As part of the Executive Order on Improving the Nation’s Cybersecurity (EO 14028), NIST is required to do several things. among those are guides and standards for improving supply chain security and they have already released a number of draft documents related to their tasks. IF you sell to the executive branch, these will become […]
Continue reading → [DISPLAY_ACURAX_ICONS]Old Scams Never Die, They Just Get a Fresh Coat of Paint Scammers have been posing, according to a warning by DHS, as Immigration and Customs Enforcement (ICE) Homeland Security Investigations (HSI) agents in San Antonio. The scammers call the mark, pretending to be HSI and tell them there is a problem with their passport […]
Continue reading → [DISPLAY_ACURAX_ICONS]How rich are they? There is a class of computer vulnerabilities called zero-days. They are called that because they are not publicly known and either can be or are being exploited since there are no patches for them. Many zero-days are discovered by nation-based spies like the CIA or NSA here in the U.S. (but […]
Continue reading → [DISPLAY_ACURAX_ICONS]The Washington Post had an eye opening story on just how bad things are when it comes to responding to cyber attacks. Based on a congressional review by the House Oversight Office of three very major cyber attacks (CNA, Colonial and JBS), we have some insight into why incident response preparation is so important. #1 […]
Continue reading → [DISPLAY_ACURAX_ICONS]The Federal Communications Commission has “terminated” China Telecom’s authority to provide services in the U.S. In a move more expected from the last administration than the current one, the FCC said that China Telecom represents a security risk. China Telecom has been operating in the U.S. since 2002. It is not clear why the U.S. […]
Continue reading → [DISPLAY_ACURAX_ICONS]This is probably not a surprise to anyone who is past elementary school – and probably not to many who are still in elementary school, but the group that was behind last year’s SolarWinds attack is still at it. Just like with SolarWinds, they are going after the global supply chain. 140 managed service providers […]
Continue reading → [DISPLAY_ACURAX_ICONS]