DIG BLOG

3 days ago
1 min

DIG this week's security tip

IS THAT REALLY A TEXT FROM YOUR CEO... OR IS IT A SCAM? Imagine you’re going about your day when you get a text from your boss. They need you to buy some gift cards for clients. This is a high priority, and they need the card details urgently. Would this kind of request make you pause? Would you quickly do as asked? Or would you think this was suspicious? This week we’re offering up the following tips to help you avoid being a victim of scams like these. Always Double Check U

Mar 15
1 min

Cyberattacks

DIG this week's security tip

CYBER CRIMINALS ATTACK DURING CRISES Cyber criminals know that one of the best ways to rush people into making a mistake is by creating a heightened sense of urgency. One of the easiest ways to create a sense of urgency is to take advantage of a crisis. They view traumatic events, such as the breakout of a war, a major natural disaster such as a volcanic explosion, or infectious disease breakout, as opportunities. Once the event becomes the focus of news stories and social me

Mar 8
1 min

Password Security

DIG this week's security tip

WHY STRONG PASSWORDS ARE IMPORTANT Even though strong passwords (passwords that include a combination of uppercase and lowercase letters, numbers, and special characters) have been a focus of cybersecurity training for years, the most common passwords from 2022 are still ‘password’ and ‘123456’. These ‘bad’ passwords, take a hacker’s automated software less than one minute to crack. In past tips we’ve talked a lot about strong passwords. It’s kind of our job. They’re a really

Mar 1
1 min

Cyberattacks

DIG this week's security tip

HACKERS TARGET SOCIAL MEDIA ACCOUNTS Social media can be a powerful tool for organizations to connect with their customers, but did you know that it's also a prime target for hackers? Why would they want to do that? For one, they can use your account to spread malware, phishing scams, or fake news. They could also use your accounts to impersonate the organization to trick customers into giving away personal information. Or they can use your account to harm your reputation by

Feb 22
1 min

Mobile Device Security

DIG this week's security tip

60% OF DIGITAL FRAUD OCCURS THROUGH MOBILE DEVICES Mobile phones have become an essential part of our daily lives, but they are also vulnerable to malware and other cyber threats. People tend to secure their computers better than they do their mobile phones even though they have similar capabilities. This needs to change because over 60% of digital fraud now occurs through mobile devices. To protect your mobile phone, it is important to take the following steps: Keep your pho

Feb 15
1 min

Mobile Device Security

DIG this week's security tip

GOOGLE VOICE SCAMS Have you tried selling or buying something online lately? There has been an explosion of malicious people in online groups here in Montana lately. I recently posted an item for sale in my hometown sale group on Facebook. I was immediately inundated with multiple requests to provide my phone number so they could “call me” about the item. This is a common scam in which the malicious person asks if they can send “a code to make sure you’re not a fake.” Really

Feb 8
1 min

DIG this week's security tip

CAN AI AND CHATBOTS MAKE YOU MORE EFFICIENT? Artificial intelligence (AI) and chatbots have been in the news lately. Have you wondered what they are all about and how they could help your organization be more efficient? Chatbots like ChatGPT, Chatsonic, and YouChat are often called “language machines” that use statistics, reinforcement, and supervised learning to index words, phrases, and sentences. They have no real “intelligence”, but it can effectively answer questions, wr

Feb 1
1 min

DIG this week's security tip

DATA PRIVACY DAY Data Privacy Day was last weekend, January 28th. Data Privacy Day is an annual event dedicated to raising awareness about the importance of protecting personal information online. Data privacy is a critical issue, as more and more of our personal information is being collected, shared, and stored online. When this information falls into the wrong hands, it can lead to identity theft, financial fraud, and other cybercrimes. Data Privacy Day is an important rem

Jan 25
1 min

Cyberattacks

DIG this week's security tip

Cybersecurity Attack Trends in 2023 - Elevated Phishing Using AI & Machine Learning This month we’ve been starting down the path to a more secure new year with tips about 2023 cyberattack trends. This last week of January, we’re focusing on phishing attempts that use Artificial Intelligence (AI) and Machine Learning. AI is the capability of a computer system to mimic human cognitive functions such as learning and problem-solving. Machine Learning is a subset of AI that solves

Jan 19
1 min

2023 Cybersecurity Trends

DIG this week's security tip

Cybersecurity Attack Trends in 2023 - Smishing & Mobile Device Attacks To protect your business in the coming year, it’s important to watch for cyberattack trends. Knowing the new attacks helps your organization better update its IT security to mitigate the risk of a cyber incident. This month the DIG is focusing on cyber-attack trends for 2023. Mobile devices go with us everywhere these days. This direct connection to a potential victim is not lost on cybercriminals. This we

Jan 11
1 min

2023 Cybersecurity Trends

DIG this week's security tip

We’ve pulled out the security crystal ball for the upcoming year and this month we are digging into the attack trends you need to watch for in 2023. This week we’re looking at One-time Password (OTP) bypass attacks. This attack trend is designed to get past Multifactor Authentication (MFA). MFA works by providing a One-Time Password (OTP) which is then used in combination with a user’s password to gain access. MFA is very effective at preventing malicious sign-in attempts. T

Jan 4
1 min

2023 Cybersecurity Trends

DIG this week's security tip

Cybersecurity Attack Trends in 2023 - Attacks on 5G Devices The new year is here and maybe you have started to make your New Year’s resolutions. This year when planning your resolutions, include one to increase your cyber resiliency by keeping up to date with new cyberattack trend types. Throughout the month of January, we’ll be providing tips about the cybersecurity attack trends predicted for 2023. This week we start with attacks against 5G. 5G is a new global wireless stan

Dec 28, 2022
1 min

Cybersecurity Insurance

DIG this week's security tip

What's Changing in the Cybersecurity Insurance Market? Data breach volume and costs continue to rise. 2021 set a record for the most recorded data breaches on record. And in the first quarter of 2022, breaches were up 14% over the prior year. No organization is completely safe from cyberattacks. We’ve provided information about the trends we are seeing with cyber liability insurance below. Demand is Going Up - With demand increasing, look for more availability and policy opti

Dec 22, 2022
1 min

DIG this week's security tip

Give the gift of cybersecurity this year If you have recently replaced your mobile device, you may not realize just how much personal data may be left on your old one. Before disposing of your device you need to securely wipe if of your data. To be sure your device is okay to dispose of by following our five-step process. If your device was issued to you by work, check with your supervisor before proceeding. Back up the content, you want to keep by moving it to the Cloud or t

Dec 15, 2022
1 min

Mobile Device Security

DIG this week's security tip

Give the gift of cybersecurity this year Are you purchasing an internet-connected gift for someone this holiday season? There is a good chance those new devices - smart cameras, smart TVs, watches, toys, phones, and tablets - could also bring privacy and security risks to the recipient if they are not set up securely. In our mission to better secure Montanans, the DIG offers the following guidance for setting up internet connected devices. Also, we’ve created a printable secu

Dec 7, 2022
1 min

Technology Policies

DIG this week's security tip

Many organizations make the mistake of not having formal IT policies. They may think they don’t need formal policies or that they are too small for policies to matter. This way of thinking can cause problems with your employees, cyber insurance, and compliance. So, no matter what size your organization is, you should implement formal policies. To get you started we've provided info about three important IT policies you should have. Acceptable Use Policy An Acceptable Use Poli

Dec 6, 2022
1 min

DIG this week's security tip

With the start of the holiday shopping season, your risk of financial fraud and identity theft increases. The Better Business Bureau (BBB) found 35% of fraud reports in 2021 were attributed to online scams during the holidays. Our top tips to stay safe while shopping this holiday season are provided below. • Look for merchants who use encryption to transmit your personal information. Look for website addresses that begin with “https:” instead of “http:” or sites with the 🔒 i

Nov 10, 2022
1 min

Password Security

DIG this week's security tip

Recently attackers have been gaining access to organizations with “push-based” multifactor authentication (MFA) through an old-fashioned idea, persistence. Push-based MFA is a method of authentication where your provider sends the user a notification on their device and the user acknowledges it to access the service. For example, Apple uses this method to grant access to iCloud accounts. Attackers use persistence after compromising a user’s account credentials by repeatedly t

Jun 9, 2022
1 min

Cyberattacks

DIG this week's security tip

Cyberattacks are now a permanent and persistent threat to organizations across all industries and regions. It is no longer a matter of if a cyberattack will happen, but when. How seriously an attack impacts an organization can often depend on if they are prepared and how effectively their response is. The key to an effective incident response that mitigates damage is a comprehensive plan. That plan's formal name is an Incident Response (IR) Plan. An IR plan is usually created

Jun 1, 2022
1 min

Cybersecurity Insurance

DIG this week's security tip

Cyber insurance premiums collected by the largest U.S. insurance carriers in 2021 increased by 92% over the previous year according to the NAIC. Does your organization need cyber insurance? What is typically included and what will you be required to have in place to qualify? Cyber insurance protects companies from damages and liabilities that arise as the result of hacks, malware attacks, or data breaches. These policies are highly customizable and may or may not cover ransom

DIG BLOG

(406) 634-3100 (866) 293-2344

contactus@thecyberdig.com

©2023 DIG All Rights Reserved

Offices in Helena and Billings Montana