Learning from Equifax Breach

I wish I could say that this post would be something new – like buy “xyz” product and perform handstands or something and all your problems are solved. Unfortunately The Equifax breach likely happened due to unpatched systems. As even Equifax itself admitted¹:   So as we discuss this problem many times, how can a … Read more

Keep Up on Security News

It is good to keep up on the latest security news so that you can review what vulnerabilities are being created with new bugs. Keeping up on the latest vulnerabilities allows you to keep the Risk analysis up to date (Risk = likelihood * impact). Because as new events happen, your risk profile changes. We … Read more

Doing the Basics Would Have Saved You

A new Zero-Day attack is out available for attackers. this attack was discussed in the SANS website Internet Storm Center: https://isc.sans.edu/forums/diary/SMBLoris+the+new+SMB+flaw/22662/ SMBLoris – the new SMB flaw The article was written from reviewing a Threatpost article, but was ultimately triggered because of the DEFCon 2017 presentation:   Notice the arrows on right with memory usage on … Read more

What Worked In the Past May Not Work Soon

We are always enthralled with technology and how it changes the status quo, but we also need to be aware of tactics that use technology may need to get updated. In 2017 we are obsessing over online sales and how the smart phone is changing our world.  Now there are grumblings over automated cars and … Read more

Cybersecurity: Challenging Onerous Tough

  Overview of Cybersecurity challenges : David Kennedy is in the above youtube video first 25 min and he has a good overview of where we are in Cybersecurity, a single employee can take down your company. It is not just the technical details, but also includes people learning best practices to defend from hacking … Read more