Cybersecurity New Year’s Resolution #2: Turn on 2FA

Two-factor authentication, or 2FA, is one of the best cybersecurity tools available to you. The main benefit of two-factor authentication is that it adds another layer of protection to your accounts and services, above and beyond passwords

RCS chat: a better SMS for Android?

Android has started rolling out Rich Communication Services (RCS) chat features to users of its Messages app, touting this as a better, more up-to-date successor to traditional SMS texting. However, there is still some confusion about what RCS is…

Is your bank a privacy threat?

Many people are aware that large tech companies like Facebook and Google collect and monetize user data . But privacy advocates are now sounding the alarm about the growing trend of consumer banks and credit card companies doing the same thing.

Best of the Checklist: January 2nd, 2019

The Checklist is taking a little holiday break this week, but we’ll be back on the 9th of January with a new podcast. Until then, we’d like to invite you to check out these classic Checklists you might have missed, especially as they touch on topics that have been in the news of late! 

In what follows, we’ll let you know what’s been going on in the world of cybersecurity for the past week, and then we’ll point you to a Checklist where you can learn more.

This Best of the Checklist …

Cybersecurity in 2019: Top 9 stories that show what the future holds

This year was a big one for cybersecurity news, with plenty of stories worthy of inclusion in a year-end review. We’ll take you through the top stories of 2019 which help us see the shape of things to come.

Apple in 2019: Naughty or Nice?

It’s that time of year again, when Santa makes his list, checks it twice and, well, you know the rest. So in the spirit of the season, we’re going to take a look at some of the top Apple stories of 2019 to see if the company was naughty or nice this year. 

.nice {background: rgb(107,219,107);
background: -moz-linear-gradient(left, rgba(107,219,107,1) 0%, rgba(5,112,0,1) 100%);
background: -webkit-linear-gradient(left, rgba(107,219,107,1) 0%,rgba(5,112,0,1) 100%);
background: linear-gradient(to right, rgba(107,219,107,1) 0%,rgba(5,112,0,1) 100%);
filter: progid:DXImageTransform.Microsoft.gradient( startColorstr=’#6bdb6b’, endColorstr=’#057000′,GradientType=1 );-webkit-background-clip: text;
-webkit-text-fill-color: transparent; text-shadow: none;
}
.naughty{background: rgb(174,55,72);
background: -moz-linear-gradient(left, rgba(174,55,72,1) 0%, rgba(109,23,31,1) 100%);
background: -webkit-linear-gradient(left, …

Checklist 168: It only FEELS like a recap

This week’s Checklist topics may sound familiar, but don’t be fooled! We revisit three stories that we’ve talked about before, but which now have some updates worth discussing (spoiler: it’s not all good news!).

On this week’s Checklist, it’s deja vu all over again:

$20 bucks and a security breach on pump four…revisitedLast week’s Communications Limits…revisitedBad passwords…revisited (again)

$20 on four: the case for paper money

Earlier in the year, we covered a story about gas station monitoring software that had serious vulnerabilities — serious enough to attract the attention of the Department of …

Georgia Weidman on penetration testing and the future of cybersecurity

Georgia Weidman is a penetration tester, security researcher, writer, trainer, and entrepreneur.

She is the author of a highly-regarded book which teaches the fundamentals of penetration testing, Penetration Testing: A Hands-On Introduction to Hacking, and has taught security courses and conducted advanced training sessions at such prestigious venues as Black Hat, Tulane University, West Point, and the NSA.

Weidman is also the founder of Shevirah, a company focused on mobile device and Internet of Things (IoT) security, as well as Bulb Security, a cybersecurity …

SecureMac marks 20 years of Apple security

Cybersecurity firm has changed with threat landscape; looks to future

Checklist 167: Apple updates all of it

Cupertino rolled out new features and bug fixes for all of its operating systems, so we’re going to take a look at last week’s security news broken down by OS.

New fileless malware for macOS linked to Lazarus Group

The new malware sample bears similarities to the well-known AppleJeus malware, which targets cryptocurrency exchanges. AppleJeus is the product of Lazarus Group, a shadowy cybercrime organization believed by many to be linked to North Korea.

Checklist 166: Warnings from the FUN Bureau

On this week’s Checklist, we’ll look at some dumb ways to buy a smartwatch. We’ll share a PSA from the FBI. And we’ll talk politics and app security by way of FaceApp.

Setting up a new Mac for security: 7 tips and tricks

So you’re the proud owner of a brand new Mac — wonderful!

You’re no doubt eager to try out all the bells and whistles; install your favorite apps; start using your new machine. We know the feeling.

But part of setting up a new macOS device should always be making sure it’s secure — and that’s what we’re going to cover in this quick setup guide. Follow these “Day 1” steps so you can enjoy your Mac with confidence in the weeks, months, and years to come.

article span.backnum { font-family:”Open Sans”, sans-serif; …

Checklist 165: Safe shopping for the holidays

This week’s Checklist gets you ready for the seasonal shopping rush (from a cybersecurity perspective, anyway). We’ll show you how to keep safe as you shop online; what gifts you might want to avoid; and how to make sure everything arrives as planned; and what to do when all the madness is over! 

This week’s Checklist covers:

How to shopWhat (not) to buyDeliveries and checkups

Shop smart, shop safe

Before you actually purchase anything online, there are a couple of basic precautions you should take — and one or two seasonal threats you need …

Checklist 164: Over the River and Through the Woods

A a complete guide to how to keep yourself safe during the holiday travel season. We’ll tell you what to do before you even walk out the door, how to protect yourself while you’re traveling, and what things to bear in mind when you reach your destination.

Checklist 163: Encryption Minus the Encryption

On this edition of The Checklist: Apple Mail Encryption, Now with Less Encryption!, Ransomware Revisited, and A Ring of Insecurity.

Encrypted messaging apps: Everything you need to know

Privacy is hard to come by these days. Malicious actors, large corporations, and governments are constantly trying to look over your shoulder when you’re online.

But some in the tech community are fighting back. Tools like ad blockers, no-track browsers, and VPNs can help keep digital snoops in check. 

One of the most important of these technologies is encrypted messaging, which is available through a number of third-party and native applications.

So how do these messengers work? Are they all the same? And the million dollar question: Are they truly secure? Here’s what …

The SecureMac Interview: Security Researcher Patrick Wardle talks nation-state...

Patrick Wardle is a security researcher and software developer whose areas of expertise include macOS malware and nation-state threats.

Wardle is Principal Security Researcher at Jamf and creator of the Objective-See suite of security tools. He is also the founder of the world’s premier Mac security conference: Objective by the Sea.

We caught up with Patrick to talk about macOS security as well as the advanced threats being created by nation-state actors around the world.

CNN once called Patrick Wardle “a sweet guy” who could “hack …

Digital forensics and privacy: 3 things to know

Digital forensic analysts are the Sherlocks of cybersecurity, gathering and interpreting evidence from digital sources for use in criminal or civil court cases. While the field of digital forensics is an interesting topic in its own right, it’s also worth learning about if you’re interested in digital privacy issues. 

Understanding how digital forensic analysts work—and in particular, what they look for in their investigations—can teach you a lot about what’s going on behind the scenes on your computer. And once you know that, you can take steps to better protect your …

Checklist 162: Insecurity with a “light” touch

On this week’s Checklist, we’ll talk about a privacy issue with a privacy service. We’ll look at how social engineering works in practice by examining “SIM-swapping”. And we’ll check out a high-tech hacking story that reads like something out of a Hollywood thriller.

Here’s the Checklist for this week:

Taking the privacy out of VPNSIM-swapping 101An audio hack with a “light” touch

When VPNs go public

As many as 2,000 users of the popular VPN service Nord VPN may have had their accounts compromised in a credential stuffing attack.

Credential stuffing refers to the practice …