Chris Brook

About

"Distrust and caution are the parents of security" - Benjamin Franklin

4) “S” stands for Safe(r)

Browsing a Web site
for offers is one thing. Actually buying merchandise is another matter entirely. Online transactions should be carried out securely, using encryption to scramble
the sensitive financial data you’re sending to the merchant’s Web site and that they’re sending to you. Before
entering your credit card information or clicking on “Send,” check to
make sure the e-commerce site you’re using has employed encryption, with a URL
that begins with “https://” indicating that SSL (Secure Sockets
Layer) encryption is being used.

2) Set Web browsers to “stun”

Cyber criminals know that Web browsers are like mothers: everybody’s got one. They also know that if you’re shopping online, you’re using your Web browser to do it. That’s why
Web based attacks are one of the most popular kind avenue of compromise and
online. The good news is that most modern Web browsers already come equipped
with security features that can block most malicious content. The bad news? Lots of folks out there are running the browser
equivalent of a 1976 Chevy Nova.

1) Beware of what you search for

by Chris Brook

Cyber criminals
realized long ago that people trust search engines like Google, Yahoo and Bing even after those sites and their results lists have been shown to be easy targets for scams. Attacks
that use search engine optimized (SEO) Web sites to spread malware are a growing
problem.

Set your Web browsers to “stun”…it’s the online holiday shopping season. Here are ten tips for surviving it without getting yourself p4wn3d

by Chris Brook

Cyber Monday is billed as the biggest online shopping day of
the year, with deep discounts from online merchants. But the truth is
that your online shopping isn’t anywhere near done now that its passed, any more than your in store shopping is done now that the 3:00 AM Black Friday door buster stampede has rumbled by. Of course,
cyber criminals and scam artists know this.

Google Flaw Allowed Easy ‘E-mail Harvesting’

by Chris Brook

An issue with Google Apps over the weekend sent the company scrambling
to fix a hole in its Script API. The problem allowed a specific domain to
harvest the e-mail addresses of anyone who visited the site while logged into
their Google account, according to a report on InfoSecurity.

Cloud Security Alliance Releases New Toolkit

by Chris Brook

In an effort to better weigh the security of cloud-based infrastructures, the Cloud Security Alliance has released a new toolkit, the Governance, Risk Management and Compliance (GRC) Stack. Available as a free download on the organization’s website, the collection consists of three tools: CloudAudit, the Cloud Controls Matrix and the Consensus Assessments Initiative Questionnaire.

Cybersecurity for your growing business
Cybersecurity for your growing business

Topics

Show all

Authors

Threatpost

InfoSec Insider

Infosec Insider Post

Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.

Sponsored

Sponsored Content

Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.