---
title: "Security Impurities: News of the Week (October 26th - November 1st)"
description: A look at this week’s cybersecurity news, including new security features implemented by Linkedin, the NY Post social media hack and what it means for organizations that care about their public image, and how small and medium-sized businesses (SMBs) are more likely to be hacked according to a CyberCatch report.
---

[Mirai Security | Cyber Security Blog ](https://miraisecurity.com/blog)

# [Security Impurities: News of the Week (October 26th - November 1st)](https://miraisecurity.com/blog/cybersecurity-news-nov1)

 Written by [Alex Morgan](https://miraisecurity.com/blog/author/alex-morgan) | Nov 28, 2022

## **Let that Linkedin…: Linkedin’s new security features to combat social engineering**

We at Mirai have discussed the dangers of [phishing and social engineering](https://www.miraisecurity.com/blog/cyberprimers-phishing), particularly when it comes to harmful messages sent via email, text, or phone calls. However, not all social engineering happens on these platforms. For years, Linkedin has [been a hotbed](https://www.tripwire.com/state-of-security/a-guide-on-5-common-linkedin-scams) for scammers. They phish other users with deepfaked photos, malicious connection requests, and job scams. That is why Linkedin has announced [new security features](https://www.tripwire.com/state-of-security/linkedins-new-security-features-fight-scammers-deepfakes-and-malicious-hackers) to combat these scams.

### **What are these new security features?**

There are three main features Linkedin has introduced to protect its user base. The first is an "about this profile" tab on every account that shows when a Linkedin profile was created and last updated. This makes other users aware of whether an account has been around for years or is brand new (a huge warning sign for scam accounts).

The second is the introduction of technology that allows Linkedin to spot AI-generated profile photos used often by scammers. Finally, they have introduced new protections against harmful messages. The website will now feature warnings for potentially phishy messages.

Linkedin has also asked its users to report any suspicious accounts or messages. With these features, Linkedin is showing that phishing can occur on any platform, and social media websites have a responsibility to fight it.

## **New York Toast: The NY Post Twitter hack and its cyber security implications**

The NY Post suffered an embarrassing incident this past week when their [social channels were hacked](https://www.bleepingcomputer.com/news/security/new-york-post-hacked-with-offensive-headlines-targeting-politicians/). The work of a [rogue employee](https://www.cnbc.com/2022/10/27/new-york-post-website-hacked-racist-sexist-headlines-target-politicians.html), this hack resulted in offensive, phony headlines about US politicians. While the employee has been fired, this hack shows the danger of leaving a company's social media unsecured.

While we have [previously explored the importance](https://www.miraisecurity.com/blog/security-impurities-news-of-the-week-september-28th-october-4th) of removing credentials for *former* employees, the possibility of an attack like this being committed by someone still employed by your organization is very real. For companies like the Post, image is everything, and protecting their social channels is very important.

## **SMBody once told me: Cybersecurity threats for small and medium-sized businesses**

Running a small or medium-sized business (SMB) is not easy. Without the resources to invest in robust security services, companies are forced to take chances. Often, this leads to SMBs taking advice from unqualified sales people. These con artists are more interested in making a sale than properly protecting a business. This can result in SMBs that [lack the protection or cybersecurity knowledge to ward off hackers](https://www.fortinet.com/resources/cyberglossary/smb-cyberattacks).

This week, Vancouver cybersecurity firm CyberCatch [released a report](https://cybercatch.com/smbvr-download/) saying that 80% of SMBs are at risk of a cyber attack.

### **What attacks pose the most risk to SMBs?**

[According to CyberCatch](https://www.tripwire.com/state-of-security/new-canadian-cyberattack-data-says-80-smbs-are-vulnerable), the attacks SMBs are most likely to fall victim to are [spoofing](https://www.knowbe4.com/knowbe4-glossary/#S), [clickjacking](https://www.imperva.com/learn/application-security/clickjacking/), and [session riding](https://malware.news/t/session-hijacking-and-session-riding-lucideus/38711). What's troubling is that although all three episodes can fool businesses small and large, SMBs do not often have the resources to educate their employees and prevent these attacks.

Cybersecurity should not be a luxury that SMBs cannot afford. There are plans SMBs can install that are affordable and effective. However, doing so requires research and a willingness not to trust every salesperson with a catch-all solution.

[View full post](https://miraisecurity.com/blog/cybersecurity-news-nov1)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Alex Morgan"
  },
  "dateModified" : "2022-11-28T21:28:31.735Z",
  "datePublished" : "2022-11-28T21:27:10Z",
  "headline" : "Security Impurities: News of the Week (October 26th - November 1st)",
  "image" : {
    "@type" : "ImageObject",
    "height" : 1020,
    "url" : "https://4425400.fs1.hubspotusercontent-na1.net/hubfs/4425400/eberhard-grossgasteiger-eZF9nZKBev8-unsplash%20%281%29.jpeg",
    "width" : 1000
  },
  "mainEntityOfPage" : "https://miraisecurity.com/blog/cybersecurity-news-nov1",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://4425400.fs1.hubspotusercontent-na1.net/hubfs/4425400/Mirai-Security-Logo-full-color-sml.svg",
      "width" : 225.36586
    },
    "name" : "Cyber Security Blog"
  }
}
```