As part of the Executive Order on Improving the Nation’s Cybersecurity (EO 14028), NIST is required to do several things. among those are guides and standards for improving supply chain security and they have already released a number of draft documents related to their tasks. IF you sell to the executive branch, these will become […]
Continue reading → [DISPLAY_ACURAX_ICONS]Arizona’s Republican led state Senate hired Cyber Ninjas to review the election results for Maricopa County. Unfortunately, these ninjas had no experience doing election audits and, apparently, not much experience doing any kind of forensic investigating. They did not maintain custody of the equipment, they did not maintain surveillance on the equipment and they allowed […]
Continue reading → [DISPLAY_ACURAX_ICONS]Old Scams Never Die, They Just Get a Fresh Coat of Paint Scammers have been posing, according to a warning by DHS, as Immigration and Customs Enforcement (ICE) Homeland Security Investigations (HSI) agents in San Antonio. The scammers call the mark, pretending to be HSI and tell them there is a problem with their passport […]
Continue reading → [DISPLAY_ACURAX_ICONS]How rich are they? There is a class of computer vulnerabilities called zero-days. They are called that because they are not publicly known and either can be or are being exploited since there are no patches for them. Many zero-days are discovered by nation-based spies like the CIA or NSA here in the U.S. (but […]
Continue reading → [DISPLAY_ACURAX_ICONS]The Washington Post had an eye opening story on just how bad things are when it comes to responding to cyber attacks. Based on a congressional review by the House Oversight Office of three very major cyber attacks (CNA, Colonial and JBS), we have some insight into why incident response preparation is so important. #1 […]
Continue reading → [DISPLAY_ACURAX_ICONS]Zero Trust is the new silver bullet in cybersecurity. Well, not really, but many people are treating it that way. However, it is an important positive and everyone should be looking into how they can implement it in their organization. The DoD is about to open an office dedicated to implementing zero trust. It will […]
Continue reading → [DISPLAY_ACURAX_ICONS]