The post Personal Cyber Safety Checkup – Low Ticket Offer for Divorce GPS Summit 2025 appeared first on Hammer Software.

Understanding cybersecurity is crucial for protecting your online presence.

Meet the Cyber Villains 🦹

Cyber threats come in all shapes and sizes—think of them as the costume party crashers of the online world. Some are old-school, some are brand-new, and some are sneakier than your nosy neighbour.

Investing in cybersecurity measures can help mitigate risks.

Understanding cybersecurity is essential in defending against these threats. Awareness and preparation can make all the difference.

Every individual should take cybersecurity seriously to avoid falling victim to attacks.

🎣 Phishing Attacks
Phishing is a con artist in a cheap disguise. They’ll send you fake emails or set up phony websites hoping you’ll hand over your info. If a message smells fishy… throw it back!

💰 Ransomware
Ransomware is the digital equivalent of a burglar locking your fridge and demanding a ransom to retrieve your food. It sneaks in through sketchy attachments or downloads. Your best defence? Keep your software updated and back up your files so you can laugh in the hacker’s face when they ask for ransom.

🦠 Malware
Malware is like that “friend” who shows up uninvited, eats your snacks, and spies on you the whole time. Antivirus software is your bouncer—don’t let the bad stuff in.

How to Be a Cyber Superhero 🦸

Enhancing your cybersecurity practices can make you a digital superhero.

Staying safe online doesn’t require a cape—just a few smart habits.

🔑 Use Strong Passwords
Your password should be more complex than your coffee order. Mix letters, numbers, and symbols—and don’t reuse the same one everywhere. (Yes, we know it’s tempting. Resist!)

📱 Enable Two-Factor Authentication
2FA is like a secret handshake. Even if someone guesses your password, they still need the second step (like a text to your phone) to get in.

☕ Be Careful with Public Wi-Fi
Public Wi-Fi is like shouting your credit card number across a crowded café. Use a VPN to whisper your secrets instead.

Why Everyone Should Care

Cybersecurity isn’t just for CEOs in corner offices. It’s for everyone—yes, even you scrolling TikTok at 2 a.m.

Making informed decisions about cybersecurity is vital for safety.

🙈 Protect Your Info
Your personal details are like gold. Hackers want them, but you don’t have to make it easy. Share less online, and guard your info like it’s your Netflix password.

💳 Secure Your Money Moves
Shopping and banking online are super convenient, but only if you use secure sites. And hey—take a peek at your bank account every so often (just in case someone’s “treating themselves” with your card).

Oops, You Got Hacked—Now What? 🚨

It happens! If cyber-baddies slip past your defenses, here’s what to do:

Understanding the implications of cybersecurity breaches is essential.

📢 Report It
Tell the proper authorities—it’s like calling security at the party. They can help stop the chaos.

🔐 Change Your Passwords
Do this immediately. Think of it as changing the locks before the thief comes back with a spare key.

Future Threats: Coming Soon to a Device Near You 🎬

Keeping updated on cybersecurity trends can help you stay prepared.

Hackers never retire—they just upgrade their tricks.

🤖 AI-Powered Attacks
Hackers are using AI too, which means scams will get smarter. It’s like dealing with a robot scammer who never sleeps.

📡 IoT Vulnerabilities
Your fridge, your thermostat, your smart doorbell—they’re all online now, which makes them potential targets. Update those devices like you’d lock your doors at night.

Stay Safe Online: We’ve Got Your Back 🤝

Cyber threats may be growing, but so are the ways to stop them. With a little know-how (and maybe a healthy dose of skepticism), you’ll be well ahead of the curve.

Being proactive about cybersecurity can save you from future headaches. Prioritize cybersecurity as a fundamental aspect of your online activities.

Need more tips? Reach out to us anytime—we’ll help you keep your digital life safe, secure, and stress-free… so you can get back to what really matters (like more cat videos 🐱).

--

Featured Image Credit

The post 7 Essential Cybersecurity Tips To Start Your Fall Right! appeared first on Hammer Software.

The key takeaways?

It uses a DLL side-loading technique, does not provide any branding, shares some functionality with LockBit 2.0, and technically unique features.

It side-loads a DLL used by Palo Alto Networks’ Cortex XDR Dump Service Tool (a signed security tool). The vulnerability has since been reported to Palo Alto Networks. It spreads using a domain controller, via the group policy server.

For more information, please check out Check Point Research’s Release Bulletin.

The post As If Ransomware Wasn’t Enough to Worry About, Now It’s Faster and Resembles a Psych Test appeared first on Hammer Software.

LastPass has been compromised. It’s good that they’re disclosing it in relatively short order. You might say it was the keys to the kingdom that were stolen. Someone pilfered ‘portions’ of their source code, and some proprietary technical information. It has not been revealed what ‘some’ or ‘portions’ actually means.

The source code and the proprietary technical information gives a potential hacker the ability to better understand how LastPass works and have a better idea as to how to exploit the service.

Could this be worse than a password database exfiltration? It all depends on what was in that source code and the technical information.

With a lot of our data being in the cloud, we should be vigilant about which companies have our data, how they store it, …

There is a lot of news over the past several years about unsecured AWS S3 data buckets having unencrypted credentials stored in them, ransomware running roughshod over organizations, …  It is surprising to hear of proprietary technical information, and source code for a security-focused business being stored on publicly accessible servers.

Ultimately in a security-focused organization, the source code and technical information should be on air gapped networks. In a non security-focused organization, the developer accounts should at a minimum be 2FA-secured, but it seems in this case it was only secured by a password. It’s not clear how the hackers gained access (brute-force or social engineering) to the account, either. In this case, the security-focused organization is not really setting a good example for the rest of us.

Organizations can learn a lot from this. The question is, will they?

The post Major Online Password Service Compromised appeared first on Hammer Software.

This exploit is actively being used in combination with a Webkit exploit. It allows injection via the Safari browser (theoretically, this exploit may be available on Linux as well through the KDE project’s Konqueror browser). The associated CVE has been created, but the details have not yet been filed.

The exploit affects:

• iPhone 6s or later
• iPad Pro (all models)
• iPad Air 2 and later
• iPad 5th gen and later
• iPad mini 4 and later
• iPod Touch 7th gen

It can be patched by updating to iOS 15.6.1 or iPadOS 15.6.1.

For macOS, this exploit can be patched by updating to Monterey 12.5.1.

The post Active Exploit for iOS, iPadOS and macOS allowing Root Access – CVE-2022-32894 and CVE-2022-32893 appeared first on Hammer Software.

Microsoft also recommends use of a 3rd party backup service in their service agreement for Microsoft 365:

“We recommend that you regularly backup your content and data that you store on the services or store using third-party apps and services.”

Google Workplace Administrator Help appeals to you as well:

“As an administrator, you can recover deleted items from Google Drive within 25 days after a user empties their trash. After that period, Google purges the data from its systems. Depending on the amount of data that you want to restore, it might take several days for the data to reappear in the user’s account.”

Thought you were safe with Google Vault? Sure, you might be, but is it worth the hassle? This is what Google has to say about it:

“You might be able to retrieve data older than 25 days if it was subject to retention rules or holds. A Vault user can search for retained data and export it. However, you can’t directly restore this data to the user’s Drive.”

There is now proof of concept from Proofpoint that takes advantage of the versioning system in OneDrive or Sharepoint. It floods the versioning table, or reduces versioning limits so that you can no longer return to an uninfected version of a file.

Hammer Software has several solutions available for you. We have solutions for Microsoft 365, Google Workplace, Sharepoint, Dynamics 365 and Salesforce. All solutions we offer store their data in Canada, so that it’s not subject to the US Patriot Act.

We have several solutions to reduce the likelihood of your data ever getting infected with ransomware. Ultimately, any security measures can be thwarted by users clicking on things they shouldn’t. We have solutions to lower the chances of that happening, too. We can limit the amount of damage (if any) that can be done by users clicking on malignant links and/or attachments.

Often times, we can get you set up with all of these protective measures and still save you money over your existing IT service provider.

Talk to us today so that you can sleep better at night.

The post Thought Your Files Were Safe in the Cloud? appeared first on Hammer Software.

More Than 100 Lenovo Models Can Be Infected with Unremovable Malware

Lenovo Laptop

The post More Than 100 Lenovo Models Can Be Infected with Unremovable Malware appeared first on Hammer Software.

Log4Shell is a zero day vulnerability affecting Java servers and is actively being exploited in the wild. Java is the backend language for a lot of enterprise servers as well as Fortune 1000 websites. If you’re the administrator of such a website, you know that the problem probably won’t get fixed right away because you’ll have a lot of code to audit and/or with everyone working from home, it might prove to be difficult to push new changes out to a live website as fast as you’d like.

To mitigate the problem to give yourself some breathing room and time to fix the problem, there’s a couple of solutions. I will provide the solutions using both iptables (available on most modern Linux distributions) and RouterOS (the operating system used by all MikroTik products). I’ll leave the task of fixing the base problem to your software developers and devops.

The first solution is to block outbound LDAP calls (lightweight directory access protocol). By default LDAP uses port 389 on either TCP or UDP transport protocol.

Using iptables, we could block it as follows:

-A FORWARD -p tcp --dport 389 -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -p udp --dport 389 -j REJECT --reject-with icmp-host-prohibited

Using RouterOS, we could block it as follows:

/ip firewall filter add chain=forward protocol=tcp port=389 action=reject reject-with=icmp-host-prohibited
/ip firewall filter add chain=forward protocol=udp port=389 action=reject reject-with=icmp-host-prohibited

The second solution is to block LDAP in general, in case someone’s chosen to use the non-default port. The common envelope for an LDAP message is the keyword ‘LDAPMessage’, so we can scan for that at layer 7:

Using iptables:
-A FORWARD -m string --alog bm --string "LDAPMessage" -j REJECT --reject-with icmp-host-prohibited

Using RouterOS:
/ip firewall filter add chain=forward protocol=tcp content="LDAPMessage" action=reject reject-with=icmp-host-prohibited

The post Log4Shell Zero Day Vulnerability appeared first on Hammer Software.

The post Microsoft Office 365 appeared first on Hammer Software.

The post Cloud Office Suites appeared first on Hammer Software.