Cyber & IT Supervisory Forum - Additional Resources

TLP:GREEN

14 W I -F I , B LUETOOTH , N EAR F IELD C OMMUNICATION A ND MAC A DDRESS

Threat actors can compromise devices over public Wi-Fi, Bluetooth, and Near-Field Communications (NFC), a short-range wireless technology. 318 This puts personal and organizational data, credentials, and devices at risk.  Devices include laptops, tablets, mobile, wearable, and others that can connect to public wireless technologies.  The guidance throughout helps you understand the risks in using public wireless technologies and enables them to make calculated decisions about the level of risk they accept.  At a minimum, it is recommended you disable Wi-Fi, Bluetooth, and NFC when not in use. 319 WI-FI Overview There are two kinds of Wi-Fi networks: secured and unsecured. 320 Most Wi-Fi networks that are created for home and business uses are password-protected and encrypted. 321  However, most public Wi-Fi hotspots are set up strictly for convenience – not security. 322  An unsecured Wi-Fi network can be connected to within range and without any type of security feature like a password or login. 323  In contrast, a secured network requires a user to agree to legal terms, register an account, or type in a password before connecting to the network. 324 14.1.1 Public Wi-Fi Recommendations If you need to connect to a public wireless hotspot, it is recommended you use a virtual private network (VPN) to encrypt your web traffic. Do not connect to networks if you are not familiar with them or cannot verify their authenticity. 325 Allow your Wi-Fi to auto-connect to networks. 326  Log into any account via an app that has sensitive information. Go to the website instead and verify it uses HTTPS before logging in.  Leave your Wi-Fi or Bluetooth on if you are not using them.  Access websites that hold your sensitive information, such as such as financial or healthcare accounts. 327  Log onto a network that is not password protected. It is recommended that you DO NOT: 

It is recommended that you DO  Disable file sharing 

Only visit sites using HTTPS .

 Log out of accounts when done using them.  Use a VPN , like Norton Secure VPN, to make sure your public Wi-Fi connections are made private.

TLP:GREEN