Cybersecurity Assessments
Passwords are very important to protect our data and the various technologies we use on a daily basis to communicate. For this discussion I want you to go online and find a recent article that talks about an incident/hack that happened to an individual or a company that involved the use of passwords. Many people or organizations are not careful enough when it comes to protecting their systems and data. It is the responsability of the pen tester to determine if changes need to be made to the company's password security policies. Write a couple of paragraphs to describe the incident. Most important, discuss how this incident could have been prevented.
In 2016, the LinkedIn password breach occurred where information of millions of LinkedIn users were leaked. The leak contained more than 160 million user passwords. One of the affected person was Mark Zuckerberg. LinkedIn immediately asked all the affected users to change the password of their account.
Mark Zuckerberg also changed his LinkedIn password. But he had reused the same password in Twitter and Pinterest as well and he did not change his passwords there. This helped the hackers to get access to his Twitter and Pinterest accounts. The password used by him in the three sites were 'dadada'. The hackers twitted the following message from his account “Hey @finkd we got access to your Twitter & Instagram & Pinterest, we are just testing your security, please dm (direct message) us,”. Twitter had to temporarily deactivate his Twitter account and reactivated it after deleting the suspect tweets.
The intensity of this breach could easily be reduced by following a few simple steps:
(i) We should not reused the same password for multiple sites.
(ii) We should use a password which is at least 8 letters long.
(iii) We should use of both upper-case and lower-case letters
(iv) It should also contain one or more digits and special characters.
(v)Common words should not be used as password.
Cybersecurity Assessments Passwords are very important to protect our data and the various technologies we use...
The discussion: 150 -200 words. Auditing We know that computer security audits are important in business. However, let’s think about the types of audits that need to be performed and the frequency of these audits. Create a timeline that occurs during the fiscal year of audits that should occur and “who” should conduct the audits? Are they internal individuals, system administrators, internal accountants, external accountants, or others? Let me start you: (my timeline is wrong but you should use some...
Risk management in Information Security today Everyday information security professionals are bombarded with marketing messages around risk and threat management, fostering an environment in which objectives seem clear: manage risk, manage threat, stop attacks, identify attackers. These objectives aren't wrong, but they are fundamentally misleading.In this session we'll examine the state of the information security industry in order to understand how the current climate fails to address the true needs of the business. We'll use those lessons as a foundation...