Source: The New York Times
https://www.nytimes.com/2020/08/19/technology/smartphone-location-tracking-opt-out.html
How can I opt out?
If you want to prevent Cuebiq from collecting your data, the easiest way is to disable the advertising ID on your phone. If you disable it, Cuebiq will no longer keep track of your device.
These instructions provide a good overview for disabling the ID on different Android phones. Apple provides a guide for iPhones here.
Source: GCN
https://gcn.com/articles/2020/08/21/piv-encryption-federal-email-insecurity.aspx
Sixteen years after Homeland Security Presidential Directive 12 (HSPD-12) called for the creation of a common, interoperable identification credential for both physical and logical access that would work governmentwide, much has been achieved.After many years of investment, personal identity verification credentials are now indeed government wide, but there is one area where the existing PIV infrastructure is not fully utilized: securing cross-agency email communication.
At a recent webinar, a group of experts in deploying PIV identity and encryption technologies in the federal space, including myself, evaluated the state of email encryption, why it is not being used as it should across agencies and what can be done to make better use of PIV credentials and encryption.
While most agencies use PIV credentials and encryption, they generally do not deploy it between agencies and with PIV-I contractors, stated Kyle Neuman, a PKI and cryptography expert and managing director of SAFE Identity, an industry consortium and certification body supporting identity assurance in healthcare.
…
Related Articles
- Zero trust: Moving from concept to reality
- Cyberspace is critical infrastructure. It will take effective government oversight to make it safe
- 5 ways to bolster cybersecurity maturity
- NSA issues BootHole mitigation guidance
- Social distancing policies have wider reach than expected
RSS https://gcn.com/rss-feeds/cybersecurity.aspx
Source: FCW
https://fcw.com/articles/2020/08/21/johnson-vishing-cisa-fbi.aspx
The FBI and Cybersecurity and Infrastructure Security Agency are warning private businesses about an ongoing “vishing” — or voice phishing – campaign targeting employees who are working from home during the coronavirus pandemic.According to the alert, the campaign has been ongoing since at least mid-July, with attackers registering domains to create spoofed websites that duplicate the internal VPN login page for victim companies. They then obtained SSL certificates and used URL add-ons to make it appear as if the requests were coming internally from IT support.
ZDNet first reported on the alert, and the New York State government later published the document on its coronavirus response website.
Similar to phishing, vishing involves social engineering and impersonation by an attacker, usually over the phone, in order to trick a victim into giving up their account credentials. In this case, the attackers used Voice over Internet Protocol numbers to call victims on their personal cellphones, and in some cases were even able to spoof legitimate numbers from other employees and offices. They then convinced their target that they needed to use a different login page for their VPN, including any necessary one-time passwords or two-factor authentication information.
Source: Becker’s Health IT
https://www.beckershospitalreview.com/cybersecurity/providers-may-unknowingly-be-posting-patient-phi-from-medical-images-online-acr-warns.html
New search engine capabilities on Google, Bing and other vendors may expose identifying patient information from slide presentations published online, according to the American College of Radiology.In an Aug. 20 notice published to its website, the ACR, Radiological Society of North America and Society of Imaging Informatics in Medicine urged radiologists and other medical professionals to follow new guidance to ensure no protected health information is included in slide presentations.
Search engines such as Google and Bing can now extract large-scale information from previously stored files, including source images contained in PowerPoint presentations and Adobe PDF files. An image that has embedded patient information can be indexed by this process, meaning that when explicit patient information is associated with images in the search engine database, the identifying information can be linked to subsequent internet searches on the patient’s personal information.
To avoid exposing patient PHI online, medical professionals should only include images without identifying information in presentations, disable patient information overlays or use an anonymization algorithm to prevent PHI exposure.
…
More articles on cybersecurity:
NY hospital back online with EHR 3 weeks after malware attack: 5 details
New York medical practice reports 1,789 patients’ info missing from bank deposit bags
Pennsylvania health system’s lawsuit over malware attack dismissed: 4 details
RSS https://www.beckershospitalreview.com/healthcare-information-technology.feed?type=rss
Source: NBC News via Yahoo
https://news.yahoo.com/one-university-students-steps-tracked-100152683.html
Newfound freedom is part of the allure of going off to college, but COVID-19 changes things. At Oklahoma State University, the school tracks where students are at all times on campus to slow the spread of the disease. Oklahoma State tracks the location data of students and staff who are signed on to campus Wi-Fi routers. The school also uses student card swipes, campus purchases and course attendance to complete contact tracing.