720-891-1663

Federal Cyber Safety Board Says Microsoft Security Culture is Inadequate

The cyber safety review board is similar to the FAA’s National Transportation Safety Board, except that they are investigating Cybersecurity crashes (breaches) rather than airplane or container ship crashes. The board is new. It was created by Executive Order 14028 in 2021. They only convene when requested to by the Secretary of Homeland Security and, […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News for the Week Ending January 5, 2024

You Haven’t Migrated to WiFi 6 Yet? It is Already Obsolete. Here is WiFi 7 WiFi 7 or, officially, IEEE 802.11be is faster and more spectrum efficient that previous WiFi versions. WiFi 7, they say, is 3 times faster than either WiFi 5 or 6, which makes it useful for things like gaming apps. Of […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Okta Attack Points Out Important Issues

One more time, Okta was attacked and customer data and systems compromised. I am going to leave the conversation about whether or not you should use Okta vs. a competitor to a separate conversation, but it seems that their security may be a bit lacking. In this most recent attack, the Okta support system was […]

Continue reading → [DISPLAY_ACURAX_ICONS]

How Much Does Failing to Install a Patch Cost? $550,000

The feds have upped the game and are going after companies that get breached that do not have effective cybersecurity programs. In this case, practice management software vendor Professional Business Systems, Inc. The company, who does business under the name Practicefirst Medical Management Solutions failed to install a firewall patch in January 2019. That failure […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News for the Week Ending December 18, 2020

Data from employment firm Automation Personnel Services Leaked Automation Personnel Services, a provider of temporary employment services, found 440 gigabytes of their data leaked on the dark web. The poster says that it includes payroll, accounting and legal documents. The data was leaked because the company refused to pay the ransom. When asked if the […]

Continue reading → [DISPLAY_ACURAX_ICONS]

DoD Contractor Hit by Ransomware Infection

Electronic Warfare Associates (EWA), a well known defense contractor in DC, was hit by a ransomware attack.  The tagline on the homepage of their website says that they are enabling a more secure future. A Google search last week for the company brought up these results: The researcher who discovered the problem said it seems […]

Continue reading → [DISPLAY_ACURAX_ICONS]