720-891-1663

Security News Update for the Week Ending April 26, 2024

HHS Beefs up Privacy Protection for Reproductive Healthcare Info In a final rule released this week, doctors, clinics and other providers are prohibited from disclosing protected health information related to lawful reproductive healthcare. The rule is designed to protect women who cross state lines seeking an abortion and their providers. The 291 page regulation will […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News Update for the Week Ending April 12, 2024

Administration Announces Preliminary Agreement for New High Tech Chip Factories in Arizona As you may remember, during the pandemic the shortage of chips caused widespread product shortages for everything from phones to cars. Congress passed the CHIPS act to subsidize companies who manufactured chips in the U.S. at a higher cost rather than in less […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News Update for the Week Ending April 5, 2024

DoD Opens Cyber Policy Office As reported earlier, the planned opening of the Office of the Assistant Secretary of Defense for Cyber Policy officially happened on March 20th. Ashley Manning will manage it until the Senate confirms someone else. President Biden announced that his nominee will be Michael Sulmeyer. Whether the Senate confirms him or […]

Continue reading → [DISPLAY_ACURAX_ICONS]

DoD Contractors: Will You Have to Replace Your MSP?

If you are a defense contractor, then over the next few years you will likely have to be compliant and maybe certified for CMMC, either at level one or level two. Level one has about 17 controls and 59 assessment objectives; level two has 110 controls and about 315 assessment objectives. Assessment objectives are the […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Microsoft Plans to Deprecate 1024 Bit RSA Keys

Microsoft is often between a rock and a hard place. They would like to be more secure but not at the expense of offending their customers. Here is an example of that. Microsoft has announced that RSA keys shorter than 2048 bits will soon be deprecated in Windows Transport Layer Security (TLS) to provide increased […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Justice Department Going After Cybersecurity Fraud

The False Claims Act (FCA) is a Civil War era law that both penalizes companies for lying about their cybersecurity protections and rewarding whistleblowers for turning in fraudsters. In 2021 the Justice Department created a new initiative to stem civil-cyber fraud. One of the beneficiaries of that is the Defense Department which has been plagued […]

Continue reading → [DISPLAY_ACURAX_ICONS]