Social Engineering
Using techniques such as emotional manipulation and fear-mongering to trick someone into handing over sensitive information.
What is Social Engineering?
A group of connected devices that share information with each other
What is a Network?
Malicious software that is installed onto your device (often accidentally) and spreads through a system.
What is a Virus?
Authentication tool that requires a user to provide at least two identity proofs to be granted access into the network/device
What is Multifactor Authentication (MFA)?
Using artificial intelligence (AI) to fabricate fake videos/audio/images in order to manipulate victims into handing over sensitive information
What is Deepfakeing?
1. Sense of Urgency
2. Suspicious Email Addresses
3. Requesting Personal Information
4. Grammatical and/or Spelling Errors
5. Suspicious Links and/or Attachments
6. Generic Greetings
7. Too Good to be True
What are the 7 Red Flags for identifying a Phish?
A road highway is to a Router, like an intersection is to a...
What is a Switch?
The most common (and often, critical) cyberattack, globally.
What is Phishing?
Authentication tool where a user is required to login in once through one set of credentials
What is Single Sign-On (SSO)?
Associated with the impending "Q Day" (Quantum Computing) release of Post-Quantum Cryptography (PQC)
What is Harvest Now, Decrypt Later (HDNL)?
Conducting awareness programs and establishing clear security policies.
What are the most effective mitigation strategies against Phishing?
Separating users or groups of users through assigning different IP addressing schemes and/or implementing physical devices like firewalls
What is Network Segmentation?
Encrypts sensitive information within a system until financial compensation is received
What is Ransomware?
Privacy Act 1988; General Data Protection Regulation (GDPR); California Consumer Privacy Act (CCPA)
What are Global Privacy Laws?
A company's third-party vendor is breached by an attacker, leaving the company vulnerable
What are Supply Chain Attacks?
Targeting the CEO of Microsoft via phishing email.
What is Whaling?
A type of network that uses physical hardware; managed on-site; requires human security personnel
What is an On-Premise Network?
The ransomware gang that attacked the pharmaceutical giant, Novo Nordisk, and demanded US$25 million to not publicly release the data
Who is FulcrumSec?
Device or software that monitors and controls incoming and outgoing network traffic, governed by set rules
What is a Firewall?
Loss of privacy through government and corporate monitoring activities on unsuspecting users, via digital means
What is Digital Surveillance?
Stalking someone to follow them home in order to break into their home PC
What is Tailgating?
Network port to enable remote access
What is Port 22/Secure Shell (SSH)?
An on-path attack where a bad actor eavesdrops on data communications between a legitimate client and server, often to steal the data
What is a Man-in-the-Middle (MITM) attack?
Encrypts a user's network traffic and masks their actual IP address. Applications are when using the Internet; accessing company resources remotely
What is a Virtual Private Network (VPN)?
Inserting malicious instructions into a prompt for a Large Language Model (LLM) to process
What is a Prompt Injection?