Security Awareness Pillows

Security Awareness Hacker Sloth

Funny design about the bad practice of sharing passwords in clear text over email, messaging applications and ticketing systems. They should be shared through a password management tool or one time secret applications.

Despite all your efforts to increase the security posture of your organisation and no matter how good are the tools you are using, the malicious actors will always try to take advantage from the users which normally are the weakest part of the organization security.

The passwords 123456, qwerty, password and guest are some examples of the most used in any account, making them a terrible choice to protect your identity. That's why they are dreadful and this dark background design was made for awareness to fight against this bad practice.

Phishing is one of the most used methods by attackers to compromise a target organisation. No matter how sophisticated your security controls are, it can be defeated by attacking the weakest security layer which normally are the humans. This design gives a hint on when an email is suspicious of phishing attempt.

It is really important to aware or even train the coworkers to detect phishing so they will think twice before clicking any link on any suspicious email. In any case, this design will help to spread the word around your organisation.

It is really important to concern coworkers to not plug any lost USB pendrive in any device. They are suspicious, cannot be trusted and potentially could trigger malware and infect the entire network.

Yet another security awareness design, but not less important, about the bad practice of saving clear text passwords in notepad. They should be saved in a password manager tool instead. This is a black background with white letters design version.

IT operation should be really careful when dealing with domain administrators. The best practice is that it should be only one per domain otherwise, it could be a nightmare to manage. This is a version of the design with black background and white letters.

Design about one of the ways that bad guys may use to compromise a target organisation network. If macros or scripts are allowed generally in office documents, then they could potentially use them to execute malware if one of the employees clicks or opens anything evil in a phishing email. A complete headache for cybersecurity team.

This design is about the well-known quote in cybersecurity to remind everybody in your company that the security of the corporate data is their responsibility as well.

Any unused ports should not be left open no matter if it is exposed externally or not. Closing them reduces the attack surface, hence, the chances for an eventual attacker to succeed.

An awareness design to remind coworkers to don't leave unlocked their computers even for going to the toilet.

This design will help you in terms of awareness and training to emphasise the message of not clicking on a wrong or an untrusted link.

Permission Denied by default is what every cybersecurity professional is looking for because is the best practice or the foundation to protect the organization information.

A good practice is to periodically clearing cookies, cache and temporal files from the browser. It might contain trackers that will disclose information from your browsing habits.

Yet another security awareness design, but not less important, about the bad practice of saving clear text passwords in notepad. They should be saved in a password manager tool instead.

A dark background design with white letters. It is really important to concern coworkers to not plug any lost USB pendrive in any device. They are suspicious, cannot be trusted and potentially could trigger malware and infect the entire network.

No matter how much controls or how good they are, the malicious actors will attempt to bypass them with phishing to attack the weakest part of security, the human.

Insecurity- a funny twist on a security guard shirt

Statistics say that 123456 is the most common used password, which is definitely not the most secure passwords possible. To be honest, is not even a password strictly saying since it can be defeated in a blink of an eye. Therefore, as a tip, try to not use this kind of passwords.

The Ukraine flag design of the Cybersecurity Blue Team in badge style. Ideal for your peers working with you in the same cyber security group. Let's prove to the Red Team that they don't stand a chance to compromise anything!

Disabling bluetooth when not using it on devices is a good practice to avoid unnecessary risks, and also saves some battery.

This is one of the best practice which is a must when developing any web server that provides cookies. With the secure flag assigned on cookies, it will only be transferred through HTTPS.

Developers are under great pressure with aggressive delivering dates but, one of the most important things that they shouldn't overlook, is to applying input validation in the functions or methods.

Normally, any authentication through a website is done through HTTP POST method since a form is needed with login information. This could minimise the risk of disclosing the credentials when your browser stores the URL in plan text or even being written in logs on the server side.

A quote design to remind that free open WIFI are not safe, and users should stay away from them if they don't want their accounts to be compromised.

This should be mainstream when it comes to provide access or authorisation but, in some cases, it is not followed properly. Therefore, this design is to remind about this best practice and this black background with white letters version is ideal for it.

Awareness design to remind the importance of validating zip files before decompressing it like limiting the number of files, the decompressed size and a maximum decompressed file size.

The design is about one of the guidelines provided by OWASP, to put in place security measures to restrict the import or usage of packages with known vulnerabilities.

Planet Feeding System - an imaginary solution to a real problem.

One of the ways to reduce the risk is to limit the impact in case of compromise so practicing least privilege is the way.

A funny design of a Shiba Inu telling a good advice regarding pushing secrets in git repositories.

HSTS is a must when it comes to securing web application HTTPS connections. So, if there is no HSTS header, no deal.

Obfuscation is not necessarily the same as encryption and sometimes the terms are confused. But the cryptography awareness is that obfuscation can be reversed, but encryption with a proper strength cannot be decrypted with our current computation power.

Administrators tends to su or login as root to perform privileged actions on Linux systems while they shouldn't. It is a bad practice to use root account so, instead, the recommendation is to use a non-root user to elevate with sudo to perform those actions or give them enough capabilities.