720-891-1663

How Good Is Your Cyber Security Program – Ask Equifax

Sometimes Congress can be entertaining, but not usually.  Today was an exception. FORMER Equifax Chairman Richard Smith, under who’s watch the huge Equifax data breach occurred, testified at the House Energy and Commerce Subcommittee. What did he say? #1 – Even though Homeland Security told Equifax (and others) about the Apache Struts vulnerability in March, […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Montgomery County Hit With Ransomware – Pays $40-$50,000 To Get Files Back

Montgomery County, Alabama joined the ranks of probably millions of others and paid a ransom to get their data back after hackers threatened to erase their data if the ransom was not paid within 7 days. While details are sketchy, reports are that the attack began Monday around 5PM (at the end of the day) […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Why Using SMS Text Messages For Two Factor Authentication Is A Bad Idea

Signalling System 7 or SS7 is the communication system that telephone carriers, both cellular and land line, use behind the scenes to route calls. Originally developed in 1975 – way before the Internet was popular – SS7 has virtually no security in it.  It counts on securing the connections between telephone company switches, which, in […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Deloitte Touche Hacked, Customer Data Exposed

Update to who may be affected.  On October 10th, 2017, the Guardian is reporting that while Deloitte has only admitted that they have notified six clients, sources are saying that the server that was compromised contained emails for 350 clients, the US Departments of State, Energy, Homeland Security and Defense, The US Postal Service, The […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Viacom is the Newest Company to Leave Data Unprotected on Amazon

Viacom is playing down the significance of this, but that could just be damage control. One of our favorite security researchers, Chris Vickery, discovered yet another Amazon S3 storage bucket unprotected on Amazon. In this case,  it did not contain non-public personal information of customers, according to Viacom.  They touted this as a good thing, […]

Continue reading → [DISPLAY_ACURAX_ICONS]