720-891-1663

DHS Cyber Safety Review Board Gets Its First Case – Log4j

The President’s Executive Order on Cybersecurity (EO 14928) ordered Homeland Security to create a Cyber Safety Review Board (CSRB). The CSRB is supposed to be like the National Transportation Safety Board (NTSB) with some major differences. The CSRB will investigate major cyber isssues while the NTSB investigates transportation accidents. Unlike the NTSB which can take […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Lithium Battery Fires Threaten the Existence of Recycling

As more and more communities mandate recycling, there is an ever increasing number of devices being thrown into recycling bins that contain lithium batteries. In September 2016 a four alarm fire broke out at the Shoreway Environmental Center outside of San Francisco. The fire caused $6+ million in damage and caused the plant to shut […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Are You Prepared for the Insider Threat?

Security tool provider Proofpoint released a report to identify the costs and trends associated with insider threats. While the stereotype for insider threat is the malicious insider, that is only one part of the insider threat. Other insider threats include the negligent insider and the compromised insider. The report, conducted by Larry Ponemon’s group, said […]

Continue reading → [DISPLAY_ACURAX_ICONS]

The Future of Authentication – More Secure but More Difficult

The IRS is changing from using a homegrown userid and password based authentication system to a third party single signon type of system run by ID.ME. Given that the IRS doesn’t have a great track record for security, your first inclination might be “can’t be any worse than what they had before”. The short version […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Governments Struggle to Deliver Secure Online Services to Citizens

As times change and as a function of the pandemic response, governments are trying to deliver more services online. Unfortunately, governments rarely get to hire the best or the brightest software developers or security architects because they cannot match what the private sector can offer. Auth0 recently released the findings of its Public Sector Identity […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News for the Week Ending January 14, 2022

Hackers Sending Malware Filled USB Sticks in the Mail Old, tried and true techniques continue to work as hackers have been sending malware-filled USB sticks in the mail and UPS to defense, transportation and insurance companies, hoping someone did not do their security awareness training and plugs the drive into their computer. It just shows […]

Continue reading → [DISPLAY_ACURAX_ICONS]