Remember the Equifax breach a few years ago? Almost 150 million people were affected. Now its competitor is under the microscope. The class action microscope. A class action has been filed that says that Experian did little to prevent account takeovers by bad guys. The suit, quoting Brian Krebs’ blog (yes, really), says that hackers […]
Continue reading → [DISPLAY_ACURAX_ICONS]US Emergency Alert System Has a Minor Bug Homeland Security has issued an alert that there are critical vulnerability in the Emergency Alert System encoder and decoder devices. If left unpatched, it would allow a hacker to issue fake warnings of emergencies. The EAS is the nationwide alert system that is used to warn citizens […]
Continue reading → [DISPLAY_ACURAX_ICONS]I have noticed something recently from some members of the CMMC consulting community. Create fear. Statements like CMMC will be in contracts in May of next year and if you are not CMMC compliant you will not be able to get DoD contracts are in their sales pieces. Here is the reality. CMMC is really […]
Continue reading → [DISPLAY_ACURAX_ICONS]The only way that any company is going to get to real security is if they get to Secure by Design. What does that mean? Well, there is no hard and fast definition, but here are some good suggestions: LIMIT SHADOW IT You can’t protect what you don’t know is there. Shadow IT also has […]
Continue reading → [DISPLAY_ACURAX_ICONS]The All Writs Act is a law that dates back to the late 1700s. It allows the government to force companies to do all sorts of things. Completely legally. Usually very quietly. In this case the government was trying to find a Russian national, Aleksey Burkov. The government wanted to track him so that he […]
Continue reading → [DISPLAY_ACURAX_ICONS]TSA Updates Cybersecurity Guidelines for Pipeline Operators After the Colonial Pipeline meltdown last year, TSA, who regulates pipeline cybersecurity (don’t ask), issued a set of regulations for pipeline operators to follow. Given that TSA had less than a dozen people in their cybersecurity department and zero industrial IoT expertise, it is not a surprise that […]
Continue reading → [DISPLAY_ACURAX_ICONS]