Curious - How many of us think about what happens when we share information online - is it Stored? if so, safely?, How long ?, whom is it shared with? and finally, what happens if it is exposed?

https://www.wired.com/story/dating-apps-leak-explicit-photos-screenshots/

Ripple20 bug - The curse of IoT continues

 19 different vulnerabilities, four of them critical, are affecting hundreds of millions of internet of things (IoT) 

https://threatpost.com/millions-connected-devices-ripple20-bugs/156599/

FREE - 150+ tools and resource from SANS.

https://www.sans.org/media/free/free-faculty-tools.pdf

We can stop using Facebook and Whatsapp for conveying our messages , our light bulbs can do that for us (One minor problem, they can do it without your consent)

.Good news is that it is not easy (at this point in time)as additional gadgets and multiple steps are involved.

https://threatpost.com/lamphone-hack-lightbulb-vibrations-eavesdrop/156551/

Protect your YouTube accounts - Stolen accounts can be used to spread malware and launch fraud scams against viewers, it is also used to blackmail the account owner.

 One snap poll run by an underground forum revealed that 80% of (dark web) members wanted to see more YouTube credentials put up for sale.

https://www.infosecurity-magazine.com/news/dark-web-demand-youtube-account/

Ransom-warez - No hacking skills needed , just visit auction site and bid for (interesting) stolen data.

With many companies losing our personal information , the only solution for us is to be vigilant and follow simple policies like "Think before you Click/Pick (phone)" and keep an eye on credit/bank reports.

https://www.bleepingcomputer.com/news/security/revil-ransomware-creates-ebay-like-auction-site-for-stolen-data/

Important Ransomware Lessons:

1 - "Prevention is better than cure"
2 - Backups help with recovery but, won't prevent a data breach. 

We now have NetWalker - “ransomware-as-a-service” (RaaS) - Threatens to publish victims’ data on the internet if ransoms are not paid.  Attackers send poisoned emails are sent that appear related to the Coronavirus crisis. It  can also masqueraded as the legitimate password management app Sticky Password.

https://www.tripwire.com/state-of-security/featured/netwalker-ransomware-what-need-know/