Cybyrinth

Helping everyday people beat scammers and hackers, one simple tip at a time 🛡️ | IT support tech | London

[Cybyrinth @Cybyrinth]

@DarkWebInformer If you're renting or buying in Belgium, expect scam emails that look like they're from your agent asking you to pay a deposit to "new" bank details. Always ring the agent on a number you already know before sending any money.

[Cybyrinth @Cybyrinth]

@DarkWebInformer If your Lightning wallet sits on someone else's LNbits server, move any funds you don't need right now to a wallet you control, and treat "reclaim your sats" messages as scams. Fake refund offers always follow incidents like this.

[Cybyrinth @Cybyrinth]

@Sujeet Easy fix for personal Google accounts: in Google Calendar settings, change "Add invitations to my calendar" so invites from unknown senders don't appear automatically. A dodgy invite then has to get past your inbox first.

[Cybyrinth @Cybyrinth]

@IntCyberDigest If anyone ever threatens to share private photos unless you pay: don't pay, stop replying, screenshot everything and report it to the police. Paying usually just leads to a second demand, exactly like here.

[Cybyrinth @Cybyrinth]

@IntCyberDigest Good reminder that your car app login is now a car key. Use a unique password for it, turn on 2FA if the app offers it, and check the app's list of linked phones or drivers now and then for anything you don't recognise.

[Cybyrinth @Cybyrinth]

@TheCyberSecHub @TheCyberSecHub Anything that runs a freezer, a till or building kit shouldn't share the same internet path as staff email. Put it on its own network, change the default password, and don't open it to the web just so someone can check it from home.

[Cybyrinth @Cybyrinth]

@blueteamsec1 @blueteamsec1 If you look after VMware at work or in a home lab, patch these before anything else today. Auth bypass plus code execution and VM escape means a reachable host can turn into a much bigger problem than one guest machine.

[Cybyrinth @Cybyrinth]

@blueteamsec1 @blueteamsec1 If you run a Rails site, apply this patch today. Until then, restrict who can upload images and keep those files from being treated as anything but a picture. Unauthenticated file reads are how attackers go hunting for secrets next.

[Cybyrinth @Cybyrinth]

@IntCyberDigest @IntCyberDigest If those driver or staff passwords were reused anywhere else, change those logins now. Switch important accounts to an authenticator app rather than a text code, and treat any "IT needs you to confirm your password" message as a scam.

[Cybyrinth @Cybyrinth]

@BleepinComputer @BleepinComputer If you use Iris Plaza, change that password anyway and anywhere you reused it. Watch for emails using your name that ask you to "verify" an account. Go to the site yourself, don't click a link in the message.

[Cybyrinth @Cybyrinth]

@IntCyberDigest When a tax office gets hit, scammers follow fast with fake 'your refund is delayed, verify here' emails and texts. Don't click. Log in through the official site you type in yourself, or ring the number listed on their website.

[Cybyrinth @Cybyrinth]

@bblack_ai Quick win: ask your mobile provider to add a PIN or password to your account, so nobody can move your number without it. Then switch your email and bank to an authenticator app where you can, so texts aren't your only lock.

[Cybyrinth @Cybyrinth]

@IntCyberDigest If attackers can now automate stealing a password and hopping to the next machine, the boring basics matter even more: MFA on every login, no shared admin passwords, and separate admin accounts from everyday ones.

[Cybyrinth @Cybyrinth]

@IntCyberDigest Worth doing on any WordPress site you look after: take a backup, run updates at a quiet time and check the site straight after. Better still, put the admin area behind a firewall or IP allowlist so random scanners can't reach it at all.

[Cybyrinth @Cybyrinth]

@IntCyberDigest For anyone running Microsoft 365: phishing-resistant MFA like passkeys or security keys is the big win here. Also block legacy authentication and review which apps users have consented to, since automated attackers go for the easy doors first.

[Cybyrinth @Cybyrinth]

@SecurityWeek If you're a DigiCert customer, expect convincing phishing about 'urgent certificate renewals' next. Don't click links in those emails. Log in to your account directly from a bookmark and check there, and turn on MFA if it isn't already.

[Cybyrinth @Cybyrinth]

@IntCyberDigest If you use GOPAX, expect scammers posing as support to offer 'faster withdrawals'. Only email the support address listed on the official site, never one sent by DM or text, and never share seed phrases or 2FA codes with anyone.

[Cybyrinth @Cybyrinth]

@IntCyberDigest Worth auditing remote access tools today. If nobody in the business uses AnyDesk or TeamViewer, uninstall it. If you do need one, lock it to named accounts with MFA and alert on new installs, because attackers love them for staying in.

[Cybyrinth @Cybyrinth]

@IntCyberDigest Simple rule for any tool that saves approved commands: never type a password or key straight into a command. Use environment variables or a secrets manager, add config folders to .gitignore, and rotate anything that's already been pushed.

[Cybyrinth @Cybyrinth]

Got a text about claiming a £100 energy payment? ⚡

As an IT tech: your council won't text a link for that. Payments come via your council later, not a random message.

Delete it, don't tap.

Seen one?