Following the Wannacry outbreak, we were reading about another attack, called Adylkuzz. Both cyberthreats rely on a Windows bug that was patched on March 14 and only affect PCs that haven’t installed the latest version of Microsoft’s software updates.
In light of this news, I thought it would be timely to talk about some common sense recommendations […]
I’d like to share answers to questions recently asked about disaster recovery.
1. What advice would you give to tie cybersecurity protection and IT disaster recovery together for business continuity?
There are a number of activities performed by the IT operational group within an organization that deal with Disaster Recovery. They include performing data backups, using primary/backup datacenters, and […]
There are few new trends in online identity theft, although some attacks are becoming more sophisticated, the basic steps to prevent exploits remains the same.
Be on the lookout for attacks that use broken English in the message body. While most now use proper English and use the same style and logos that are used by […]
Controlling access to the network is fundamental security control. For shared networks, the capability of users to connect to the network should be restricted. Well known security frameworks such as ISO 27002, Information technology – Security techniques – Code of practice for information security management, includes this control as a recommendation. And the […]
Just about everybody shops online these days. Even so, many people worry about security issues and fraud. I was recently asked if I could share some high-level tips and best practices for online transactions. Here is what I recommend:
Other than the technology itself of an IoT device and the service it provides, the single most important characteristic that will define either success or failure, no matter what the size of the business, will be the security of that device.
The IoT is only in its infancy and yet there have already been an alarming […]
While our main focus is as a provider of IT compliance and security consulting services, we have been called in to help a few small businesses handle security incidents and data breaches. These calls come to us after the client has discovered there’s been a security incident or data breach and as a result is seeking to […]
Just as in the 1980s when manufacturing companies recognized that quality was an attribute that had to baked into every facet of an organization (from design, production, delivery, and through product lifecycle), not inspected in at the end of the process, effective cyber security depends on every employee playing a part in keeping the enterprise secure.
The most sophisticated and […]
At the same time that consumers and manufacturers are getting excited about the potential opportunities, capabilities, and revenue that the Internet of Things (IoT) enhanced devices can offer, many are already starting to understand the frightening lack of essential security functionality and the potentially overwhelming opportunities for exploitation.
The IoT is only in its infancy and […]
Technology is only as effective as the people that operate it.
Cybersecurity awareness training is the most cost effective investment any organization can make in preventing data breaches, system compromise, reputational damage, and loss of intellectual property.
No one is born knowing how to use computers and networks securely. There are basic dos and don’ts […]
One of the most popular exploitation methods used by hackers when targeting social media users is social engineering. Using confidence tricks, a hacker can manipulate his target into performing actions or disclosing confidential information. If pulled off successfully, a social engineering attack could result in a hacker gaining complete access to its target’s social media account with little effort.
One […]
Picking up on the conversation from my previous post, the Internet of Things continues to pose challenges for many manufactures as they now have to think about network security for new versions of their products.
One of the worries about the future of the Internet of Things (IoT) is that many of the manufactures that are […]
I’d like to pose a question: What do you think the security implications of connecting various popular IoT consumer electronic devices is?
A) No harder than it was for other new devices like laptops, wireless connections and smartphones, or
B) No easier than it was for previous new devices.
The answer is […]
As smartphones continue to increase in popularity, people can find USB charging stations in almost any location. From airports to malls, businesses are offering their customers a convenient way to keep a full charge. Without much thought, most people are quick to plug their devices into any random USB port that they might find, but doing so […]
In response to a recent query about security pitfalls surrounding social media, Jonathan Shuffler and I came up with the following tips and best practices:
Brad has been a leader of the company since 1995. He has participated in seminal industry initiatives including the Open Software Foundation (OSF), X/Open, the IETF, and has published many articles on open systems, Internet security, security architecture, ethical hacking and web application security.
View my complete profile >>
