Keeper Security

Keeper Security Issues Top 5 Cybersecurity Tips for the 2023 Tax Season

Monday, February 27, 2023

CHICAGO - With the 2023 tax season upon us, individuals and businesses are reminded to stay vigilant to protect their personal and financial information from cyberthreats. Tax season is an opportune time for cybercriminals to send out phishing scams, steal sensitive information, and exploit weaknesses in personal and organizational networks. To help taxpayers avoid becoming victims of cybercrime, Keeper Security is providing the following cybersecurity tips.

#1 Be on the lookout for phishing and phone scams. Cybercriminals have been known to pose as the IRS, tax preparation companies and other tax-related organizations in an attempt to steal your personal information. These attempts can include phone calls, text messages, emails and other forms of communication. To avoid becoming a victim of a phishing attack, do not open attachments or click on links from unknown sources, verify that it's a trusted source requesting the information and check any links to make sure they're not leading you to a malicious site. The IRS will not send unsolicited emails, phone calls or text messages asking for personal information, financial information or payment.

#2 Create strong, unique passwords for all of your accounts. This is especially important for your financial accounts. Passwords should be at least 12 characters with a mix of uppercase and lowercase letters, a variety of symbols and a random assortment of numbers. Also, consider a passphrase rather than a single word. Avoid using easily guessable information such as familiar names, birthdates and addresses. Finally, make sure you have different, high-strength passwords for all of your accounts. This way, if one account is breached, a cybercriminal does not gain access to all your accounts. A password manager can generate and securely store strong passwords, which can be especially useful for accounts that are infrequently used. Consider using multi-factor authentication for your accounts as a second layer of security.

#3 Securely store and share sensitive documents. Tax preparers will require sensitive documents with personally identifiable information (PII) which could include your SSN, Form W-2, an Identity Protection PIN or banking information. While physical copies of tax documents can be locked in a file cabinet or safe, digital copies should be stored on a secure external hard drive or in a secure cloud storage system. Sending these documents through email or text messaging can expose sensitive information. Instead, utilize an encrypted service such as One-Time Share to send tax documents and financial information. Your tax preparer may also use a secure file transfer service. Ensure that you're only sharing this sensitive information with those who need it, such as your tax preparer, financial advisor or lawyer.

#4 Make sure your software is up-to-date. Regularly update your operating system, web browser, security software and other applications to ensure they have the latest security patches and features. Software updates not only patch security flaws that cybercriminals can take advantage of, but also add new features and improve existing ones. It is especially important to check your tax software if you have not touched it since the last time you filed your taxes.

#5 Use a secure WiFi connection when filing taxes or sending tax information online. Public WiFi is a key battleground for cybercriminals. Thus, without proper protections, you may be vulnerable to both a cyberattack and eavesdropping. Open Public WiFi, absent adequate encryption software, should not be used to send any personal or financial information. The use of public computers should be avoided for the same reason. Use a trusted network with a strong WiFi password, a VPN and ensure your home router's software is up to date.

When filing income tax returns, it's crucial to take proactive measures to prevent your personal and financial information from being compromised. By following these simple tips, individuals and organizations will be far less likely to fall victim to cybercrime this tax season. Becoming a victim of identity theft can not only have immediate impacts, but can also create additional steps when filing taxes in future seasons. It's also advised to file early to avoid phishing scams that come up closer to the deadline and to address any issues that may arise ahead of time.

The IRS can issue Information Protection PINs as a proactive step to protect yourself from tax-related identity theft. The IRS has multiple resources available for taxpayers to have their questions answered, learn more about the tax filing process and receive help if your information or identity has been stolen.

Keeper Security Named Winner of Several Coveted Global InfoSec Awards at RSA 2023

Thursday, April 27, 2023

SAN FRANCISCO - Keeper Security,

announced that the company has been recognized by Cyber Defense Magazine, the industry's leading electronic information security magazine, as a winner in the following three categories for the 11th Annual Global Infosec Awards at RSA Conference 2023:

This accomplishment across a variety of categories further illustrates Keeper's position as an industry leader and innovator, as the company transforms the way organizations of all sizes secure their passwords, secrets and confidential information, and protect their digital assets to help mitigate the risk of password-related data breaches and cyberthreats. Keeper's easy-to-use cybersecurity platform is built on a foundation of zero-trust and zero-knowledge security to protect every user on every device, while meeting the most stringent government security and compliance requirements.

"This recognition across multiple categories is a tremendous achievement for our team at Keeper," said Darren Guccione, CEO and Co-founder of Keeper Security. "We're thrilled to share such an accomplishment, which only further highlights Keeper's commitment to provide best-in-class cybersecurity solutions for unmatched visibility, security and control over an organization's most important assets."

"Keeper Security embodies three major features we judges look for to become winners," said Gary S. Miliefsky, Publisher of Cyber Defense Magazine, "Understanding tomorrow's threats, today; providing a cost-effective solution; and innovating in unexpected ways that can help mitigate cyber risk to get one step ahead of the next breach."

This news comes on the heels of Keeper Security's recent launch of a sleek new user interface with a more friendlier and intuitive experience, offering enhanced clarity and searchability for users to enjoy.

Keeper Security Provides Cybersecurity Warning for Retailers This Holiday Shopping Season

Thursday, November 23, 2023

CHICAGO, -- It's a lucrative time of year, and not just for retail businesses. Cyber criminals also look to take advantage of the increased traffic and high sales volume, which provides cover for them to actively target retailers with cyber attacks. Keeper Security, the leading provider of zero-trust and zero-knowledge cybersecurity software protecting passwords, passkeys, privileged access, secrets and remote connections, is sharing cybersecurity best practices for small businesses to help protect sensitive systems and valuable customer data during the biggest shopping week of the year.

Cyber criminals utilize a range of tactics to gain access to an organization's systems and valuable data during this hectic time, which can include phishing attacks, ransomware, malware, business email compromise and more. Preparing for and actively defending against cyber threats is essential to maintain the security of customer data and transactions during the holiday shopping season and year-round. Retailers should implement a multi-layered approach to cybersecurity, including the following:

• Conduct employee training- According to Verizon's Data Breach Report, 74% of security breaches involve the human element, including falling victim to social engineering, stolen credentials or simply making an error—misplacing passwords, for instance. Cybersecurity training should be an integral part of onboarding, while phishing tests and supplemental training should be conducted regularly so employees can stay up-to-date on the latest threats.



• Regularly update software- Ensure all systems and software, including Point of Sale (POS) terminals and e-commerce platforms, are up to date with security patches to protect against known vulnerabilities. Install antivirus software and ensure it is regularly updated to defend against the newest threats.



• Secure sensitive systems- To secure payment processing, ensure you're using trusted tools and isolate your payment systems. Implement privileged access management to secure and manage access to privileged systems and accounts, such as payroll and IT. Implement the principle of least privilege to ensure employees only have access to the systems and accounts they need to do their jobs. Set up an intrusion detection and prevention system to monitor for suspicious activity and potential threats.



• Protect customer data- Regularly back up and control access to data by appointing administrators and monitoring user permissions. Review your existing data collection practices and policies to ensure you understand the user information your organization is collecting and get rid of any dark data your organization is not using. If your company doesn't absolutely need a piece of information about a customer, don't collect it.



• Implement an enterprise password manager- Weak and compromised passwords are the biggest threat to a retailer's cybersecurity. In addition to giving IT admins visibility into employee password practices and enabling them to enforce password security policies, such as the use of strong, unique passwords and MFA, an enterprise password manager helps prevent employees from entering their credentials on phishing sites.



• Secure your WiFi network- Protect your network with a strong password that is at least 16 characters, featuring a randomized mix of letters, numbers and special characters. If encryption is not already enabled, you can update it in your ISP admin settings. The majority of routers already have built-in firewalls, so ensure that's enabled as well. Use a Virtual Private Network (VPN) to allow remote workers to connect securely from outside the office.

By taking these steps, retailers and small businesses can bolster their cybersecurity posture and better protect their systems and data during the high-stress period of Black Friday and Cyber Monday.