type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

To Test or Not to Test

How do you know if the security tools and network configurations you have worked so tirelessly to deploy are effectively protecting your organization’s systems and data?

Penetration Testing
Read More about the To Test or Not to Test
Article

Visitor Management

Social engineering attacks target unsuspecting staff and continue to be one of the most successful techniques for gaining access to sensitive systems and information. By claiming to be an employee or vendor with official-looking credentials, criminals can coax information from employees or gain physical access to systems.

NIST Framework
Read More about the Visitor Management
Article

Landing Your Organization in the Service Provider Role

If part of your organization is a legally separate entity and has a separate relationship with their acquiring bank with their own Merchant IDs, then the entity providing the payment support services is likely acting as a PCI service provider.

PCI DSS
Read More about the Landing Your Organization in the Service Provider Role
Article

Password Spraying

In a password- spray attack, a hacker will test a single password against multiple user accounts within an organization. They use common passwords like Spring2018 and Password123 that, unfortunately, many users are still falling back to.

Cybersecurity
Read More about the Password Spraying
Article

Incident Management: Planning a Tabletop Exercise

A tabletop exercise shouldn't require extensive resources and should help you validate effective policies and procedures, strengthen relationships with team members and partners, and identify any critical gaps or weaknesses in your disaster recovery efforts.

Incident Response
Tabletop Exercise Planning about the Incident Management: Planning a Tabletop Exercise
Article

GDPR: Beyond May 25

Now that May 25, 2018 has come and gone, some of the hype around the European General Data Protection Regulation (GDPR) appears to have dwindled.

GDPR
Read More about the GDPR: Beyond May 25
Article

City of Atlanta Hit by Devastating Ransomware Attack

The hackers demanded $51,000 to decrypt the systems. Described by the mayor as a “hostage situation”, the city had to pull in resources from the FBI, Secret Service, and Department of Homeland Security, as well as other academic and private institutions.

Ransomware
Read More about the City of Atlanta Hit by Devastating Ransomware Attack
Article

320 Universities Targeted in Global Attack

In March, Iranian Hackers from the Mabna Institute were charged with launching attacks targeting universities, large US companies, and government agencies, and stealing information including academic research in technology, medicine, and other sciences valued at over $3.4 billion.

Cybersecurity
Read More about the 320 Universities Targeted in Global Attack
Article

Recent Breaches and Lessons Learned

Last month we saw more and more organizations fall victim to data breaches. Here is an overview of some of the larger breaches and what we can learn from them:

Cybersecurity
Read More about the Recent Breaches and Lessons Learned