A few days ago, as I was heading out the door to a meeting, my phone dinged with a new SMS message. The message read: “Do not show anybody I sent that,” and included a link. It came from a number not saved in my contacts, so I decided to ignore it and revisit it […]
Definition of a Drive By Download: Google: “A drive-by download refers to the unintentional download of a virus or malicious software (malware) onto your computer or mobile device. A drive-by download will usually take advantage of (or “exploit”) a browser, app, or operating system that is out of date and has a security flaw.” Case Study: Late last week while traveling […]
From every eCommerce store, micro site, to blogs there is a need/desire to capture customer identities. With this need there becomes challenges and legal considerations around the customer’s privacy. The challenges can also lead to opportunities for better customer engagement which will lead to more sales, views, and other targeted business metrics. First let’s cover […]
Rather you purchased a new laptop from Best Buy or was issued one from your IT department the odds are it came with antivirus software. Antivirus software is designed to detect and ultimately quarantine and remove viruses from machines. Antivirus software mitigates many forms of malware such as keyloggers, backdoor, trojan horses, and so on. […]
Is your office on a WiFi hotspot? Do you connect to your local Starbucks, hotel, or at the gym? Chances are you connect to WiFi to save from costly cellular data plans. Also, as more and more enterprises are enabling WiFi these access points are ripe for malfeasance. Let’s look at a WiFi kill-chain to […]
Network architectures have evolved vastly over the last 10 years. When connecting enterprise users to the data center (on-premise or in the cloud) you have options for access. Let’s look at a these hybrid architectures and how the perimeter is changing to support zero trust practices. Network Micro Segmentation Really from the beginning we’ve been […]
Managing identities correctly will not only give your business a competitive advantage but it will also make you more secure. Rather you are managing employee, customer, or contractor identities you must take into consideration how you are going to not only use this information but also how to keep it secure. If you don’t have […]
We all read the headlines about the latest breaches, vulnerabilities, regulations, etc. The reason for the news worthiness is that this impacts everyone. No one is immune in this digital world as was evident in the Equifax breach that affected 143 million Americans. In the enterprise world where technology lives within an organization there are crown […]
Part of any good security hygiene program is to make sure you are up to date with the latest security patches. As of May 22, 2018 there have been 11,555 common vulnerability and exposures reported. In 2017 there were a total of 53,976 CVE’s reported. These numbers are daunting to say the least. In small […]
Recently while attending RSAC in San Francisco an old fire truck was out for community education close to the financial district. As a kid fire trucks were always fascinating and the men and women brave enough to be a first responder were truly heroes to me. As a kid my father worked for the local […]