Local, Tribal, and Territorial (SLTT) government systems. CrowdStrike has since isolated the issue and deployed a fix.

Recap of the Microsoft Outage on July 19th, 2024: Essential Insights for Businesses

Recap of the Microsoft Outage on July 19th, 2024: Essential Insights for Businesses

Major Software Outage on July 19th, 2024

On July 19th, 2024, a significant software glitch caused major disruptions for businesses worldwide. This outage affected Microsoft 365 services, including essential applications like Outlook, Teams, and OneDrive, leading to substantial challenges across various industries. As a Managed Service Provider (MSP), we understand the importance of staying informed and prepared for such events. Here’s a detailed look at what happened, who was impacted, and the current status.

US Department of Energy Unveils Energy Supply Chain Security Principles

 US Department of Energy Unveils Energy Supply Chain Security Principles

The US Department of Energy (DOE) has released a comprehensive set of Supply Chain Cybersecurity Principles. These guidelines aim to ensure robust cybersecurity measures across the global supply chains involved in constructing energy automation and industrial control systems (ICS).

Protect Your Dental Practice and Patients from Cybercriminal Attacks

Protect Your Dental Practice and Patients from Cybercriminal Attacks

The American Dental Association (ADA) is calling on all dental practices, especially oral and maxillofacial surgeons, to remain vigilant against cyberattacks. On May 6, 2024, the FBI informed the ADA and the American Association of Oral and Maxillofacial Surgeons (AAOMS) of a credible cybersecurity threat targeting these practices.

Unraveling the Causes Behind 60% of Data Backup Failures During Critical Business Needs

Source: Vector Choice - URS Preferred Partner

The Need for Robust Data Backup: Insights and Best Practices

In today's digital landscape, businesses face various threats to their data integrity, ranging from natural disasters to cyber-attacks and human error. As highlighted by Avast's recent findings on disaster recovery, small and medium-sized businesses (SMBs) are particularly vulnerable, with 60% of data backups failing to fully succeed. Even more concerning is the fact that half of the attempts to recover data from these backups are unsuccessful, resulting in an average downtime of 79 minutes, costing roughly $84,650 for every hour of disruption.

Understanding the Common Causes of Backup Failures:

1. Reliability of Backup Products: The adage "you get what you pay for" holds true in the realm of backups. Free or inexpensive solutions may lack the robust features needed for secure and reliable data backup.

2. Suboptimal Backup Timing: Poorly scheduled backups, especially during peak traffic periods or when data is being heavily modified, pose a risk of incomplete data capture.

3. Compatibility Issues: As businesses evolve, so do their systems and software. However, new systems may not always be fully compatible with existing backup solutions, leading to data saving and restoration challenges.

4. Human Error: Incorrectly configured backup parameters, accidental file deletions, and oversight of backup schedules and alerts can contribute to backup failures.

The Importance of Effective Data Backup and Restoration:

In light of these challenges, implementing best practices for data backup and restoration is crucial for ensuring business continuity and mitigating risks:

1. Choose a Reliable Backup Solution: Avoid blindly opting for well-known backup software brands. Instead, conduct thorough research to identify a solution that aligns with your business needs. Consider factors such as data recovery speed, downtime implications, and compliance requirements, especially in regulated industries like healthcare.

2. Adhere to the 3-2-1 Backup Rule: Embrace the industry-standard 3-2-1 backup rule, which recommends maintaining three copies of data in two different formats, with one copy stored off-site. This approach minimizes the risk of data loss in case of a catastrophic event.

3. Monitor Backup Status Daily: Ensure that someone within your organization, whether yourself or a designated IT team member, checks the backup status daily. Promptly address any incomplete backups to avoid potential data loss.

4. Conduct Regular Restore Tests: Regularly conduct simulated data restoration exercises to verify the integrity and effectiveness of your backup system. This proactive approach ensures that your backups are functional and can be relied upon in times of crisis.

In conclusion, data backups are not a "set and forget" task but a critical aspect of business continuity planning. By implementing robust backup solutions and adhering to best practices, businesses can safeguard their data against unforeseen disruptions and minimize the impact of potential disasters.

To learn more Contact us

Decoding the NYDFS Cybersecurity Regulation: Essential Compliance Insights

Decoding the NYDFS Cybersecurity Regulation: Essential Compliance Insights

The NYDFS Cybersecurity Regulation (23 NYCRR 500) represents a comprehensive framework established by the New York Department of Financial Services (NYDFS) to impose cybersecurity standards on all covered financial entities. Introduced on February 16th, 2017, following extensive feedback from industry stakeholders and the public, these regulations encompass 23 sections delineating the obligations for developing and executing an effective cybersecurity program. Covered institutions are mandated to assess their cybersecurity risks and devise proactive strategies to mitigate them. The regulation follows a phased implementation approach, allowing organizations ample time to fortify their policies and controls.

Navigating Ransomware 2.0: Safeguarding Your Business Amidst a Shifting Threat Environment

Navigating Ransomware 2.0: Safeguarding Your Business Amidst a Shifting Threat Environment

Ransomware has long been a significant threat to businesses, causing disruptions, financial losses, and reputational damage. However, cybercriminals are constantly evolving their tactics, and the recent emergence of Ransomware 2.0 presents businesses with new challenges and necessitates a reevaluation of their security posture.

A Tale of Overcoming Cyber Threats with Auto Pentesting and CTEM

Chief Information Security Officer (CISO) Emily Reed is responsible for safeguarding the digital assets of a thriving healthcare organization renowned for its advanced digital technology solutions.

On a busy morning, Emily’s routine was disrupted by an urgent message from her security team. They were made aware of other healthcare organizations that had recently succumbed to a critical vulnerability that attacked their MOVEit Transfer systems. A remote command execution flaw, this vulnerability can allow escalated privileges and potential unauthorized access to MOVEit server environments. Emily quickly gathered her team to examine the evolving situation.

Fortunately, Emily was aware of this vulnerability. She had preemptively purchased Ridge Security’s RidgeBot automated penetration testing product, recently upgraded with new plugins that automatically detect and exploit the MOVEit vulnerability.

Biometric Privacy Settlements Spark Insurance Coverage Battles

Biometric Privacy Settlements Spark Insurance Coverage Battles

Companies that have settled lawsuits for millions of dollars under the Illinois Biometric Privacy Act are now having to battle their insurance providers to get their costs reimbursed.

Facebook agreed to pay $650 million in 2021 to settle a class action lawsuit alleging that the app violated the state’s biometric privacy law by using facial recognition technology until November 2021. In similar cases, Google agreed to pay $100 million, TikTok $92 million and Snapchat $35 million.

Global Ransomware Attacks Reach Record High for 2023

Global Ransomware Attacks Reach Record High for 2023

Corvus Insurance, the leading cyber underwriter powered by a proprietary AI-driven cyber risk platform, today released its Q4 2023 Ransomware Report. Featuring data collected from ransomware leak sites, the report shows that while Q4 attacks were down slightly from Q3 2023, ransomware activity for the year surpassed 2022 totals by 68 percent.

2024: What PCI 4.0 Holds for Businesses

2024: What PCI 4.0 Holds for Businesses

The payment card landscape is a battlefield, and in 2024, the armor gets an upgrade. Brace yourselves, business owners, because PCI 4.0, the latest iteration of data security standards, is charging towards mandatory compliance. But unlike a surprise audit, this isn't something to fear - it's an opportunity to shield your business from data breaches and build trust with your customers.

2024: New Data Breach Reporting Requirements Take Effect

2024: New Data Breach Reporting Requirements Take Effect

2024 is looming, and for businesses handling customer data, it brings a significant regulatory shift: the amended FTC Safeguards Rule takes full effect on May 13, 2024. This isn't just a minor housekeeping update - it's a game-changer for data security and privacy practices. So, whether you're a small startup or a sprawling enterprise, it's time to buckle up and understand what's coming down the cybersecurity pike.