October: Cyber Security Awareness Month 2024
Safe Surfing: Best Practices for Browsing the Internet
The internet is an incredible resource, offering a wealth of information, entertainment, and connectivity at our fingertips. However, it also presents various risks, from malware and phishing attacks to data breaches and privacy violations. Safe browsing is essential to protect yourself from these threats and to ensure your personal information remains secure.
The best practices for safe surfing so you can navigate the web confidently and securely include:
- Use Strong, Unique Passwords
As previously discussed in an earlier blog, a strong password is your first line of defence against unauthorised access. Weak passwords are easy targets for hackers who use automated tools to crack them.
Create passwords that are at least 12 – 16 characters long and combine uppercase and lowercase letters, numbers, and special characters.
Avoid using easily guessed information, such as your name, birthdate, or simple sequences like “12345.”
Use a unique password for each of your online accounts to prevent one breach from compromising multiple accounts.
Consider using a password manager to generate and store complex passwords securely.
- Enable Multi-Factor Authentication (MFA)
MFA adds an extra layer of security to your accounts by requiring you to provide two or more verification factors to access them. Even if your password is compromised, MFA makes it much harder for cybercriminals to gain unauthorised access.
Enable MFA on all accounts that support it, particularly those that handle sensitive information, such as email, banking, and social media.
Choose authentication methods that provide the most security, such as app-based authenticators (e.g., Microsoft Authenticator) or hardware tokens.
Please see previous blog post on further information on securing accounts with MFA.
- Keep Your Software and Devices Updated
Outdated software, operating systems, and apps often have security vulnerabilities that cybercriminals can exploit. Keeping your devices and software up-to-date is essential for safe browsing.
Regularly check for and install updates for your operating system, web browsers, apps, and security software.
Enable automatic updates whenever possible to ensure you’re always protected with the latest security patches.
Remove or disable software and browser extensions you no longer use, as these can present security risks if left outdated.
- Use Secure and Reputable Websites
Not all websites are safe to visit. Some may be designed to spread malware, steal personal information, or trick you into downloading harmful software.
Look for the “HTTPS” prefix in the website address and a padlock icon in the address bar. HTTPS indicates that the website is using encryption to protect the data transmitted between your browser and the site.
Be cautious when clicking on links in emails, social media, or unfamiliar websites. Hover over links to see where they lead before clicking. Virustotal can be used to check URLs and attachments.
Stick to reputable websites that you trust, especially when entering sensitive information or making online transactions.
- Install and Use Reliable Security Software and plug-ins
Installing antivirus and anti-malware software is a crucial step in protecting yourself against online threats. These tools can detect and block malicious software, phishing attempts, and other threats before they cause harm.
Choose a reputable security software that offers real-time protection, automatic updates, and regular scanning capabilities.
Run regular scans on your computer to check for malware, viruses, and other threats.
Consider using additional security tools, like anti-phishing browser extensions, to enhance your online protection.
Internally, IT teams should put measures in place to ensure that only trusted plug-ins can be used on authorised web browsers.
Plug-ins can pose significant security risks if not carefully managed. Malicious or poorly developed plug-ins may have access to sensitive data like browsing history, passwords, and other personal information, making them a prime target for cybercriminals. Some plug-ins can introduce vulnerabilities that hackers exploit to inject malware or conduct phishing attacks. Additionally, even legitimate plug-ins can become dangerous if they are compromised or abandoned by developers, leading to a potential security gap. It’s essential to only install trusted plug-ins and keep them regularly updated to minimise these risks.
- Avoid Public Wi-Fi for Sensitive Transactions
Public Wi-Fi networks, such as those in cafes, airports, and hotels, can be convenient but are often insecure. Cybercriminals can easily intercept data transmitted over these networks, putting your sensitive information at risk.
Avoid accessing sensitive accounts (such as online banking or shopping) or entering personal information while connected to public Wi-Fi.
Use a Virtual Private Network (VPN) when connecting to public Wi-Fi. A VPN encrypts your internet traffic, making it much harder for hackers to intercept your data.
Turn off automatic Wi-Fi connections on your devices to prevent them from connecting to unsafe networks without your knowledge.
- Be Cautious with Downloads and Attachments
Cybercriminals often use downloads and email attachments to spread malware or trick you into installing malicious software.
Only download files and software from trusted websites and official app stores.
Be wary of email attachments, even if they appear to come from someone you know. Verify the sender’s identity and the legitimacy of the attachment before opening it.
Avoid downloading pirated software, games, or media files, as these often come bundled with malware.
- Protect Your Personal Information
Cybercriminals can use personal information for identity theft, fraud, and other malicious activities. Being mindful of what you share online is key to protecting your privacy.
Limit the amount of personal information you share on social media, online forums, and other websites.
Be cautious when filling out online forms, especially those requesting sensitive information, such as bank details.
Review the privacy settings on your social media accounts and adjust them to limit the visibility of your information to only trusted contacts.
- Regularly Monitor Your Accounts and Credit Reports
Keeping an eye on your accounts and credit reports can help you spot suspicious activity early, allowing you to take action before serious damage is done.
Regularly check your bank and credit card statements for unauthorised transactions.
Set up alerts for your financial accounts to receive notifications of any suspicious activity.
Review your credit reports regularly to check for signs of identity theft or fraud.
- Stay Informed and Educate Yourself
Cybersecurity is an ever-evolving field, and staying informed about the latest threats and best practices is crucial for safe surfing.
Follow reputable cybersecurity blogs, news sites, and organisations to stay up-to-date on new threats and trends.
Take advantage of online resources, courses, and tutorials to learn more about safe browsing practices and how to protect yourself online.
Share your knowledge with friends, family, and colleagues to help create a safer online community.
Conclusion
Safe surfing is essential to protect your personal information and digital identity in today’s interconnected world. By following these best practices—such as using strong passwords, enabling MFA, staying informed, and using reliable security tools—you can significantly reduce your risk of falling victim to cyber threats.
Remember, a proactive approach to cybersecurity is your best defence against the ever-evolving landscape of online dangers. Stay vigilant, stay informed, and browse the internet with confidence!
———————————————————————————–
Reference – https://www.jisc.ac.uk/guides/staying-safe-online?lang=en
———————————————————————————–
And keep updated by joining the Jisc cyber community group. With more than 2,200 members, it’s a forum for sharing knowledge, best practice and threat intelligence for the benefit of the whole education and research sector.
Explore the latest cyber security technologies, innovations and future insights from both a national and international perspective at Jisc’s Security Conference 2024, 26-27 November, ICC Wales, and 28 November online.