Does your business need Cybersecurity? 1. Do you use a computer? 2. Do you use emails and the internet? 3. Do you have a website? 4. Do you have money and/or store sensitive information? 5. Do you have an internal network? If yes to any of these, then you do need Cybersecurity.

Fraud is often the result of poor Cybersecurity controls and practices, like system vulnerabilities or a lack of least-right privileges. Fraud risk is reduced when strong Cybersecurity practices and controls are implemented. Fraud needs Cybersecurity.

@allenharper I remember going through these for PCI DSS, the stress is real!

What is DKIM in email security? DomainKeys Identified Mail uses public-private key encryption to digitally sign emails and ensure they come from the correct mail server. It's a strong authentication mechanism that ensures bad actors don't hijack your email domain.

Before you sign a business deal or process an invoice, do your due diligence. Partnering with a company or contracting them for work before doing your background checks can get you scammed. Due diligence is becoming more necessary in a world filled with scammers.

@allenharper Getting out the comfort zone!

What is Sender Policy Framework? SPF is used for email authentication, it specifies which email servers are allowed to send an email for a domain. It's a strong policy that protects against spoofing and phishing attacks. It's a simple TXT record that makes a big difference.

If you use WhatsApp, turn on two-factor authentication. Go to Settings>Account>Two-step verification and turn it on. Use a strong 6-digit PIN that you can remember and isn't easy to guess. This protects your WhatsApp from being hijacked even if you've been SIM swapped.

@allenharper @DarkWebInformer I am going to test it out, thank you!

When I was a junior and made security recommendations to upper management, they turned me down and I just accepted it. But that's no way to drive effective change. I now justify myself with facts and evidence, and they take me a lot more seriously. Learn to justify yourself.

Tried installing OpenVAS on ParrotOS and Ubuntu, but it never worked. It's not maintained on the latest versions so there are always errors. It works well on Kali 2024.4 though and it's straightforward to set up. Try it this weekend, it's a cool project.

Can your WhatsApp get hacked? Under certain circumstances, yes. If bad actors SIM swap your number and hack into your Google account, they can access your WhatsApp and chat history. Report suspicious SIM swapping and use strong passwords with MFA to keep your WhatsApp safe.

If your phone's calculator app has camera, network, and file permissions, what does this mean?

@allenharper Most analysts are asked to do all of this work, but they're not all the same. It's good to remember that.

Came across the term Virtual Machine Introspection today. This allows you to examine the state of the guest OS from the host OS. It's useful in forensic investigations and malware analysis, allowing you to analyze memory, processes, API calls and network activity.

Don't always trust sponsored search engine results. Bad actors hide malicious URLs behind these ads, it's called malvertising. Inspect URLs before trusting them, and ensure the spelling is correct. Due diligence saves you from being scammed.

A strong mind will make you successful in Cybersecurity. Most people freak out during an incident and stress when they don't have answers. Learn to accept things for what they are and focus on what you can control. Acceptance and focus will lead you well through the chaos.

Can you secure businesses with open-source tools alone?

@CtPrecious @thecybermentor I remember paying for this course back when Heath first added it to Udemy. It was pretty solid.