Similar Posts
CMMC | Compliance | DIB | DoD | IT Infrastructure | User tips
NIST SP 800-171 Update for July 2023
Byadmin
800-171 is the government’s chosen cybersecurity standard for protecting controlled unclassified information (CUI) and is the standard is required by a number of government departments and by private industry as a matter of contract for protecting sensitive unclassified information. Learn more about this new version of the standard here.
Banking Social Engineering Scams are Alive and Well
Byadmin
The easiest way for hackers to steal your money is to get you to help them do it. We are seeing attacks where the victim gets a text message supposedly from their bank about a potentially fraudulent transaction and asking the victim if it is legitimate. If the victim answers, the hacker goes into high…
Will You be the Last to Know?
Byadmin
External attack surface management tools (EASM) allow anyone to get a sense of your security prep without your permission or even your knowledge. Who uses EASM tools? Your competitors against you, your customers to decide if they want to do business with you, members of the public, your insurance carrier to decide if they want…
Multi-Factor Authentication is NOT a Silver Bullet
Byadmin
For as long as there have been computers, there have been hackers. It is a cat and mouse game. Multi-factor authentication definitely ups the stakes, but there are some things that you should know that might affect your choice of MFA solutions. Audio Video
Using Voice to Authenticate You is Risky
Byadmin
The CEO of OpenAI is echoing what I have been saying for years and that is that using your voice to authenticate you, for example for access to your bank account, is risky and that shortly any OpenAI customer will be able to spoof that, maybe for $20 a month. Learn more at the links.
Lessons to Learn from the MGM-Caesars Breach
Byadmin
The breaches of both MGM and Caesars were not high tech; they were pure social engineering attacks. That means that you can harden your company and your information likely for very little money. While this is early in the game, there are some easy lessons to learn here. Here are some key takeaways from the…