Understanding the Growing Threat Landscape and Prioritizing Cybersecurity Measures Recently, a website hosting provider by the name of Jelly Bean Communications Design got itself into some serious trouble with the company facing charges under the False Claims Act. The US Department of Justice (DoJ) explained how Jelly Bean had been contracted in 2013 by Florida…
Details
The Lessons Learned from the SolarWinds Cybersecurity Breach What happened to SolarWinds? For many of us, SolarWinds was a big name in the IT space. A market leader, in fact. Known for providing SaaS solutions for IT infrastructure and network administration, their flagship product, Orion, was a reliable monitoring tool trusted by many worldwide, including…
Details
The Story Behind from the SolarWinds Cybersecurity Attack SolarWinds is a name that rings familiar to anyone in the IT space. For those who may be unfamiliar, it was a company that commanded great respect and trust within the IT sector, having established itself as a market leader, specializing in providing top-tier software solutions for…
Details
The Microsoft Zerologon vulnerability gives the the bad guys a way to get in. Guess how? By sending a string of zeros to the server, of course. It’s a nasty vulnerability that’s being exploited in the wild. Even though Microsoft released a patch, many companies wait up to 90 days before patching. Have you patched?…
Details
You’ve just established an Architecture Review Board (ARB). Congratulations. Your nascent board should serve two fundamental, primary purposes: 1: It’s a Rubber stamp – for better or worse. Solutions have to make some sense relative to business goals and objectives. The ARB performs a strong gut-check on all technology investments. Does everything fits together? Is…
Details
While conducting new business development and educating people on the field of cybersecurity, a predictable pattern has emerged. This pattern is a preconception about the size and complexity of cybersecurity. From the outside, people tend to view cybersecurity as a narrow field. It seems fair to say that people don’t realize the magnitude of what’s…
Details
As more companies find themselves in regulated spaces, controls around data access must become stricter. One way to achieve this is to enable file and folder access auditing. This is a great feature because it enhances accountability. You can catch people attempting to circumvent controls or violate policy. This audit data can be used to…
Details
Managed Security Services Providers (MSSP) protect businesses by focusing on cybersecurity, compliance, and risk. IT Managed Services Providers (IT MSP) keep technology running by providing end-user support and back-end operations. Many organizations falsely believe that accountability for the security program shifts to their IT MSP. As a result, businesses are putting themselves at increased risk…
Details
It’s amazing how the guidance of old can stay relevant or become even more prudent over time. Enter DNS Security, where guidance for improving the security has long been ignored and not adopted. What is DNS Security? Here’s a brief overview for the lay person. Get out your pocket protector and prepare for nerdification.…
Details
The CMMC is a new security model from the Department of Defense. It helps to define a modern approach to cybersecurity programs. A close inspection reveals some intriguing details, which are worth highlighting. So in case you missed it, here two of them. Control frameworks first, followed by program frameworks. References to NIST SP…
Details