Adventure Travel Safety Protocols

As I've been writing my new book The Invisible Threat, I have been detailing examples of the need to continually assess our cybersecurity. Some years ago I looked at a case where a criminal set up an evil twin Wi-Fi router near a Starbucks and harvested the information of everyone that connected. But this story has my eyes raised! Imagine this: Sarah, a frequent traveler, connects to what she believes is the in-flight Wi-Fi to check her emails. Unbeknownst to her, a cybercriminal a few rows behind has set up an evil twin network, mimicking the airline's legitimate Wi-Fi. As Sarah logs in, the cybercriminal intercepts her data, gaining access to her personal information inflight. This actually happened! Earlier this month, Australian Federal Police arrested a man for executing such evil twin Wi-Fi attacks on multiple domestic flights and at airports in Adelaide, Melbourne, and Perth. The suspect allegedly created fake Wi-Fi networks, prompting passengers to log in with their email or social media credentials to harvest their logins for these accounts. How to protect yourself! *Avoid Logging In: Free Wi-Fi should not require email or social media logins. *Use a VPN: Encrypts your data and secures your connection. *Disable File Sharing: Prevent unauthorized access to your device. *Forget Networks: Manually forget public networks after use to avoid auto-reconnections. Stay vigilant in public places and always remember to assess your security. Nothing is ever free. Please Share this post to spread awareness! #CyberSecurity #WiFiSafety #TravelTips #DigitalSafety #TechNews

How Ransomware Almost Stole My Spotlight A few years ago, while on a routine business trip to Kuala Lumpur, I was giving a company presentation when I realised that my greatest risk was not forgetting my words but rather my digital security. Seated at a cramped desk in my hotel room, I rehearsed my presentation with my laptop connected to the hotel's public Wi-Fi, navigating each slide as though I had delivered it a thousand times. All my meticulous work resided solely on the notebook's hard drive. I was ignorant of the hidden dangers of that unsecured network. While setting up at the regional conference, a fellow speaker's laptop fell victim to a ransomware attack. Within minutes, their slides were sealed behind an encrypted vault. I watched the organisers frantically attempt to salvage the session, my heart pounding as I imagined the same disaster befalling me. Determined never to experience such anxiety again, I developed a speaker-specific cybersecurity routine based on simple daily habits. Pre-trip organisation Before every journey, I tidy and organise my laptop by backing up crucial data to a secure cloud vault and external storage, retaining only essential files, and removing any unused applications that have not been used for more than three months. Secure connections Whenever I use airport or hotel Wi-Fi, I first connect to a VPN so that every keystroke, file transfer and message remains encrypted. Strict wireless management I disable Bluetooth when I'm not using it and disable Wi-Fi auto-connect to prevent unauthorised networks or headsets from connecting. Multiple backups I keep copies of my slides in protected cloud storage as well as on a trusted thumb drive so that I never rely on a single source. Post-trip sanitisation After each trip, I forget all saved Wi-Fi networks, clear cached credentials, and either archive or delete files I no longer need while backing up the rest to both the cloud and an external hard drive. I know this sounds like a lot of work, but each habit is now as natural as my morning cup of tea. It may add minutes to my prep, but it saves me hours of panic and ensures no malware or ransomware ever steals the spotlight from my presentations. Over to you Which cyber-hygiene habit do you rely on most when presenting or travelling? Share your tip below and help us create a collective checklist so that every speaker can step into the spotlight with confidence. #alvinsratwork ✦ #ExecutiveDirector ✦ #cybersecurity ✦ #cyberhygiene ✦ #Cyberawareness ✦ #BusinessTechnologist ✦ #Cyberculture 

As we embark on exciting journeys this holiday season, let's take a few moments to consider our information security. Here are some travel tips that can improve your cybersecurity and enhance your travel experience.   💻 Before Your Trip: Before beginning your journey, take some time to make sure your devices —laptop, smartphone, and tablet— have the latest operating system updates and security patches. Devices that are updated will be resistant to exploitation attempts. Use the data encryption features that are available on most devices to prevent the exposure of information if a device is lost or stolen.   📱 Depending on your risk profile, consider traveling with alternate devices that do not contain any sensitive personal or business data.   🔒 Obtain a Virtual Private Network (VPN) subscription to maintain privacy for while using public WiFi access points. It encrypts your internet connection, and your safeguarding sensitive information from prying eyes.   🗺 Download map data for the cities you will visit. This will allow you to navigate without using cellular data. I also download some podcasts, and videos for entertainment on the flights. This reduces the need for connecting to potentially insecure public networks.   🛫 While Traveling: Be mindful of what you share on social media. Avoid broadcasting your exact location in real-time, to reduce the risk of being targeted.   🔎 Use Bluetooth trackers to keep track of luggage and help locate items if they are lost.   📄 Protect your trip details and boarding pass. Do not post photos of your boarding pass. Threat actors could obtain your trip's record locator and your frequent flyer account number. This information can be used to change your itinerary or even cancel your flight. Digital security is as crucial as packing your bags! Stay safe and enjoy your travels! 🌍🔒 #CyberSecurity #TravelSecurity

Microsoft Issues New Hotel Wi-Fi Threat Every Business Traveler Should Know About I thought this new alert from Microsoft was an important one to share with my network. Yesterday, Microsoft Threat Intelligence has disclosed a new campaign called “CaptiveCrunch,” linked to a Russia‑associated threat actor. What makes this different is important: Travelers may be connecting to the real hotel Wi‑Fi—and still be at risk. Attackers can manipulate network traffic behind legitimate captive portals (the hotel login page you normally trust), redirecting users to malicious pages that mimic browser or software updates. This isn’t just “don’t use fake Wi‑Fi.” Even trusted hotel networks can be compromised in the background. What travelers should do 1. Prefer cellular or personal hotspot for sensitive work 2. Use a trusted travel hotspot when possible 3. If using hotel Wi‑Fi, use VPN + corporate security tools And critically: never install updates prompted by a hotel Wi‑Fi page. If a “required update” appears after connecting, disconnect - update only through official sources on a trusted connection. Cyber risk is now a core part of travel risk management. Travelers carry direct access to corporate systems, and environments like hotels and airports are increasingly targeted.

Traveling & Cybersecurity: Pack Light, Stay Safe, Avoid Disaster Traveling these days isn’t just about catching flights and dodging middle seats (my personal idea of hell)—it’s about risk management. If you’ve ever had your credit card frozen overseas or connected to airport WiFi and immediately regretted it, you know what I mean. And guess what? Cybersecurity is the same game. Just like you wouldn’t stroll through a crowded market flashing wads of cash, you shouldn’t be digitally reckless either. So, let’s talk travel tips that double as cybersecurity best practices: ✈️ Pack Light – In high-risk countries, less is more. Consider a clean laptop/phone—a device with minimal data that you can wipe after your trip. The fewer digital valuables you bring, the less there is to steal. 🔐 Lock It Down – Just like you wouldn’t leave your passport lying around, secure your devices. Use strong passwords, multi-factor authentication (MFA), and encrypted backups. And for the love of cybersecurity, disable auto-connect on WiFi. 🛂 Watch Where You Swipe – ATMs and credit card skimmers are a traveler’s nightmare. Online, the equivalent is phishing and social engineering. If a website, email, or “urgent” request makes you feel a big emotion, pause before you click and verify another way. 📡 Use a VPN – Public WiFi is a hacker’s playground. Whether you’re sipping espresso in Rome or waiting on a layover, encrypt your connection before logging in. If you wouldn’t shout your banking details across an airport lounge, don’t broadcast them over open WiFi. 🕵️ Know the Local Threats – Different regions, different risks. Some countries are notorious for cyber espionage. If you’re traveling somewhere with an extra interested government, assume your devices are being monitored. (Yes, YOU!) Plan accordingly. 🔌 Charge Smart, Not Stupid – Public charging stations? Juice-jacking paradise. That two-way data transfer cable you use every day could be the reason your phone gets compromised. Invest in a one-way charge-only cable or, better yet, use an old-fashioned outlet plug. The price of a safe charge is a lot cheaper than getting hacked. 🚨 Have an Exit Plan – If something goes sideways—whether it’s a lost passport or a hacked account—you need a backup. Have emergency contacts, alternate logins, and a way to remotely wipe your devices if needed. At the end of the day, travel and cybersecurity both reward the prepared and punish the careless. The question isn’t if something will go wrong, but when—and whether you’re ready for it. Stay sharp. Stay safe. And please, stop using “123456” as your luggage combination (or 007). What other cyber travel tips do you have to share with others?? Let’s help one another!👇 #Cybersecurity #HumanRisk #TravelTips #SecurityFirst #Infosec

🚨 Why Sharing Travel Tickets Online is a Hacker’s Dream Come True 🚨 We often share moments of excitement on social media—like photos of bus or flight tickets. But did you know that such seemingly harmless posts could expose you to serious risks? Take a close look at these tickets. Here’s what a malicious hacker could do with the information they contain: 1.Personal Information Theft: Your name, travel route, and contact details could be used for identity theft or phishing attacks. 2.Travel Disruptions: Using the ticket number, hackers can access booking portals, modify or cancel travel plans, and even claim refunds. 3.Account Takeover: If your ticket or airline account has weak security, hackers could breach it to steal loyalty points, personal data, or even make fraudulent bookings. 4.Physical Security Risks: Sharing departure and arrival details publicly exposes your location, potentially putting your home at risk during travel. 5.Social Engineering: Details from your ticket can be combined with other publicly available information to craft convincing scams. What You Should Do Instead: Avoid posting photos of tickets or boarding passes online. Blur sensitive information like ticket numbers, names, and QR/barcodes if sharing is necessary. Regularly review and strengthen your account security—use strong, unique passwords and enable two-factor authentication (2FA). Be mindful of oversharing—cybersecurity starts with awareness.

Traveling for work this summer? Be careful on hotel or public Wi-Fi.     Microsoft Threat Intelligence recently observed a Russian actor compromising hospitality-related networks to steal credentials, gain access to cloud environments, and deliver malware to travelers. The bigger lesson isn't just about hotels. Attackers are increasingly exploiting trusted systems and familiar experiences to make malicious activity look legitimate.    A few habits that can help reduce risk:  ▪️ Use a personal hotspot for sensitive work. Public and guest Wi-Fi should be treated with caution.  ▪️ Be skeptical of unexpected sign-in requests. If something feels unusual, verify before proceeding.  ▪️ Use passkeys and MFA. They can help protect your accounts even if credentials are compromised.  ▪️ Don't download software from a Wi-Fi login page. Updates, certificates, and "network tools" should raise a red flag.  ▪️ Trust your settings, not a pop-up. Install updates through your device's built-in update tools, not through a webpage.    More from Microsoft Threat Intelligence here: https://lnkd.in/gcJQmPBc Safe travels! 

Before any major international trip, and the World Cup is going to be one of the biggest, I'd run through this short cybersecurity checklist: 1. Patch everything before you leave. Every device coming with me gets updated to the current patch level. Operating system, browser, apps, everything. I do this the day before I fly, not the morning of, because patches occasionally break something and I'd rather find out at home than in a hotel room in another country. This is the cheapest, most boring step on the list, and it closes more doors than anything else you'll do. 2. Load a good VPN on every endpoint you're traveling with. You're going to end up on a lot of weird wireless networks. Hotel Wi-Fi, stadium Wi-Fi, the coffee shop near your hotel, the airport lounge between connections. You have no idea who else is on those networks or what they're running. A VPN isn't a magic shield, but it raises the cost of casual snooping to the point where most opportunistic attackers move on to easier targets. Load it before you leave, test it on your home network, and make sure it actually launches on every device you're bringing. 3. Stop flashing digital credentials at networks you don't know. Your phone now carries your driver's license, your passport in some cases, every credit card you own, your corporate SSO, and probably your house keys. Tapping to pay at a stadium concession is one thing. Connecting your phone to a random kiosk to charge it, or letting an app you've never heard of access your wallet to "verify" you, is something else entirely. 4. Don’t take any device that you don’t absolutely have to have. Two quick add-ons that aren't really cybersecurity but belong on the same list: make sure your backups successfully run before you leave, and turn on Find My (or the Android equivalent) so you can locate the device if you misplace it in a crowd of 80,000 people, or someone decides they need your device more than you do.