PCI Standards & Compliance looking out for you

The reason PCI (Payment Card Industry) has set up the organization is to officially create  a place for all users of the system to look up how to secure their systems and networks.   In the “real world”  you call the credit card processor, such as First Data, which then has a method of contacting VISA, Mastercard, … Read more

Hospitals next hacking target?

MIT Technology Review  http://www.technologyreview.com/news/533631/2015-could-be-the-year-of-the-hospital-hack/ Claims hospitals are next on list to get hacked. I don’t think that is right… everyone will get hacked – it is easy to hack as many systems that are online. It is only a matter of time. So the mantra of 2015 will be EVERYONE will get hacked. test now … Read more

What would it take for a more secure world?

Have you had an inkling that cyber security is getting worse?   remember this post from Black Hat2014 where I posted about a dilemma of management?  It is as if this problem is so pervasive we can’t do anything about this. There seem to be more cyber breaches not less, we now expect to get hacked. … Read more

Healthcare data at risk

It is only a matter of time before health data will be plastered all over the Internet. A number of Blogs are discussing this very issue http://www.safelogic.com/exposing-the-risks-of-data-driven-healthcare/ is one.   Penetration testing for New England care solved some problems outside of security issues: http://www.coresecurity.com/content/penetration-testing-key-to-hipaa-compliance-for-care Penetration testing checks the boundaries of your computer systems. By using open source tools … Read more

SPOE – Second Pair of Eyes

When is it necessary?  when entering an important command into a critical system that affects thousands of users. Or when you have to review your network to make sure no holes are found. the attacks on your network are relentless: Bad hackers  will attack your network and own your machines.   Once they own your machines … Read more