Archived content. These alerts and tips were shared between 2016 and 2019. Threats and software have changed since, so some details may no longer apply. For current advice, call PSA at (707) 506-6802.
Between 2016 and 2019 we shared selected security alerts and tips from US-CERT, the United States Computer Emergency Readiness Team. US-CERT is now part of the Cybersecurity and Infrastructure Security Agency (CISA), which keeps the original documents online. They’re collected here for reference, with links to CISA’s copies.
For today’s alerts, see CISA’s Cybersecurity Alerts & Advisories. For plain-English guidance, see our articles.
Security alerts
- Ransomware and Recent Variants
Ransomware that encrypts files and demands payment, including the Locky and Samas variants spreading at the time. Read on CISA ↗ - WPAD Name Collision Vulnerability
How computers searching for automatic proxy settings (WPAD) could be tricked into sending web traffic through an attacker. Read on CISA ↗ - Symantec and Norton Security Products Contain Critical Vulnerabilities
Serious flaws in Symantec and Norton security software itself, fixed by updating the products. Read on CISA ↗ - HTTPS Interception Weakens TLS Security
Products that inspect encrypted (HTTPS) web traffic can unintentionally weaken the security of those connections. Read on CISA ↗ - Indicators Associated With WannaCry Ransomware
The worldwide WannaCry ransomware outbreak, which spread through unpatched Windows computers. Read on CISA ↗ - Petya Ransomware
A destructive ransomware campaign that disrupted businesses worldwide in mid-2017. Read on CISA ↗ - Emotet Malware
Emotet, a banking trojan spread through email attachments and links that was costly to clean up. Read on CISA ↗ - HIDDEN COBRA – FASTCash Campaign
A North Korean campaign that compromised bank systems to withdraw cash fraudulently from ATMs. Read on CISA ↗ - Using Rigorous Credential Control to Mitigate Trusted Network Exploitation
How attackers use stolen passwords to move through trusted networks, and how tight password control limits the damage. Read on CISA ↗ - Advanced Persistent Threat Activity Exploiting Managed Service Providers
Attackers targeting IT service providers as a way into their customers’ networks. Read on CISA ↗
Security tips
- Before You Connect a New Computer to the Internet
Steps to secure a new computer before going online for the first time. Read on CISA ↗ - Securing Network Infrastructure Devices
Protecting routers, switches and firewalls — the equipment that holds a network together. Read on CISA ↗ - Protecting Against Malicious Code
Everyday habits that reduce the risk of viruses, worms and other malicious software. Read on CISA ↗ - Proper Disposal of Electronic Devices
Removing your personal information before selling, donating or recycling a device. Read on CISA ↗ - Website Security
Basic steps for keeping a website and its visitors safe. Read on CISA ↗ - Protecting Against Ransomware
How to reduce the chance of a ransomware infection and limit the damage if one happens. Read on CISA ↗