Phishing and Social Engineering
This type of phishing attack specifically targets high-profile executives or individuals with high-level access.
What is whaling?
This term refers to protecting confidential information by carefully considering what you share and where you share it when using AI tools.
What is AI Security?
This security practice involves stringing several random words together to create a secure and memorable login.
What is a passphrase?
You receive a notification that your account has been locked, but you never tried to log in. This is the team you should notify.
What is the Information Security Team/Infosec Team/Department?
What should you create differently for every online account instead of reusing the same one?
What is a unique password or passphrase?
DAILY DOUBLE! This social engineering tactic involves an attacker creating a fabricated scenario, like posing as an IT technician, to trick a victim into giving up sensitive data.
What is pretexting?
What is the motto for AI Safety & Deepfakes?
What is "Think before you prompt. Verify before you trust."
This cryptographic process converts a password into a fixed-length value for secure verification rather than storing the original password in plaintext.
What is hashing?
Deleting suspicious files or running cleanup tools before an investigation may destroy this important resource.
What is digital evidence?
This detailed log or chronological record of system events is what a SOC analyst relies on heavily to reconstruct what happened during a security incident.
What is an audit log or event log?
A person follows an authorized employee through a secure entrance without using their own access credentials. What social engineering technique is this?
What is tailgating/piggybacking?
This term describes when an AI system generates information that sounds convincing but is actually false inaccurate or completely fabricated.
What is an AI hallucination?
This cryptographic process converts readable data into an unreadable format to protect it.
What is encryption?
What are the three main actions employees should take when a cybersecurity incident is suspected?
What is Recognize, Contain, and Report?
Discussing an incident in a potentially compromised Slack or Teams channel can expose information to this person.
What is the attacker/hacker/bad actor/threat actor?
This technique manipulates what appears in an email's sender information so a fraudulent message looks like it came from someone you trust.
What is email spoofing?
DAILY DOUBLE! Identify 1 way that you can limit the risk of deepfakes?
What is limit what you share on social media/the internet?
A user creates a 16-character password with uppercase letters, lowercase letters, numbers, and symbols, but uses the same password for several accounts. Which strong-password rule has the user violated?
What is uniqueness?
You suspect a device has been compromised. What should you do with the device if it is safe to do so?
What is disconnect or isolate the affected device?
This attack uses leaked username and password combinations from previous breaches to access accounts.
What is credential stuffing?
An attacker sends a message saying, “Your account is at risk! Act now!” What two psychological tactics are being used?
What is fear and urgency?
This is one of the most dangerous deepfake technology available to cybercriminals today.
What is live deepfakes?
DAILY DOUBLE! According to the flyer what are the 3 things that we should protect
What is company information, customer information and yourself?
When reporting a cybersecurity incident, this key piece of information helps investigators narrow down the investigation.
What is the date and time?
Your phone suddenly receives repeated MFA approval notifications you didn't initiate. The attacker hopes you'll eventually approve one.
What is MFA fatigue or MFA bombing?