Understanding the Growing Threat Landscape and Prioritizing Cybersecurity Measures
Understanding the Growing Threat Landscape and Prioritizing Cybersecurity Measures Recently, a website hosting provider by the name of Jelly Bean Communications Design got itself into some serious trouble with the company facing charges under the False Claims Act. The US Department of Justice (DoJ) explained how Jelly Bean had been contracted in 2013 by Florida…
Details
Lessons Learned from the SolarWinds Cybersecurity Breach
The Lessons Learned from the SolarWinds Cybersecurity Breach What happened to SolarWinds? For many of us, SolarWinds was a big name in the IT space. A market leader, in fact. Known for providing SaaS solutions for IT infrastructure and network administration, their flagship product, Orion, was a reliable monitoring tool trusted by many worldwide, including…
Details
SolarWinds Cybersecurity Attack
The Story Behind from the SolarWinds Cybersecurity Attack SolarWinds is a name that rings familiar to anyone in the IT space. For those who may be unfamiliar, it was a company that commanded great respect and trust within the IT sector, having established itself as a market leader, specializing in providing top-tier software solutions for…
Details
What you should do about the Zerologon vulnerability
The Microsoft Zerologon vulnerability gives the the bad guys a way to get in. Guess how? By sending a string of zeros to the server, of course. It’s a nasty vulnerability that’s being exploited in the wild. Even though Microsoft released a patch, many companies wait up to 90 days before patching. Have you patched?…
Details
Two fundamental purposes of your newly founded Architecture Review Board (ARB)
You’ve just established an Architecture Review Board (ARB). Congratulations. Your nascent board should serve two fundamental, primary purposes: 1: It’s a Rubber stamp – for better or worse. Solutions have to make some sense relative to business goals and objectives. The ARB performs a strong gut-check on all technology investments. Does everything fits together? Is…
Details
People only see the tip of the cybersecurity iceberg until they they are thrown into the water
While conducting new business development and educating people on the field of cybersecurity, a predictable pattern has emerged. This pattern is a preconception about the size and complexity of cybersecurity. From the outside, people tend to view cybersecurity as a narrow field. It seems fair to say that people don’t realize the magnitude of what’s…
Details
The right way to deploy file and folder access auditing for the first time
As more companies find themselves in regulated spaces, controls around data access must become stricter. One way to achieve this is to enable file and folder access auditing. This is a great feature because it enhances accountability. You can catch people attempting to circumvent controls or violate policy. This audit data can be used to…
Details
What you need to know about cybersecurity from MSSP and IT MSP
Managed Security Services Providers (MSSP) protect businesses by focusing on cybersecurity, compliance, and risk. IT Managed Services Providers (IT MSP) keep technology running by providing end-user support and back-end operations. Many organizations falsely believe that accountability for the security program shifts to their IT MSP. As a result, businesses are putting themselves at increased risk…
Details