PCI 4.0 Here What it Means

First of All, PCI 4.0 will not remove the previous version (3.2.1) it will enhance the PCI standard (this information is from the “At a Glance” document at www.pcisecuritystandards.org) What is New in PCI DSS v4.0?There were many changes incorporated into the latest version of the Standard. Below are examples of someof those changes. For … Read more

What Does Segmentation DonaldTrumpMalware and Liverpool Football have in Common?

Yes take a look at the latest CISA(Cybersecurity Infrastructure Security Agency) Infographic:   Goto CISA webpage for fullsize infographic if you want. CISA is trying to convince you into creating segmentation in different pieces of your network.  We need to go through this process to make sure you understand why this method is a good … Read more

New Year Means Review and Plan

Let us not make the same mistakes as we may have done in the past when it was time to move to a new year. We should review the current year(2021) So what happened in 21 that may be different with 22? What should we focus on planning for new year? Of course Jocko Willink … Read more

Real Story of Log4J

Affected Software A significant number of Java-based applications are using log4j as their logging utility and are vulnerable to this CVE. To the best of our knowledge, at least the following software may be impacted: Apache Struts Apache Solr Apache Druid Apache Flink ElasticSearch Flume Apache Dubbo Logstash Kafka Spring-Boot-starter-log4j2 So you can see that … Read more