June 27, 2023

Good morning, everyone!

This week’s critical vulnerabilities: Apple has released fixes for more zero-days in iOS/iPad OS 16.5.1, 15.7.7, macOS 11.7.8, 12.6.7, 13.4.1, watchOS 9.5.2 and 8.8.1 (Note: this update didn't auto-install on my devices because I had to accept a new license agreement first.) Microsoft released 94 fixes, six rated critical, in June's Patch Tuesday WooCommerce Stripe Gateway WordPress Plugin released an update to fix a critical vulnerability ASUS has released updated firmware with nine security fixes (critical and high) for its routers Cisco is urging users to apply updates to Cisco Secure Client Software for Windows (formerly Cisco AnyConnect Secure Mobility Client) Zyxel has released firmware updates for its its Network Attached Storage (NAS) devices Patch All the Things!

Let's look at "Respond"

Following my theme of the five core functions of the NIST Cyber Security Framework (CSF), this week I want to talk a bit about the next core function, Respond. How do you respond to a potential cyber security incident?

Since the most common incident is accidentally installing malware on your computer, I'll address that.

Recognize the signs. The most common signs that you may have malware include:

• Suddenly the device is running much slower than usual
• Hard drive and/or fans start running, or running high, for no apparent reason
• Inexplicable noise (talking or music)
• A popup box that flashes and quickly disappears
• An attachment or link that won't open or appears to do nothing

Respond quickly. If any of these things occur, especially just after opening an email or while surfing the web (including social media apps, not just the browser), follow these steps:

1. Disconnect the device from the Internet. If it has an ethernet cable, unplug that. If it's on wireless, turn off wireless. If you can't turn it off, and if you have physical control over the wireless access point, unplug that. The important thing is to cut off the malware's connection to the Internet, and to isolate the potentially-infected device from other devices on the network. (Note: If you cannot disconnect the device, turn it off. Pull the power cable if necessary. But this only the LAST RESORT if you are unable to disconnect it, and only after step 2 below.)
2. Take a picture of the screen.
3. Send the picture to your tech support person.

Stay cyber safe this week!

Remember, you can read past editions of this newsletter on our website, along with tons more information under the Resources tab.

Glenda R. Snodgrass
grs@theneteffect.com
(251) 433-0196 x107
https://www.theneteffect.com
For information security news & tips, follow me!

Security Awareness Training Available Here, There, Everywhere!

Thanks to COVID-19, lots of things went virtual, including my employee Security Awareness Training. Live training made a comeback a few months ago, but many organizations are retreating. No worries. Wherever you and your employees may be, I can deliver an interesting and informative training session in whatever format you prefer.

Contact me to schedule your employee training sessions. They're fun! ☺