Archives
Categories
- Announcements
- Apple
- Applications
- Backup and Disaster Recovery
- BYOD
- Cloud Computing
- Compliance
- Cryptocurrency
- Customer Service
- Cybersecurity
- DFARS
- Dynamics NAV Hosting
- Firewall-as-a-Service
- HIPAA
- iOS
- IT Best Practices
- IT Expenses
- IT Outsourcing
- IT Security
- Legal Vertical
- Linux
- Managed IT Services
- Medical, EMR, EHR
- Microsoft Azure
- Mobile
- Mobile Computing
- New Jersey
- New York City (NYC)
- Office 365
- PCI
- Rancho Cucamonga Location
- Rant
- Regulatory Compliance
- SharePoint
- Small Business
- Software Development
- Sort of Technical
- Tools/Utilities
- Troubleshooting
- Ubuntu
- Uncategorized
- Very Technical
- Virtualization
- Windows Surface
- Announcements
- Apple
- Applications
- Backup and Disaster Recovery
- BYOD
- Cloud Computing
- Compliance
- Cryptocurrency
- Customer Service
- Cybersecurity
- DFARS
- Dynamics NAV Hosting
- Firewall-as-a-Service
- HIPAA
- iOS
- IT Best Practices
- IT Expenses
- IT Outsourcing
- IT Security
- Legal Vertical
- Linux
- Managed IT Services
- Medical, EMR, EHR
- Microsoft Azure
- Mobile
- Mobile Computing
- New Jersey
- New York City (NYC)
- Office 365
- PCI
- Rancho Cucamonga Location
- Rant
- Regulatory Compliance
- SharePoint
- Small Business
- Software Development
- Sort of Technical
- Tools/Utilities
- Troubleshooting
- Ubuntu
- Uncategorized
- Very Technical
- Virtualization
- Windows Surface
Cybersecurity
Tips for Cybersecurity and Password Hygiene in 2019.
2018: A Year of Breaches. Now Everyone Needs to Pay Attention to Cybersecurity
Posted on February 2nd, 2019 in Cybersecurity2.6 billion records containing email addresses and passwords have been exposed in a new data breach.[i] Within this collection were nearly 800 million unique credential combinations (close to 3x the population of the USA). Hackers know that most people have a nasty habit of using the same credentials across many (if not all) of the sites they use. The first…(read more).
Comments (0)A Discussion on the NIST Cybersecurity Framework
Posted on December 21st, 2018 in Compliance, CybersecurityOn December 17th, 2018 I held a teleconference to discuss the topic of the NIST Cybersecurity Framework with my partner Eric Burke Cybersecurity expert and consultant, Jeff Miller. The complete video is published on YouTube. Below, we are also providing a transcript of the entire call. This content is also available in the form of our cybersecurity and regulatory podcast…(read more).
Comments (0)Do I Really Need Disk Encryption as a Covered Entity Under HIPAA?”
Posted on September 28th, 2018 in Compliance, Cybersecurity, HIPAAIn a word, yes. HIPAA section 164.308 requires covered entities to “implement security measures sufficient to reduce risks and vulnerabilities to a reasonable and appropriate level.” Is it reasonable to have employees’ potentially leaving unencrypted laptops in the back seats of taxi cabs with private data on them? Of course not! The scenario of stolen, unencrypted laptops has played out…(read more).
Comments (0)Concerned About Cybersecurity? Stop Using Insecure Checks for B2B Payments.
Posted on September 10th, 2018 in Compliance, CybersecurityThe non-stop drumbeat of devastating headlines has woken up many business owners and executives to the perils of data breaches and theft. As a result, many have carved out large portions of their IT budgets to protect their valuable, mission-critical business data. And then they get out their checkbooks and pay for these services with a paper check, blissfully handing…(read more).
Comments (0)Obligations Under New Jersey Breach Data Notification Laws
Posted on September 7th, 2018 in Compliance, CybersecurityYears ago you would only read about a data breach once in a blue moon – it was the rare exception. Fortunately, it continues to be the rare exception, but as the world has moved to become fully digital, the frequency of significant data breaches is no longer like finding a four-leaf clover. Every business must anticipate the possibility of…(read more).
Comments (1)Exploiting Rowhammer Remotely (Throwhammer)
Posted on August 20th, 2018 in Cybersecurity, IT SecurityIt’s been three years since the introduction of rowhammer, a technique of bypassing memory isolation protection mechanisms to flip bits in memory. This attack occurs when a hacker gains code execution privileges on a local system and then rapidly writes and rewrites memory to force capacitor errors in DRAM. This corruption of memory contents can lead to the wrong instructions…(read more).
Comments (0)The Small Business Owner’s Guide to Preventing Data Loss and Theft in 2018
Posted on December 8th, 2017 in Cybersecurity, IT Best Practices, IT Security, Small BusinessDid you know that 50% of all cyber attacks carried out today target small businesses? In fact, CNBC reported in April 2017 that 14 million businesses had been attacked in the last year alone. Your business could be next. But it doesn’t have to be! The truth is that there are steps every small business owner can take to protect…(read more).
Comments (0)Serious Flaw Identified in the Most Common Wireless Security Platform
Posted on October 16th, 2017 in Cybersecurity, IT SecurityYesterday, researchers identified a security flaw in the wireless standard (WPA2 or “Wifi Protected Access v2”) used by all hardware and software vendors worldwide. The flaw is known as “KRACK” after the methodology used to gain access to secure wireless networks (key reinstallation attacks). Summary WPA2 is the wireless standard that defines how devices and wireless networks exchange data securely with one…(read more).
Comments (0)What We Test In Penetration Testing
Posted on October 5th, 2017 in Compliance, Cybersecurity, IT SecurityWith the proliferation of both small and high-profile breaches occurring globally, it is vital to identify and diagnose security vulnerabilities in your company’s IT infrastructure and assets before a breach or intrusion takes place. Penetration testing, also sometimes called 3rd. party pen testing when done by an outside firm, offers real-world, real-time analysis to determine specific security vulnerabilities in your…(read more).
Comments (0)The Dispelled Myths Associated With Ethical Hacking
Posted on September 27th, 2017 in CybersecurityAn ethical hacker seems to be a misleading term until you begin to realize why they do what they do. While most people believe that there isn’t a good side to hacking, those in the technology industry understand just how beneficial hacking skills can be when testing new systems and strengthening security protocols. All Hackers Are Not the Same A…(read more).
Comments (0)
Sign Up For Updates
