Petya Ransomware & Mitigation Steps
They Petya Ransomeware outbreak is the second such global attack in the last couple of month. The malware is spreading using same Microsoft Windows vulnerability that was exploited by the recent...
View ArticleThe Future of IoT Security
Required Reading: 1) IoT Growing Faster Than the Ability to Defend it 2) DDoS on DYN Impacts Twitter, Spotify, Reddit Until recently the security concerns associated with IoT devices have been mostly...
View ArticleClik here to view.
Securing Corporate Wireless Access Points (WAPs)
The set of controls and conditions IT auditors look for during assessments of Wireless Access Points (WAPs) tends to vary auditor to auditor. In some cases, the IT auditor may make great suggestions...
View ArticleClik here to view.
How to Check for Dangerous Certificates and Unsigned Windows OS Files
Sigcheck is a light weight Windows command-line utility that does an amazing job at scanning the digital certificate stores on your system for anything irregular and not part of the official Microsoft...
View ArticleDeveloping & Implementing a Data Classification Policy
Properly classifying and labeling information assets is fundamental to a successful information security program, yet many organizations fail to implement one. Without proper asset classification, the...
View ArticleClik here to view.
Deploying a HIPAA Compliant Encryption Policy
HIPAA, or the Health Insurance Portability and Accountability Act, presents a fairly robust set of standards and rules that any organization within the United States handing PHI (Personal Health...
View ArticleClik here to view.
Tracking Data Breaches & Staying Informed
The Identity Theft Resource Center (ITRC) is a nonprofit organization that focuses on educating consumers, corporations, government agencies and other organizations on best practices related to fraud...
View ArticleClik here to view.
2016 Cyber Risk Reports Reveal the Need for Effective Risk Assessments to...
As companies continue to shift data and resources to electronic formats, a trend growing faster year over year, information and cyber risks shift to the top of management’s priority list. This means...
View ArticleClik here to view.
I am an OPM Data Breach Victim- Next Steps
Nearly six months after the fact, I received a letter from the Office of Personnel Management notifying me that my information had officially been lost in the June 2015 breach. To add insult to injury,...
View ArticleDifferentiating Penetration Tests, Vulnerability Scans, and Risk Assessments
Penetration testing has become another hot, and often misused term in the marketplace, joining the ranks of other buzz words such as “Cybersecurity”, “Hacker” and “The Cloud”. Often times,...
View ArticleAre Penetration Tests Worth the Risk?
I have had several conversations with executives recently about the role of penetration testing and whether or not penetration testing is worth the risk? There seems to be two schools of thought on...
View ArticleItems of Interest Week of 8/3/2015
Here are some quick reads for the week of August 3, 2015. If you have interesting links of your own share them in the comments. Brian Krebs: “Chinese VPN Service as Attack Platform?“ CFO.com: “Don’t...
View ArticleClik here to view.
Cybersecurity Controls for the Manufacturing Environment
The endless barrage of cybersecurity attacks and data breaches in recent history is cause for concern for every company in every industry including manufacturers. Perhaps especially manufacturers –...
View ArticleLessons Learned from a Cybersecurity Review
The past week presented me with a neat opportunity. I was asked to assess a so called “Cybersecurity” plan of action for a small organization which has a strong internet presence but little internal...
View ArticleClik here to view.
Managing User Access in the Manufacturing Environement
Click to enlarge. Managing user access in the manufacturing environment, especially at the plant level, is tricky. Unique machinery and production requirements call for specific skills and...
View ArticleItems of Interest Week of 7/20/2015
Here are some quick reads for the week of July 13, 2015. If you have interesting links of your own share them in the comments. Hacked: Drones could be the malware delivery system of the future Threat...
View ArticleItems of Interest Week of 7/13/2015
Here are some quick reads for the week of July 13, 2015. If you have interesting links of your own share them in the comments. MIT: “CSAIL report: Giving government special access to data poses major...
View ArticleClik here to view.
Items of Interest Week of 6/22/2015
Here are some quick reads compiled by Shane and Christian for the week of June 22, 2015. If you have interesting links of your own share them in the comments. NSA Tracking: NSA Has Reverse-Engineered...
View ArticleClik here to view.
Items of Interest: Week of 6/15/2015
Throughout the week I share interesting tidbits I come across with my co-author, Christian. He said I tend to look at some pretty interesting stuff and suggested that I start compiling a list of links...
View ArticleWordPress Website Security Hardening Checklist (.pdf)
WordPress websites make up over 20% of all the websites on the internet. If you have a WordPress website that’s both a blessing and a curse. WordPress’s popularity means that there is a whole community...
View Article
![[QLD, NSW, VIC] Samsung 65](http://files.ozbargain.com.au/n/31/978831l.jpg?h=8d64f0c6)
