Internet Security

Believe you can, and you will! This is a brief story of how a veteran security professional and cyber influencer George McPherson got into cybersecurity.

In today’s modern world, it’s almost impossible not to engage with social media and the internet on some level. Unfortunately, despite its many positives, this constant rate of interaction also means that many of us are at an extremely high risk of personal exposure to the dangerous negative effects of trolling and cyberbullying. Now, with the help of Your Social Media Happy Guide, you can learn the strategies to protect and prevent yourself from becoming a target of these harmful internet practices.

A concise introductory guide to the EU General Data Protection Regulation (GDPR).

The 21st century is not only an era of technical and computer innovations, but the time when each of us can face a hacker's attack. However, there’s no need to panic! There are some simple tips and recommendations on how to save your digital space from perpetrators and where to go if something strange happens.

Determine how much of your organization’s operations are dependent on IT. Consider how much your organization relies on information technology to conduct business and make it a part of your culture to plan for contingencies in the event of a cyber incident. Identify and prioritize your organization’s critical assets and the associated impacts to operations if an incident were to occur.

Since the introduction of multi-user computer systems, user authentication has primarily relied on the use of usernames and passwords. To strengthen the authentication process, Multi-Factor Authentication (MFA) requires the user to present multiple elements in different categories, or “factors,” as part of an authentication attempt. These factors are something you have, something you know, and something you are.

I am proud to share the 2023–2025 CISA Strategic Plan, the first comprehensive Strategic Plan since CISA was established as an agency in 2018. The strategic plan represents a forward-leaning, unified approach to achieving our vision of ensuring secure and resilient critical infrastructure for the American people.

The Snake implant is considered the most sophisticated cyber espionage tool designed and used by Center 16 of Russia’s Federal Security Service (FSB) for long-term intelligence collection on sensitive targets. To conduct operations using this tool, the FSB created a covert peer-to-peer (P2P) network of numerous Snake-infected computers worldwide.

These cybersecurity authorities—herein referred to as “authoring organizations”—are aware that communities may seek cost-savings and quality-of-life improvements through the digital transformation of infrastructure to create “smart cities".

The spying that took place between the USSR and the United States during the cold war era pales in comparison to the spying and covert operations that are taking place now. Of course, the USSR is no more, but the ideology has lingered in the minds of those who were once members of it. Vladimir Putin, the president of Russia, is a cold warrior; he has made it quite clear that the cold war is , in fact, not over, it just looks very different now.

BlackLotus is a recently publicized malware product garnering significant attention within tech media. Similar to 2020’s BootHole (CVE-2020-10713), BlackLotus takes advantage of a boot loader flaw—specifically CVE-2022-21894 Secure Boot bypass known as “Baton Drop”—to take control of an endpoint from the earliest phase of software boot.