Cybersecurity Snapshot: After Telecom Hacks, CISA Offers Security Tips for Cell Phone Users, Whil...
Cybersecurity Essentials
Protecting Your Mobile Phone from Targeted Hacking
Amidst recent hacks of telecom companies, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released "Mobile Communications Best Practice Guidance." This guide recommends:
- Use messaging apps with end-to-end encryption for both text and voice/video calls.
- Avoid SMS as a second authentication factor and opt for FIDO or authenticator codes instead.
- Regularly update your phone's operating system and apps.
- Consider getting a newer phone model for improved security features.
Regulating Artificial Intelligence in Finance
The Treasury Department has received feedback on the use of AI in the financial sector. Requests include:
- Clearer definitions of AI models and systems.
- Improved standards for data privacy and security.
- Enhanced consumer protections.
- Guidance on compliance with existing laws.
FBI Warns of Webcam and DVR Hacking Campaign
Hackers are exploiting vulnerabilities to target webcams and DVRs made by Chinese vendors. The FBI recommends:
- Apply patches and updates promptly.
- Consider removing outdated devices from your network.
- Change passwords regularly and use strong ones.
- Enable multi-factor authentication.
Government Embraces AI for Efficiency and Impact
U.S. federal agencies have deployed over 1,700 AI use cases, tackling tasks such as:
- Patent evaluation
- Weather analysis
- Disability benefits determination
Treasury Department Confirms Chinese-Linked APT Hack
An advanced persistent threat (APT) group connected to the Chinese government breached a Treasury Department system, accessing unclassified documents. The affected service has been taken offline, and no further access has been reported.
Cybersecurity Resolutions for SMBs
To enhance their cybersecurity posture this year, small-and-medium sized businesses (SMBs) should consider:
- Implementing multi-factor authentication.
- Designating a "cyber leader."
- Providing cybersecurity awareness training.
- Creating a business continuity plan.
- Acquiring cyberinsurance.