Do not upgrade to the Windows 10 Anniversary Update without first verifying whether your McAfee product is compatible. This caution affects the products listed below:

McAfee Agent (MA) 5.0.x, 4.8.x

McAfee Application and Change Control 7.0

McAfee Client Proxy (MCP)

McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.x, 9.4, 9.3

McAfee Endpoint Security (ENS) Firewall, Threat Prevention, and Web Control 10.2, 10.1

McAfee Host Intrusion Prevention (Host IPS) 8.0

McAfee MOVE AntiVirus Multi-Platform 

McAfee Threat Intelligence Exchange (TIE) 1.x

McAfee VirusScan Enterprise (VSE) 8.8

McAfee Policy Auditor (PAU) 6.2

https://kc.mcafee.com/corporate/index?page=content&id=KB87536

Over the past weekend Mark Zuckerberg, tech giant, Facebook mogul and you-would-think tech genius, had his Twitter and Pinterest accounts hacked.

Of course, he’s an easy, convenient target – who wouldn’t want to boast about hacking Mark Zuckerberg’s accounts? Ironically, not much skill was needed to achieve this target. The Zuck made two classic mistakes. 

His first was to use an incredibly simple and easy password consisting of only two unique characters, namely “dadada”. No caps, no special characters, no problem to hack. His second was using the same password for his Twitter and Pinterest accounts. Subsequently, hackers could access both accounts with minimum effort.

What we’re trying to say is, don’t feel bad if you use simple passwords because it’s easy to remember. Even Mark Zuckerberg does it. However, we would advise that, for your own safety, you start using unique, unusual passwords and not 123456 for all your accounts.

If it’s a challenge to remember different passwords for different accounts or if passwords with odd characters, capital letters and punctuation confuse you, consider using password management tools like KeePass and LastPass. 

The good news is that Google is working on an alternative method for users to access their accounts on Android phones. It will be more secure and doesn’t use passwords. 

Google recently announced Project Abacus, which will recognise a user by, what they call a Trust API – the way they type, their location, facial recognition, voice and other biometric markers. Google plans to complete work on this project by the end of this year. 

More articles on passwords.

[SOURCES: http://qz.com, http://www.nytimes.com]

Every day, countless phishing emails are sent to us at Tygerberg Campus and to the Main Campus. This one (see below) is so outlandish that it is an obvious fraud, but others can be a bit more convincing. Using this as an example, there are a number of things that you can look for.

Here are 10 of them:

1: The message contains a mismatched URL: If the hyperlinked address is different from the address that is displayed, the message is probably fraudulent or malicious.

2: URLs contain a misleading domain name: Phishers try to convince their victims that a message came from the government or a company like Microsoft or Apple.

3: The message contains poor spelling and grammar: Reading this mail I attach as an example should leave no doubt.

4: The message asks for personal information: No matter how official an email message might look, it’s always a bad sign if the message asks for personal information. Your bank doesn’t need you to send your account number, neither does the government.

5: The offer seems too good to be true: If you receive a message from someone unknown to you who is making big promises, the message is probably a scam.

6: You didn’t initiate the action: If you get a message informing you that you have won a contest you did not enter, you can bet that the message is a scam.

7: You’re asked to send money to cover expenses: One telltale sign of a phishing email is that you will eventually be asked for money or provide data to release the money.

8: The message makes unrealistic threats: Here the “minister” says if you don’t respond the government will take the money. (That should bring a smile to your face!)

9: The message appears to be from a government agency: Phishing artists who want to use intimidation don’t always pose as a bank. Sometimes they’ll send messages claiming to have come from a government agency or SARS.

10: Something just doesn’t look right: Professionals in the security business are taught to look for anything that is “JDLR” – (Just Doesn’t Look Right)  If you receive a message that seems suspicious, it’s usually in your best interest to avoid acting on the message.

[ARTICLE BY DAVID WILES]

From: Pravin Gordhan [mailto:praving@treasury.gov.za]
Sent: Tuesday, 24 May 2016 14:36
Subject: FOR YOUR URGENT ATTENTION-FROM THE OFFICE OF HONORABLE MINISTER OF FINANCE.

Attention,

I write in respect of a fund brought to the department of National Treasury earlier today from Reserve bank under your name.

From the reports contained in the file having your information attached to the fund, the fund was supposed to be transferred to you from Reserve bank, but was not due to some reasons that were not mentioned in the file.

The fund is 9.5m USD. Are you aware of the fund?

This notification stands as the first and final notice to you for you to claim your fund and after 5 working days of this notification, if I do not hear from you, I will have no option than to declare the fund government’s fund.

Please re-confirm the following details;

1, Your full name and address.

2, Your age and occupation.

3, Your cell phone number.

Revert back to me as soon as get this email, so that we can process the release your fund to you.

Yours Sincerely.
Pravin Gordhan
Honorable Minister of Finance,
Republic of South Africa.