#1 – Confirm and Document

Do not panic; simply check the impersonation before you worry. Secondly, look for your Instagram profile with your name or images. And if you find one, quickly take screenshots of your profile, posts, followers, and also the messages. This documentation is very important for reporting. If needed, legal action can be taken based on this documentation. But before you take this step forward, ensure the account is indeed pretending to be you or someone you know.

#2 – Report the Fake Account

Instagram has a built-in feature to report a Fake Instagram Profile

• Go to the fake profile.
• Tap the three dots (⋯) in the top right corner.
• Select “Report” → “It’s pretending to be someone else” → “Me.”
• You can also take the help of a report via Instagram’s Help Centre, especially if you don’t have an account or can’t access yours. The more evidence you provide, the faster they act.

#3 – Secure Your Account

If someone can create your fake Instagram profile, then they can also try to hack your Instagram account. To avoid this, strengthen your defences with the following steps:

• Immediately change your password
• (2FA), enable two-factor authentication,
• review your login activity, and revoke access to suspicious third-party apps.
• Also, switching your account to private temporarily to limit exposure will also work more effectively.

#4 – Notify your network

Inform your friends, family, and followers: Tell them about the fake account and advise them not to interact with it. Consider posting a story or update: This helps your network identify the fake account and report it as well.

#5 – Prevention Tips – You can make impersonation harder, instead of controlling others

• Avoid posting sensitive personal info, for example, your phone number or address.
• Watermark your photos subtly.
• Regularly search your name on Instagram and Google to catch impersonators early.

And what if Instagram still doesn’t respond?

Try reporting the account again through the app and web form. You can also try reaching out to Instagram Help Centre or social media platforms like X (formerly Twitter) or Threads, if applicable.
If you have a business or verified account, you can contact Meta Business Support.

Final Thought: Stay Calm, Stay Smart. A fake profile can feel like a danger, but you’re not powerless. By acting swiftly and smartly, you can shut down the imposter and reclaim your digital space. Remember, your online identity is yours, and guard it like your passport.

Suggested:

Instagram threads by Meta – All you need to know.

8 Powerful ways to increase Instagram reel views.

The post Imposter Alert: What to Do When Someone Creates a Fake Instagram Profile of You? appeared first on Tricky Enough.

Samsung’s New Security Update and its Features

Samsung’s Cloud Enhanced Data Protection ensures that users’ data stays safe and secure in Samsung Cloud. This feature will be available from the Galaxy S24 onwards and provide users with more security when data has been synced with Samsung Cloud.

This feature decreases the loss of data through E2EE (end-to-end encryption), which makes the data accessible only to the users themselves. Additionally, users will be provided with a recovery code for the prevention of data loss. This recovery code can be used in case the user loses their device.

Users can access the Samsung Cloud Enhanced Data Protection by going into Settings of the Samsung Cloud App and clicking on Security and Privacy. Users will then have to click on More Security Settings choose the Enhanced Data Protection and finally switch on the Encrypt Backup Data and Encrypt Synced Data. However, this feature is only available on devices that use the Enhanced Data Protection feature.

Samsung has also introduced Quick Share’s Private Sharing. This feature ensures privacy and security while sharing files on Quick Share. It should be noted that this feature only functions between two Samsung devices.

Users will be able to share files only with contacts that they have selected. Furthermore, once the files have been shared, the recipient cannot share the files with other people. Screenshotting the files has also been blocked when using this feature.

To access this feature, users can turn this mode on inside Quick Share. Once it has been turned on, users can share files up to 200MB.

Suggested:

Samsung Galaxy AI is here to change the world.

Samsung’s XR Headset Soon Compete Against Apple’s Vision Pro.

The post Samsung’s New Security Update for Galaxy Users appeared first on Tricky Enough.

This new mandate is part of Microsoft’s Secure Future Initiative and will be put into action starting in September. This move by the tech giant restricts its employees from using Android devices to follow cybersecurity measures. Employees must now use Apple devices to verify employees’ identities on their work devices. 

Microsoft aims to make sure that employees make use of the Microsoft Authenticator password manager as well as the Identity Pass app. Thus, employees will be able to access their work devices after undergoing Microsoft’s identity authentication checks. Microsoft workers with an Android phone will be given an iPhone 15.

Microsoft China and Reason for Its Mandate

This move by the tech giant may be due to Google Play’s unavailability in China. However, Apple’s App Store remains available so this might be a contributing factor behind the ban. Furthermore, Chinese mobile brands such as Xiaomi and Huawei already have their own separate and independent platforms. 

Previously, state government agencies and companies in China banned iPhones in the workplace due to cybersecurity measures. iPhones were already facing a decrease in popularity in China so the Microsft mandate may relieve some of the negative attention Apple had received earlier. 

Suggested:

Microsoft’s Latest Tool – Unlock Your Maximum Ad Earnings Potential

Microsoft In Plans To Remove WordPad

The post Microsoft China New Mandate to Allow Only iPhones for Workers appeared first on Tricky Enough.

Flashback to March 2020. Lockdown hits, and newspapers echo the cliché of the ‘new normal.’ Businesses scramble to embrace online platforms like Zoom while cybersecurity takes center stage. However, fast forward two years, and the surge in security startups, including Worldr, signals that the threat persists.

Now, what sets Worldr apart? It boils down to one word: simplicity. Nestled in London, this platform effortlessly weaves privacy, security, and compliance layers into some of the globe’s most widely used business communication tools—think Microsoft Teams, Slack, and WhatsApp. However, in the evolving narrative of digital security, it stands out for its commitment to making protection easy and accessible.

Worldr keeps your data protected

In an era where hackers and malware are leveling up (with a 31% surge in cyber attacks in 2021), Worldr provides customers with the utmost assurance that their data remains shielded. How? Through their zero-trust architecture, adopting a “never trust, always verify” approach to every device, user, or application engaging with your network.

Unlike other applications demanding lengthy implementation, Worldr claims a swift rollout—less than 10 minutes—asserting its products sit seamlessly atop your existing architecture. This sets a high bar for data protection and demystifies the often complex realm of cybersecurity, particularly for SMEs and startups navigating these digital waters.

Cybersecurity over the top

Worldr is simplifying the often perplexing world of cybersecurity, especially for SMEs and startups. This app boasts some impressive backers, earning recognition as a Rising Star Finalist by Tech Nation in 2020 and securing a substantial £280,000 investment from InnovateUK.

Having disclosed a robust $11 million (£9.9 million) seed funding last year, Worldr now wields substantial capital to fuel its expansion efforts. The focus? Developing additional secure layers for various communication platforms, including email.

Positioned as a clever and disruptive system tailored for the businesses of tomorrow, Worldr earns its spot as one of the top startups to watch in 2023. However, the journey of simplifying cybersecurity for small businesses continues, and Worldr is at the forefront of this transformative narrative.

Recommended:

Poly AI – Conversational Voice Assistance.

The post Worldr helps you Keep your Business Communications Tool Secure appeared first on Tricky Enough.

A major vulnerability affecting the Forminator WordPress Contact Form plugin up to and including version 1.24.6 was disclosed by the U.S. Government’s National Vulnerability Database (NVD).

According to the warning, malicious files can be uploaded to websites by unauthenticated attackers, which “may make remote code execution possible.”

On a scale of one to 10, with 10 being the most serious vulnerability level, the vulnerability score rating is 9.8, with 1 being the least vulnerable.

Potential For Unauthorised Attacks

In order to exploit many vulnerabilities, an attacker typically has to be a WordPress user or higher. For instance, although specific vulnerabilities are accessible to users with the subscriber user level. Others require the contributor or admin level to be exploited.

This vulnerability is especially concerning because it enables unauthenticated attackers. Those with no user level at all to successfully hijack the website.

The attacker can upload an arbitrary file, which refers to any kind of file, such as a malicious script. This is another reason why this vulnerability is rated 9.8 on a scale of 1 to 10 (critical).

Execution of Remote Code

An exploit that allows the attacker to remotely execute malicious code on the targeted website. From another computer is known as a remote code execution (RCE) vulnerability. An entire site takeover could cause more harm than this kind of hack.

Contact Forms Must Be Strictly Controlled

WordPress plugins that permit logged-in or anonymous users to upload anything. Including text or photos, must have a method to restrict what can be uploaded. Because they allow public feedback, contact forms need to be particularly secure.

Suggested:

WordPress Now Offers A Content Generator Powered By OpenAI, With Free Access.

WordPress has made a Free Course on Creating and Monetizing Membership Websites Available.

WordPress in Discussion Towards AI Integration.

The post Report: Up to 400,000+ Websites Are Affected by the Forminator WordPress Plugin Vulnerability appeared first on Tricky Enough.

With results about you, removal requests for pornographic personal photographs, and improved parental controls, Google increases its privacy capabilities. 

Google unveiled improved privacy control tools with fresh capabilities aimed at giving users more control over their personal information in Google search results.

Dashboard And Notifications: Facts Concerning You

Google’s Results About You feature has been dramatically improved, expanding on a function introduced last year.

Users of this facility can ask for the removal of any personal information that might show up in search results, such as phone numbers, addresses, or emails.

The new version alerts users when their contact information appears in search results. And gives them the option to request its removal right away.

Additionally, this enhanced tool comes with a brand-new dashboard that notifies users when their contact information appears in search results, adding another layer of security.

For Families, Explicit Content Is Blurred By Default

Additionally, as an added degree of security for families worldwide, Google is rolling out SafeSearch blurring options. As a result, graphic images in search results including those with violent or adult content are automatically hidden.

Users can disable this capability unless a network administrator for the school or a parent is in charge. In the Search interface, Google has also made it simpler to access parental settings.

Removal of Private and Sensitive Images from Search Results

Concerns about pornographic images and photos appearing in search results have also been addressed by the internet giant. In cases where the content isn’t already being used for commercial purposes. Users can now ask for the removal of explicit personal photographs from Google searches.

Although these improvements have been made, Google emphasizes removing information. From search results do not remove it from the internet or other search engines. Google emphasized the need for ongoing attention to maintain control over personal information online.

Suggested:

To Support Advertisers During The Holiday Season, Google Recently Unveiled New AI Tools.

Google Reveals Google AdSense & Analytics 4 Integration.

The post Google Upgrades Privacy Tools To Safeguard Personal Information appeared first on Tricky Enough.

If you’re an iPhone user, then you must be alert and careful before what you click on. There’s a new cyber threat found via Kaspersky Internet Security that targets iPhone devices and takes complete control of the device.

One of the biggest cybersecurity and antivirus software companies ‘Kaspersky Internet Security’ recently found a cybersecurity threat called ‘Triangulation’. This threat targets old versions of iPhones, such as iOS 15.7, and gains complete access via the iMessage app.

iMessage App at Risk kaspersky internet security

The iMessage app contains a malicious attachment that automatically installs spyware & takes complete control over the iPhone and its data.

As per the Kaspersky report, they just uncovered a cybersecurity threat. It is extremely complex & targets iPhone devices via the iMessage app by auto-installing spyware and taking complete control of it.

Operation Triangulation

Also, Kaspersky CEO Eugene Kaspersky tweeted about this iOS attack, and it is called Triangulation. He said, “Our investigation of this Triangulation continues, and we expect further details to be shared soon.”

In the Kaspersky report, they said that their team of iPhone users recognized this malware attack. This threat is quietly entered via the iMessage app and gets access to microphones, cameras, photos, messages, geolocation, and other sensitive data. 

He also said that this threat had been neutralized and complete vulnerability details had been sent to the Apple company.

Further investigation shows that dozens of iPhone devices were infected with this attack.

The Zero-Click Attack kaspersky internet security

Getting this threat inside the iPhone device is easier; the user will receive a message on the iMessage app with an attachment. When the user opens the message, a threat will automatically go inside the device and take complete control over the device. Once the hacker gets complete control, the message with the attachment will automatically be selected from the device.

On Friday, Kaspersky also released tools to identify if the device is infected. 

One of the clear indications or ideas to check this Triangulation attack on iPhone devices was that it turned off the iOS update and didn’t allow users to update their iOS version. 

The CEO of Kaspersky noticed that turning off the iMessage app can prevent iOS devices from being attacked. iOS 16 seems safe from this Triangulation threat, and there are low chances but not guaranteed.

Apple iOS 16.3 Updates

Furthermore, Apple released major updates that fixed vulnerabilities with iOS 16.3 and MacOS 13.2 supported iPhone, iPad, and Mac devices.

Suggested:

What Security features must have in Good Antivirus?

How To Remove Malware From Computer?

The post Kaspersky Finds Cybersecurity Threat that Targets iPhone Users via iMessage to Gain Access appeared first on Tricky Enough.

The decision is based on research done by Chrome which shows that the current icon is misleading the users and is also a security risk.

Why is HTTPS Lock Icon going to replace with a new one?

The lock icon indicates a secure connection, but this was not the norm. There was a misconception that HTTPS or secure connections are only for eCommerce and financial websites. Because on these websites, money transaction involvement is high. For other websites, it is not required. But with the increasing awareness about data security, publishers started using secure connections to ensure data privacy and security.

Read Google Chrome’s Official Announcement page:

https://blog.chromium.org/2023/05/an-update-on-lock-icon.html

Lock Icon Misleading the Users

It may sound vague, but a Google search revealed that users misunderstand the meaning of the lock icon to give a sense of security.

In reality, the lock icon doesn’t indicate the site is secure to use, but it only indicates that the connection is via a secure protocol.

Reports show malicious publishers can also use HTTPS by adding a secure site connection. This result in users becoming a victim of data leaks.

New HTTPS Tune Icon

Google intended to communicate HTTPS more accurately with their users. So, they are updating HTTPS icons to tune icons.

Google Fonts shows the following examples:

Chrome will feature the following new icon:

As per Chrome, tune icons are not misleading and don’t indicate security. Along with that, it will provide all information same, like the lock icon.

The redesign will implement in the google chrome September 2023 release. They claim that they will entirely remove its old icons from iOS and Windows, both versions of Chrome. To know more about Google algorithms updates read here.

Suggested:

Benefits of SSL Certificates for WordPress Website.

How to get a free SSL certificate?

The post Chrome Announces the Redesign of its HTTPS Lock Icon appeared first on Tricky Enough.