Discover and read the best of Twitter Threads about #CyberSecurityAwarenessMonth
Most recents (9)
#Thread
How_To_Became a Great #hacker
1. Learn TCP/IP, Basic Information
gathering, Proxies, Socks, SSL, VPN, VPS, RDP,
FTP, POP3, SMTP, Telnet, SSH.
2. Learn Linux, Unix, Windows - You can do
this using vmware or any virtual desktop
utility.
#CybersecurityAwarenessMonth
How_To_Became a Great #hacker
1. Learn TCP/IP, Basic Information
gathering, Proxies, Socks, SSL, VPN, VPS, RDP,
FTP, POP3, SMTP, Telnet, SSH.
2. Learn Linux, Unix, Windows - You can do
this using vmware or any virtual desktop
utility.
#CybersecurityAwarenessMonth
3. Learn a programming language that's
compatible with all OS - Perl, Python, C, ASM
4. Learn HTML, PHP, Javascript, ASP, XML, SQL,
XSS, SQLI, RFI, LFI
5. Learn Reverse engineering and crack
some programs for serials easy ones like
mirc, winzip, winrar or old games.
compatible with all OS - Perl, Python, C, ASM
4. Learn HTML, PHP, Javascript, ASP, XML, SQL,
XSS, SQLI, RFI, LFI
5. Learn Reverse engineering and crack
some programs for serials easy ones like
mirc, winzip, winrar or old games.
6. Code a fuzzer for common protocols - ftp,
pop3, 80, 8080 - Pick some free software
like ftp server, mail server, apache or iis
webserver or a webserver all-in-one pack,
or teamspeak, ventrilo, mumble.
pop3, 80, 8080 - Pick some free software
like ftp server, mail server, apache or iis
webserver or a webserver all-in-one pack,
or teamspeak, ventrilo, mumble.
#CybersecurityAwarenessMonth Tip of the Day:
Start an email account where employees can send their questions on any and all things cybersecurity provides a good start and has multiple benefits. ๐
๐งต (1/7)
Start an email account where employees can send their questions on any and all things cybersecurity provides a good start and has multiple benefits. ๐
๐งต (1/7)
#NCSAM Tip of the Day:
Use a fake security question. Itโs important to not use common questions that anyone can find out by looking into your past history. Also, get creative with it, treat security answers like passwordsโthe more obscure, the better.
(2/7)
Use a fake security question. Itโs important to not use common questions that anyone can find out by looking into your past history. Also, get creative with it, treat security answers like passwordsโthe more obscure, the better.
(2/7)
#NCSAM Tip of the Day:
Where should you use MFA?
1. On accounts with your financial info like banks, or online stores
2. On accounts with personal info, like social media
3. On accounts with info you use for work
TLDR: Use MFA everywhere!
#BeCyberSmart
(3/7)
Where should you use MFA?
1. On accounts with your financial info like banks, or online stores
2. On accounts with personal info, like social media
3. On accounts with info you use for work
TLDR: Use MFA everywhere!
#BeCyberSmart
(3/7)
Is Bank of #SouthSudan offering rewards to its visitors?
Here is what i found
๐๐๐๐๐๐๐๐
#Thread 1/10
#SSOT #CyberSecurity #CybersecurityAwarenessMonth
please retweet
Here is what i found
๐๐๐๐๐๐๐๐
#Thread 1/10
#SSOT #CyberSecurity #CybersecurityAwarenessMonth
please retweet
2/10
When i try to visit https://www.mp3juices[.]cc
(Free music downloading site)
There is a malicious ad that pops up at the top
When i try to visit https://www.mp3juices[.]cc
(Free music downloading site)
There is a malicious ad that pops up at the top
3/10
When I go ahead and click on that ad in an isolated environment.I am presented with the screen below claiming that i have won $300,000 reward from Bank of #SouthSudan
When I go ahead and click on that ad in an isolated environment.I am presented with the screen below claiming that i have won $300,000 reward from Bank of #SouthSudan
General #CyberSecurity policies
General security policies affecting an employee using the internet are as follows:
๐๐๐๐
#SSOT #CybersecurityAwarenessMonth
Thread
1/6
General security policies affecting an employee using the internet are as follows:
๐๐๐๐
#SSOT #CybersecurityAwarenessMonth
Thread
1/6
2/6
Social media networks/applications
Many people have social media accounts, such as Twitter, Facebook, Instagram etc.These sites store personal details about everyone who has an account, and employees need to be careful with the information that they post on these sites.
Social media networks/applications
Many people have social media accounts, such as Twitter, Facebook, Instagram etc.These sites store personal details about everyone who has an account, and employees need to be careful with the information that they post on these sites.
3/6
Cognitive hacking
This is where a computer system attack relies on changing human users' perceptions and corresponding behaviors in order to be successful. This is a social engineering attack and the information required could be found on your various social media websites.
Cognitive hacking
This is where a computer system attack relies on changing human users' perceptions and corresponding behaviors in order to be successful. This is a social engineering attack and the information required could be found on your various social media websites.
๐๐ฒ On Oct. 22, Ontario is set to launch a new vaccine certificate and verification app. Receipts will be available in the form of QR codes. In the coming months, Ontario will also release another credential called Digital ID. I asked experts about usability and security. [1/12]
Some vaccination-credential apps have been criticized for how they handle usersโ information (see the private PORTpass app: cbc.ca/news/canada/caโฆ) but generally, cybersecurity experts say systems like Quebec's (similar to what Ontario is doing) should be secure. [2/12]
Ontario has not publicized the source code for its app yet, but as @BrockUniversity professor of digital media @onthename explains, it's likely the QR codes will contain unique URLs that will interface with the app to check users' vaccination status in a govt. database. [3/12]
LEARN HACKING PART 1๐งโ๐ป
Do yourself a favour and learn to hack๐.
You just have to START!๐, you will be good in no timeโฑ๏ธ.
/ A mega thread๐งต๐
Here are a few resources for you to get started.
#cybersecurity #CyberAttack #infosec #hacker
#CybersecurityAwarenessMonth
Do yourself a favour and learn to hack๐.
You just have to START!๐, you will be good in no timeโฑ๏ธ.
/ A mega thread๐งต๐
Here are a few resources for you to get started.
#cybersecurity #CyberAttack #infosec #hacker
#CybersecurityAwarenessMonth
Also, please note that I'm not a professional hacker or pentester. I'm still learning to be, so these are the resources I have found useful along my journey.
THE FUNDAMENTALS SKILLS REQUIRED๐
1) Basic IT skills.๐ถ๐ผ
If you are brand new to IT, I strongly recommend this course.
This is a FREE course by Professor Messer โ professormesser.com/free-a-plus-trโฆ
1) Basic IT skills.๐ถ๐ผ
If you are brand new to IT, I strongly recommend this course.
This is a FREE course by Professor Messer โ professormesser.com/free-a-plus-trโฆ
If u come across a tempting link,
No harm in analysing it at @virustotal (virustotal.com)
It will take u few seconds but will assure a safer online experience.
#CyberSecurityAwarenessMonth
PS: important when u receive a shortened link (e.g. bit.ly/ow.ly)
No harm in analysing it at @virustotal (virustotal.com)
It will take u few seconds but will assure a safer online experience.
#CyberSecurityAwarenessMonth
PS: important when u receive a shortened link (e.g. bit.ly/ow.ly)
Imagine same key 4 all the locks - loose the key and u loose the access.
This applies to passwords/passphrases as well
Use separate passwords/passphrases for different logins
Consider a password manager e.g. @LastPass
#CybersecurityAwarenessMonth
This applies to passwords/passphrases as well
Use separate passwords/passphrases for different logins
Consider a password manager e.g. @LastPass
#CybersecurityAwarenessMonth
Set the system (PC/mac/smartphone) to update "automatically"
#CybersecurityAwarenessMonth
@WindowsUpdate @linuxfoundation @Apple
#CybersecurityAwarenessMonth
@WindowsUpdate @linuxfoundation @Apple
As part of #CyberSecurityAwarenessMonth, what are Security Design Principles that you know of? In a couple of hours I will proceed to describe the most important ones in a tweet each. Would love to see what you know about them!
1. Minimize Attack Surface:
Your surface should be closed by design. Open ports based on need, not because it's nicer to have multiple ports open. This is production, not testing.
Remove assets that were removed. Keep a checklist (QA - sign off for validation).
Your surface should be closed by design. Open ports based on need, not because it's nicer to have multiple ports open. This is production, not testing.
Remove assets that were removed. Keep a checklist (QA - sign off for validation).
2. Least Privilege:
If A shouldn't do X, they are not *granted* X. Starting with an empty slate and going up is better than the opposite, yet harder. Make sure that the user has the requirements to do their job.
If app needs 60% CPU to be safe, then that is given. Same for users
If A shouldn't do X, they are not *granted* X. Starting with an empty slate and going up is better than the opposite, yet harder. Make sure that the user has the requirements to do their job.
If app needs 60% CPU to be safe, then that is given. Same for users
