I can tell you from personal experience of our pentesting that this is true. We often find password documents – spreadsheets and text documents, unencrypted and unprotected. This is in spite of the fact that 93% of the respondents require password management training and 63% hold that training more than once a year. 8 percent […]
Continue reading → [DISPLAY_ACURAX_ICONS]When Russian troops stole millions of dollars of John Deere farm equipment from an authorized Deere dealer, Agrotek-Invest, in Melitopol, Ukraine, they trailered them to Checknya, about 700 miles away. What the Russians did not know is that (a) the equipment has a GPS in it, so Deere knew exactly where they took it and […]
Continue reading → [DISPLAY_ACURAX_ICONS]Yet Another Russian Military “Asset” Catches Fire Russian jet engine design hub Central Aerohydrodynamic Institute which is outside Moscow, did a “halt and catch fire” due to a fire at the electrical substation which powered the former design center. Score one for Ukraine, according to Russia. Russia claims it is the world’s largest scientific research […]
Continue reading → [DISPLAY_ACURAX_ICONS]In a survey of 400 veteran IT security practitioners, across a wide variety of industries such as healthcare, tech, education and finance, focused on data resilience, 93 percent said they have a ransomware readiness plan, but there are significant knowledge gaps. 26 percent said the cloud is too risky for backup, but only a third […]
Continue reading → [DISPLAY_ACURAX_ICONS]As part of CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act) in the just passed omnibus spending bill, CISA is required to stand up a Ransomware Task Force. Jen Easterly, head of CISA, having just won the battle that requires companies to report breaches and ransomware payments to her rather than the FBI (which pissed […]
Continue reading → [DISPLAY_ACURAX_ICONS]While any form of two factor authentication is better than none, there are still security holes. In a story I read tonight, a tech savvy user fell for a social engineering attack. He received what he thought was an Instagram message from a friend and responded to it. It turns out it was a social […]
Continue reading → [DISPLAY_ACURAX_ICONS]