In Other Words – instead of assuming a risk profile, and assess risks – assume it will happen to you (it is just a matter of time). Now what? In fact it may be a good exercise to think about the ramifications of a failure in cybersecurity. The idea is to create a scenario … Read more
Hacker News has an article on how Hackers use a method of installing their software onto your systems. 1. If you notice the problem is when the user opens an attachment or link (URL) in their web browser(Firefox – Microsoft Edge, or Google chrome among the most used browsers) 2. Then the browser decodes the … Read more
Information has a way to reduce uncertainty, but we also have to be ready to make a decision (make a call). How much information is enough? Or is too much information the problem? Are you willing to make changes once you learn some more information – what if the info you learned makes your … Read more
How much cybersecurity do you need? Just enough to stay out of the news? Will you ever be in the news? Have you had an incident response evaluation? Do you do any event monitoring? network security? Identity access ring a bell? Malware prevention and employee security? What will it take to get some people … Read more
Are you in a position where if your phone is hacked it could make criminal attackers easier to hack your company? From the story in Bruce Schneier’s blogpost about de-anonymization story: About how a priest data was taken and used to eventually fire him because of his movement with his phone. I call this a … Read more
