All Posts

Cybersecurity News – January 12, 2021

SolarWinds breach now linked to Turla This comes from analysis on the Sunburst backdoor by researchers at Kaspersky. The exploit used in the supply-chain attack…

PREVIEW [1-15-21] Hacking Data Intelligence – CISO Series Video Chat

Here’s a short preview of our video chat this Friday, January 15th, 2021 entitled “Hacking Data Intelligence: An hour of critical thinking on how to…

Cybersecurity News – January 11, 2021

Parler removed from Apple, Google, and Amazon Parler, which had been one of the fastest-growing apps in the US, including the number one app for…

Cybersecurity News – January 8, 2021

Trump banned from Facebook & Instagram, maybe indefinitely Facebook CEO Mark Zuckerberg announced that Donald Trump will be blocked from using Facebook and Instagram “for…

Cybersecurity News Week in Review – January 4-8, 2021

This week’s Cyber Security Headlines Week in Review – January 4-8, 2021 is hosted by Steve Prentice, with our guest, Ross Young, CISO, Caterpillar Financial…

Hacking High Profile Accounts

Please join us on Friday, January 22nd, 2021 for “Hacking High Profile Accounts: Designing extra layers of protection around more valuable accounts”.  Watch the episode “Hacking…

Defense in Depth: Should CISOs Be Licensed Professionals?

Many professionals are required to obtain a license before they can do their job legally. The demands of cybersecurity professionals, especially CISOs, has become more…

Cybersecurity News – January 7, 2021

Rioters storm US Capitol, Trump’s Twitter suspended Yesterday afternoon, a group of pro-Trump rioters stormed the US Capitol, causing a lockdown and suspension of the…

Highlights from “Hacking the Crown Jewels” – CISO Series Video Chat

Here are the highlights from “Hacking the Crown Jewels: An hour of understanding what data you have, what’s REALLY important, where it resides, and who’s…

Cybersecurity News – January 6, 2021

Google, Alphabet employees unionize Dubbed the Alphabet Workers Union, it will be open to employees and contractors. Although its current membership, at 227 people, is…

[1-15-21] Hacking Data Intelligence – CISO Series Video Chat

Please join us on Friday, January 15th, 2021 for “Hacking Data Intelligence: An hour of critical thinking on how to turn insights into actionable protection…

Hey Reseller, What’s the “Value” You’re Adding?

It seems that you’re offering so much more when you add the VA (“value added”) in front of your title. What is that? Why am…

Cybersecurity News – January 5, 2021

Microsoft source code accessed by SolarWinds attackers As part of its ongoing investigation into the SolarWinds supply chain attack, Microsoft discovered  its systems were infiltrated…

Cybersecurity News – January 4, 2021

Russian SolarWinds hack damage escalates  Three weeks after the SolarWinds hack came to light, officials are shifting their thoughts about it being election related to…

Cybersecurity News – December 31, 2020

T-Mobile discloses data breach The carrier began notifying customers on December 29th that a “security incident” exposed account information, later announcing that it’s security teams…

Cybersecurity News – December 30, 2020

Google Docs bug exposes users private documents Google has patched a bug in its feedback tool that allowed attackers to steal screenshots of sensitive Google…

Cybersecurity News – December 29, 2020

Defending the COVID-19 vaccine supply chain In an editorial, IBM’s Global Lead for Threat Intelligence Nick Rossman makes the case that this supply chain should…

[1-8-21] Hacking Cyber Media – CISO Series Video Chat

Please join the CISO Series community on Friday, January 8th, 2021 for “Hacking Cyber Media: An hour of critical thinking about how media companies are…

Cybersecurity News – December 28, 2020

Microsoft resellers seen as Russian cyberattack mules Evidence from the security firm CrowdStrike suggests that companies that sell software on behalf of Microsoft were used…

Cybersecurity News – December 23, 2020

Treasury Department’s senior leaders were targeted by SolarWinds hack The SolarWinds hack continues to reveal its reach. The email system used by the Treasury Department’s…

Cybersecurity News – December 22, 2020

Attackers staged a dry-run against SolarWinds in October 2019 Yahoo News’ sources say the operators of the attack conducted a test run of the campaign…

Cybersecurity News – December 21, 2020

SolarWinds supply chain attack updates The US government and high profile companies struggle to assess and control the damage from the SolarWinds attack which has…

Cybersecurity News – December 18, 2020

Ex-Homeland Security adviser: ‘We’re being hacked’ Thomas P. Bossert, former Homeland Security adviser to Presidents Trump and George W. Bush, said in a New York…

Defense in Depth: Inherently Vulnerable By Design

Much of what we do as practitioners is to prevent inadvertent security problems – oversights, zero-days, etc. What about inherent and unavoidable problems? When the…