{"id":3135,"date":"2016-06-03T14:55:23","date_gmt":"2016-06-03T18:55:23","guid":{"rendered":"http:\/\/timandrewsblog-asicentral.com\/timblog\/?p=3135"},"modified":"2016-06-03T14:55:23","modified_gmt":"2016-06-03T18:55:23","slug":"securing-your-online-accounts","status":"publish","type":"post","link":"https:\/\/timandrewsblog-asicentral.com\/timblog\/2016\/06\/03\/securing-your-online-accounts\/","title":{"rendered":"Securing Your Online Accounts"},"content":{"rendered":"

Whether you have a mom-and-pop shop or a huge corporation, online security has never been more important, especially in light of recent criminal data breaches at social media sites LinkedIn, MySpace and Tumblr.<\/p>\n

In what is the online equivalent of a superstore break-in, hackers stole and then tried to sell what they claimed were 117 million LinkedIn email addresses and passwords. This is a huge deal because lots of people routinely use the same password on multiple sites, meaning hackers could use one piece of stolen info as a gateway to break into banking websites and other key accounts.<\/p>\n

If your LinkedIn info was stolen, LinkedIn was supposed to notify you with instructions to reset your password and consider adding two-step verification. Regularly changing passwords \u2013 and using long passwords that are a mix of letters, numbers and symbols \u2013 should be routine at every home and office these days.<\/p>\n

But I admit, when I first heard about the breaches I had to think, \u201cDid LinkedIn notify me? Do I still have a MySpace account? Did I ever use Tumblr?\u201d<\/p>\n

We\u2019re all super busy, and it\u2019s easy to get lazy about personal online security \u2013 just as it\u2019s easy to forget to lock your front door or your car. Make no mistake, cybercrime is very real and growing more sophisticated every day. There\u2019s malware, email worms, like-jacking, link-jacking \u2013 the threat list goes on.<\/p>\n

To alert ASI members to the latest breaches, ASI\u2019s CTO, Armughan Rafat, sent an advisory email I\u2019m sharing in full below. Please note: the LinkedIn, MySpace and Tumblr breaches are not<\/em> related to your safe, secure ASI accounts and, unfortunately, ASI cannot help you change settings to your personal external accounts.<\/p>\n

Here is Armughan\u2019s email:<\/p>\n

If you have used LinkedIn, Tumblr or MySpace, I highly recommend you take the following actions to protect your account(s):<\/p>\n

LinkedIn:<\/u><\/p>\n

If you already changed your password in response to a breach notification from LinkedIn, there\u2019s no need to change it again. But if you wish to change it as a precaution:<\/p>\n

    \n
  1. Log on to LinkedIn and select a new, unique <\/em>password only used for LinkedIn. Never use the same password across multiple websites because criminals will use breached data to attempt access to your other accounts. Choose long passwords that are a mix of letters, numbers and symbols.<\/li>\n<\/ol>\n
      \n
    1. As added security, enable two-step verification, which protects your account by sending a verification code to your cellphone when you sign on to LinkedIn from a device they don\u2019t recognize. Get directions here: https:\/\/www.linkedin.com\/help\/linkedin\/suggested\/544<\/a>.<\/li>\n<\/ol>\n

      MySpace:<\/u><\/p>\n

        \n
      1. Log on and click your account \u201cSettings,\u201d located in your footer next to \u201cMessages\u201d and \u201cNotifications.\u201d Click on the \u201cSettings Icon\u201d to open your account menu options and change your password, following the cautions above.<\/li>\n<\/ol>\n

        Tumblr:<\/u><\/p>\n

          \n
        1. Log on and\u00a0click \u201cSettings\u201d under the \u201cAccount\u201d menu at the top of the dashboard. Update your password in the \u201cPassword\u201d section, following the cautions above. Click \u201cSave.\u201d<\/li>\n<\/ol>\n
            \n
          1. As added security, enable two-factor authentication. Click \u201cSettings\u201d under the \u201cAccount\u201d menu at the top of the dashboard. In the \u201cSecurity\u201d section, enable \u201ctwo-factor authentication.\u201d Enter your phone number and continue following steps.<\/li>\n<\/ol>\n

            General guidance:<\/u><\/p>\n

              \n
            1. Use unique passwords for each of your accounts.<\/li>\n<\/ol>\n
                \n
              1. If the site offers two-step verification or multi-factor authentication, enable it.<\/li>\n<\/ol>\n
                  \n
                1. Never use your employer-provided email account for your personal activities, as you have no ownership of the account.<\/li>\n<\/ol>\n
                    \n
                  1. Search your email address (es) and usernames on the data-breach search service \u201cHave I Been Pwned?\u201d (victimized, in Internet-speak) at: https:\/\/haveibeenpwned.com\/<\/a>. This is a trusted resource that makes many of the publicly disclosed breaches searchable. Register your email address with the site to be notified in case of a breach.<\/li>\n<\/ol>\n

                    For more information on the data breaches, please visit:<\/p>\n

                    LinkedIn:<\/p>\n

                    http:\/\/www.computerworld.com\/article\/3077478\/security\/linkedin-s-disturbing-breach-notice.html<\/a><\/p>\n

                    http:\/\/www.nytimes.com\/2016\/05\/19\/business\/linkedin-says-hackers-are-trying-to-sell-fruits-of-huge-2012-data-breach.html<\/a><\/p>\n

                    MySpace:<\/p>\n

                    https:\/\/nakedsecurity.sophos.com\/2016\/05\/31\/myspace-breach-could-be-the-biggest-ever-half-a-billion-passwords\/<\/a><\/p>\n

                    Tumblr:<\/p>\n

                    https:\/\/www.theguardian.com\/technology\/2016\/may\/31\/tumblr-emails-for-sale-darknet-65-million-hack-passwords<\/a><\/p>\n

                    MySpace\/Tumblr:<\/p>\n

                    http:\/\/www.nydailynews.com\/news\/national\/myspace-tumblr-hit-large-data-breaches-2013-article-1.2655595<\/a><\/p>\n

                     <\/p>\n","protected":false},"excerpt":{"rendered":"

                    Whether you have a mom-and-pop shop or a huge corporation, online security has never been more important, especially in light of recent criminal data breaches at social media sites LinkedIn, MySpace and Tumblr. In what is the online equivalent of a superstore break-in, hackers stole and then tried to sell what they claimed were 117 […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,8],"tags":[],"class_list":["post-3135","post","type-post","status-publish","format-standard","hentry","category-community","category-news-about-asi"],"_links":{"self":[{"href":"https:\/\/timandrewsblog-asicentral.com\/timblog\/wp-json\/wp\/v2\/posts\/3135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/timandrewsblog-asicentral.com\/timblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/timandrewsblog-asicentral.com\/timblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/timandrewsblog-asicentral.com\/timblog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/timandrewsblog-asicentral.com\/timblog\/wp-json\/wp\/v2\/comments?post=3135"}],"version-history":[{"count":4,"href":"https:\/\/timandrewsblog-asicentral.com\/timblog\/wp-json\/wp\/v2\/posts\/3135\/revisions"}],"predecessor-version":[{"id":3139,"href":"https:\/\/timandrewsblog-asicentral.com\/timblog\/wp-json\/wp\/v2\/posts\/3135\/revisions\/3139"}],"wp:attachment":[{"href":"https:\/\/timandrewsblog-asicentral.com\/timblog\/wp-json\/wp\/v2\/media?parent=3135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/timandrewsblog-asicentral.com\/timblog\/wp-json\/wp\/v2\/categories?post=3135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/timandrewsblog-asicentral.com\/timblog\/wp-json\/wp\/v2\/tags?post=3135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}