720-891-1663

Security News for the Week Ending November 24, 2023

Post Quantum Crypto Isn’t The Only Problem – Pre Stone Age Crypto is Also a Problem While some folks are worried about what is going to happen to encryption when quantum computing becomes real, other companies are still using antique crypto. Unfortunately, many of the companies who are using antiques are medical devices and higher […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Microsoft Explains Most Recent Chinese Email Hack – Humans

As is often the case, humans and process represent the biggest failure window. Microsoft, to its credit, is being public about its own failures and pretty quickly. The Chinese hackers, Storm-0558, obtained a “golden cryptographic key” which allowed them to generate tokens so that they could masquerade as other users. I don’t know why you […]

Continue reading → [DISPLAY_ACURAX_ICONS]

This is Why the Feds are Very Scared About Supply Chain Attacks

Last week it was revealed that VoIP communications company 3CX was compromised and was distributing a malicious version of their desktop software to hundreds of thousands of paying customers. This is not an attack where users go to find sketchy websites and download “free” software that should be paid for. Rather, this is licensed software […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Maybe OpenAI Should be Called ClosedAI

ChatGPT 3.5 was basically a beta. They got lots of people to feed data into the system, including sensitive, proprietary data (oops) in order to train it. Now that it is “more” trained, OpenAI released ChatGPT 4. Contrary to the founding principles of investors like Elon Musk, the company, which claimed that it would be […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News for the Week Ending December 16, 2022

Rackspace Tells Its 300,000 Customers That Impact of Ransomware was Limited Due to Their Great Incident Response (Not?) In what can only be called an amazing expression of tone-deafness, Rackspace says that due to their great incident response program, only their exchange users were shut down due to a ransomware attack. Needless to say, the […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News Update for the Week Ending September 2, 2022

Why PREVENTING Ransomware is the Only Option Patients of Methodist McKinney Hospital and two of its surgery centers are preparing for their data to be sold on the dark web. Healthcare is a prime target for hackers for a number of reasons. The hospital decided not to pay the ransom for 360 gigabytes of stolen […]

Continue reading → [DISPLAY_ACURAX_ICONS]