720-891-1663

Security News Update for the Week Ending September 2, 2022

Why PREVENTING Ransomware is the Only Option Patients of Methodist McKinney Hospital and two of its surgery centers are preparing for their data to be sold on the dark web. Healthcare is a prime target for hackers for a number of reasons. The hospital decided not to pay the ransom for 360 gigabytes of stolen […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Get Ready for a Kid Friendly Internet

The California legislature just passed the Age-Appropriate Design Code Act. Conceptually, the goal is to try to make sure that web sites kids visit are appropriate for kids. The problem is, how do you know who is a kid? Once Governor Newsom signs the bill, the code will require sites and apps – BOTH – […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Are 1-Time Passcodes a Corporate Liability?

No. Not really. Are bad 1-time passcodes a corporate liability? Yes, but bad anything is a liability. In the wake of the Twilio breach, my buddy Brian Krebs posted an item titled “How 1-Time Passcodes Became a Corporate Liability”. In one sense, he is right because most companies chose the easiest one 1-time passcode to […]

Continue reading → [DISPLAY_ACURAX_ICONS]

AI Detecting Gun Scanners at Schools has been a “Clusterf***”

Schools are legitimately trying to figure out ways to keep students safe from gun and other violence. Unfortunately, there are no simple ways to do this. Some schools are trying to use AI to solve the problem, but the reality that schools are experiencing using this technology is, apparently, quite different from what is represented […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Why Vendor Cyber Risk Management is CRITICAL

The hackers that breached outsource customer communications vendor Twilio earlier this month didn’t just compromise encrypted communications app vendor Signal. In fact, they compromised more than 130 companies and 10,000 employees. Why? because Twilio is a vendor to all of these companies and these companies trusted Twilio. And, apparently, Twilio’s security practices were not good […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Lloyd’s of London to Exclude State-Sponsored Attacks from Cyber Insurance Policies

Starting in March 2023, Lloyd’s will REQUIRE all its agents to exclude liability for losses from state sponsored cyberattacks. The problem is defining what is a state sponsored attack. In a bulletin to its producers last week, Lloyd’s says that it remains strongly supportive of its agents writing cyber policies, it is concerned that the […]

Continue reading → [DISPLAY_ACURAX_ICONS]