Comment

Got crypto?

Nearly $1.49 billion in cryptocurrency losses have been registered to date in 2024, mainly due to hacking incidents, a new report from web3 bug bounty platform Immunefi shows.

The total year-to-date losses have dropped compared to last year, when they surpassed $1.75 billion during the period, and were mainly driven by losses of over $359 million in May and of more than $282 million in July.

https://www.securityweek.com/hackers-stole-1-49-billion-in-cryptocurrency-to-date-in-2024/

Comment

Comment

Are you prepared?

Update, Nov. 27, 2024: This story, originally published Nov. 26 now includes additional information regarding the Matrix campaign’s initial access routes.

Your home router could be running slow as it has become part of the Matrix, according to a newly published report by Assaf Morag, the director of Aqua Nautilus threat intelligence at Aqua Security. Here’s what you need to know about this new and widespread cyber attack.

https://www.forbes.com/sites/daveywinder/2024/11/27/is-your-router-in-the-matrix-35-million-devices-under-blue-pill-attack/

Comment

Comment

Charleston Security Tech (CST) partners with Netgate firewalls!

We are so very grateful to announce our new partnership with Netgate and pFSense.

We look forward to working with Netgate to supply you with the best firewalls with an amazingly low cost.

This partnership aligns with our core beliefs and values, that everyone is entitled to being protected on the internet, while using OpenSource for constant improvements and the un-bloated cost and reliability of Netgate hardware.

Comment

Comment

If you think your ISP and Wifi router protect you, you are wrong.

Here’s a snippet of 1 page of 124 “alerts” from IDS/IPS running on a pFSense Firewall.

As you can see, the illusion you are safe hiding behind a Modem and Brand Name Router is blown away. Below are active Attacks from the internet, BEHIND a router and modem, otherwise known as your “safe” network. Note PortScans, and other malicious attacks creeping right into your home without you knowing!

Truth:

A Router IS NOT a Firewall!

A Modem IS NOT a Firewall!

Comment

Comment

Your mobile phone is no longer "private"

The US government agencies say that China-linked threat actors have hacked into telecom providers to steal call records and data and to spy on individuals.

“Specifically, we have identified that PRC-affiliated actors have compromised networks at multiple telecommunications companies to enable the theft of customer call records data, the compromise of private communications”” the alert reads.

https://www.securityweek.com/cisa-fbi-confirm-china-hacked-telecoms-providers-for-spying/

Based on mobile phone texts, calls, etc no longer bineg “private”, CST recommends a highly respected messaging app called Signal. It is 100% free (a 501c3 nonprofit) organization aimed and founded in privacy. You can use this messaging app to text and make phone calls with industry strength cryptography, an no trackers.

https://signal.org

“State-of-the-art end-to-end encryption (powered by the open source Signal Protocol) keeps your conversations secure. We can't read your messages or listen to your calls, and no one else can either. Privacy isn’t an optional mode — it’s just the way that Signal works. Every message, every call, every time”

Comment

Comment

Is it REALLY a FREE VPN?

Free VPNs and the Privacy Tradeoff

While free VPNs might seem like an attractive option, they often have serious downsides when it comes to privacy. Here's why using them could put your PII at risk:

  • Tracking and Monetizing Your Data: Many free VPNs make money by collecting and selling your data to third parties, including your browsing history, personal information, and even device data. This undermines the core reason for using a VPN—to protect your privacy.

    • Advertising and analytics: Free VPN providers often use your data to serve targeted ads or for marketing purposes.

  • Limited Transparency: Free VPN services may not have the resources to maintain robust privacy practices. They may not be transparent about what they log or who has access to your data.

    • Some free VPNs have been caught logging detailed user activity or even selling bandwidth from their users to create a peer-to-peer network.

  • Weak Encryption and Security: Some free VPNs may compromise your data’s security by offering weaker encryption or running outdated software. This can leave your personal information exposed to hackers, especially if they lack the infrastructure to protect your traffic.

  • Potential for Malware: Some free VPN apps have been found to include malicious software or adware that can steal your data or track your activity.

In addition to pFsense having Enterprise level firewall protection, it also provides many other helpful features for which people pay monthly fees - for example a VPN service. This is actually included in PFSense (a VPN Server) and you no longer have to pay someone to host your VPN connection. Keep in mind that all VPN traffic is decrypted at the endpoint. Thus, it’s important that you trust the company that you are paying this service for, as they have all of your logins and passwords. And if you’re using a “free” VPN service - well, it’s not really free. Look at it this way: If you're providing all of your logins to banks, email, investments, etc., then you’re “paying” them in the form of your personal data, which they sell for money…so it’s not REALLY “free” for you because your giving all of your information away. Whereas, when you use the PFSense VPN, it is your VPN. Therefore - most importantly - you are maintaining security, privacy, and control of your own data. 

Comment

Comment

Firewall software and licensing. Should you pay another company or go 100% FREE with OpenSource?


COMPARING CST WITH THE TOP 3 FIREWALL COMPANIES

the FIREWALL SOFTWARE IS 100% FREE.

the FIREWALL LICENSING IS 100% FREE

You ask, so what’s the catch? CST provides installation services for this free OpenSource Firewall software. This is a one time labor fee, compared to multiple $1000’s per Year or even Month! See below.

The cost of firewalls from major vendors can vary widely depending on factors like deployment size, features, licensing models, and support options. Here’s a breakdown of typical cost structures for some of the leading firewall companies.

 1. Palo Alto Networks

   - Firewall Models: 

     - PA-220 (for small businesses): Starts around $300–$500 (one-time hardware cost).

     - PA-820/PA-3220 (mid-range): Around $2,000–$7,000.

     - PA-5260/PA-7000 (enterprise-level): $20,000 and up (with higher-end models reaching $50,000+).

   - Subscription Costs:

     - Threat Prevention, URL Filtering, and WildFire (cloud-based malware prevention): Around $500–$1,500 per year per appliance.

     - GlobalProtect VPN: ~$3,000–$10,000 annually (depending on users).

     - Panorama (centralized management): Can cost $2,000–$5,000+ annually.

   - Total Cost of Ownership (TCO): $5,000–$100,000+ per year, depending on the deployment scale.

 2. Fortinet

   - Firewall Models:

     - FortiGate 60F (entry-level for SMB): Around $400–$600 (one-time hardware cost).

     - FortiGate 200E/300E (mid-range): Around $2,000–$7,000.

     - FortiGate 6000E/7000E (enterprise-grade): Prices start around $20,000 and can exceed $50,000 depending on the configuration.

   - Subscription Costs:

     - FortiGuard Security Services (includes antivirus, IPS, web filtering, etc.): ~$500–$3,000+ per year.

     - FortiAnalyzer (log management): Around $1,000–$4,000+ annually.

     - FortiManager (centralized management): Can range from $1,500–$10,000 annually, depending on scale.

   - Total Cost of Ownership (TCO): $1,500–$50,000+ annually.

 3. Cisco

   - Firewall Models:

     - Cisco ASA 5506-X (for small to medium businesses): Around $300–$500 (one-time hardware cost).

     - Cisco Firepower 1010 (mid-range): Around $500–$1,500.

     - Firepower 4100/9300 Series (high-performance, enterprise-grade): $10,000–$50,000+.

   - Subscription Costs:

     - Cisco Threat Defense Services (includes malware defense, URL filtering, and AMP): Starts at $500–$5,000+ per year.

     - Cisco Umbrella (cloud security service): $2,000–$20,000+ annually, depending on users.

     - Firepower Management Center: Starts at $1,000–$5,000 annually.

   - Total Cost of Ownership (TCO): $1,500–$50,000+ annually, depending on scale.


Comment

Comment

The Importance of Security: Why a Dedicated Firewall is Essential in 2024

As we navigate through 2024, the digital landscape is more interconnected than ever, making robust cybersecurity practices crucial for organizations of all sizes. Recent statistics reveal a troubling increase in hacking incidents, data breaches, and compromised user information, underscoring the urgent need for effective security measures—particularly dedicated firewalls.

The Alarming Reality of 2024: Hacking Statistics

This year, cyberattacks have surged, with reports indicating that over 60% of businesses experienced a security incident in the first half of 2024 alone. Notable high-profile breaches included major corporations across various sectors, from finance to healthcare. According to the latest data:

  • Data breaches exposed sensitive information for over 300 million individuals.

  • The average cost of a data breach for companies rose to $4.5 million, with some incidents leading to losses exceeding $10 million.

  • Ransomware attacks have increased by 40%, with attackers often targeting companies with insufficient security measures.

These figures are not just statistics; they represent real impacts on businesses, consumers, and the overall trust in digital systems.

Understanding the Role of a Dedicated Firewall

A dedicated firewall acts as a barrier between your internal network and potential external threats. It filters incoming and outgoing traffic based on predetermined security rules, helping to safeguard your sensitive data.

Comment

Comment

October is Cybersecurity Awareness Month!

We can all joke how there seems to be a day or month for almost anything. National Ice Cream Day, National Pet Tricks Day, National Flip Flop Day,…and so many more. And those things have their places, don’t get me wrong. (Actually, Ice Cream Day should be every day in my book, but I digress…) But one topic that almost everyone could take a serious stance on these days - staying safe online. So, with that in mind, Happy Cybersecurity Awareness Month!

According to CISA, for twenty years now, our federal elected officials have “declared October to be Cybersecurity Awareness Month, time dedicated for the public and private sectors to work together to raise awareness about the importance of cybersecurity.” It’s a great time for the added reminders of changing and strengthening passwords, updating software, and giving your network a wellness check. Are we keeping out what we don’t want on our networks and protecting what we have on there?

If this seems overwhelming, you’re not alone. And we get it. That’s part of why Charleston Security Tech started offering the services we offer. We want to help empower our clients to feel safe within their digital environments. Feel free to reach out with questions or a consultation on your cybersecurity status.

Now, similar to the ice cream thing, Cybersecurity Awareness should not be fleeting. Cybersecurity is important every day of every month. But we do tip our hats to all of the efforts and opportunities that are shared to help make our digital landscape safer for all.

Comment