Welcome to the SANS Tip of the Day site. Each day we post a new tip that focuses on and explains a specific topic and actionable steps people can take to protect themselves, their family and their organization. In addition, each tip is linked to a respective OUCH! newsletter so you can learn more about the topic, in over 20 languages. The Tip of the Day program is distributed under the Creative Commons BY-NC-ND 4.0 license. You are welcome to use these tips within your organization or share with family and friends, the only limitation is you cannot modify them and must reference the source. If you have any suggestions or ideas for new tips please contact us at community@securingthehuman.org.
What happens to our digital presence when we die or become incapacitated? Many of us have or know we should have a will and checklists of what loved ones need to know in the event of our passing. But what about all of our digital data and online accounts? Consider creating some type of digital will, often called a "Digital Inheritance" plan.
More and more scams and attacks are happening over the phone. Whenever you get an urgent phone call on the phone pressuring you to do something (such as a caller pretending to be the tax department or Microsoft Tech Support) be very suspicious. It's most likely a scammer trying to trick you out of money or pressure you into making a mistake. Protect yourself, simply hang up the phone or tell the person you can't help them. You are not being rude, the person on the other line is trying to take advantage of you.
To learn more, check out this OUCH! newsletter.
Scamming Your Through Social Media December 2, 2020
You may be aware that cyber attacks will try to trick you over the phone or through email using phishing attacks, but do you realize they may try to attack you also over Social Media, such as through Snapchat, Twitter, Facebook or LinkedIn? Just like in email, if you get any Social Media messages that are highly urgent or too good to be true, it may be an attack.
To learn more, check out this OUCH! newsletter.
CEO Fraud December 1, 2020
CEO Fraud / BEC is a type of targeted attack. It commonly involves a cyber criminally pretending to be your boss, then tricking or fooling you into sending the criminal highly sensitive information or initiating a wire transfer. Be highly suspicious of any emails demanding immediate action and/or asking you to bypass any security procedures.
To learn more, check out this OUCH! newsletter.
Finding a USB Drive November 30, 2020
Be very careful of any lost USB drives you may find (such as in the parking lot or local coffee shop) or USB drives you are given at public events, like conferences. It is very easy for these devices to be infected with malware. Never use such devices for work, use only authorized devices issued to you by work.
Tip of the Day Team
The Tip of the Day program is developed through a rigorous process involving numerous volunteers. These tips would not be possible without the hard work of the people below.
Advisory Board
- Allison Hickman
- Andrew Richter
- Janet Roberts
- Karen McDowell
- Mariano M. Del Rio
- Rhonda Kelly
- Michael Sands
- Ed Yuwono
- Stephanye Schuyler
- Mark Ryan del Mroal Talabis
- Thomas McMahon
- Vaman Amarjeet
