At Home:
- Staying safe online.
- Secure your network.
- Security Awareness Deployment Guide - Working From Home (SANS Institute).
- Top Five Steps to Securely Work from Home (SANS Institute).
- Creating a Cybersecure Home (SANS Institute).
At Work:
- F5: 2021 Credential Stuffing Report: Credential stuffing is a cyberattack where attackers attempt to use lists of compromised user credentials to break into a system. The attackers assume many users reuse usernames and passwords across multiple services. The F5 report looks at the relationship between three aspects of the ecosystem surrounding stolen credentials: theft, sale, and fraud use.
- Device disposal tips.
- Tips for safely using public Wi-Fi.
- Video conferencing best practices.
- Cybersecurity and Infrastructure Security (CISA) Telework Essentials Toolkit. The toolkit provides a long-term strategy for business leaders and their IT staff and employees to establish a more permanent telework solution for end users beyond what may have been implemented as a quick fix or temporary solution. .
- IC3 Alert on Mobile Banking Apps: The Internet Crime Complaint Center (IC3) has released an alert warning consumers of cyber risks associated with mobile banking apps.
- Cyberspace Solarium Commission (CSC) Cybersecurity Lessons from the Pandemic: The CSC released a white paper that highlights over 30 recommendations from their final report published in March along with 5 new recommendations.
- Cybersecurity online health guidance .
- Planning and Response Guidance for State CIOs (NASCIO).
- Preventing Eavesdropping and Protecting Privacy on Virtual Meetings (NIST blog, March 17).
Additional Resources
- F5: 2021 Credential Stuffing Report: Credential stuffing is a cyberattack where attackers attempt to use lists of compromised user credentials to break into a system. The attackers assume many users reuse usernames and passwords across multiple services. The F5 report looks at the relationship between three aspects of the ecosystem surrounding stolen credentials: theft, sale, and fraud use.
Security and Privacy Websites
- Cybersecurity and Infrastructure Security Agency (CISA).
- Washington state Office of Privacy and Data Protection
Report a Cybersecurity Incident
Washington state agencies should call 360-407-8800 to report cybersecurity incidents.