Archive for the ‘Blog’ Category

Multi-Factor Authentication Now Required to Get a Cyber Insurance Policy

Thursday, March 31st, 2022

With ransomware and malware attacks getting more frequent and sophisticated year after year, more businesses are waking up to the reality that it isn’t a matter of if their company is going to be hit, but when. By 2025, global cybercrime is estimated to cost over $10.5 trillion annually, and your organization could be one […]

The Skynet-Google Situation

Wednesday, July 28th, 2021

The malware crisis is alarming enough on its own, but seeing the reaction of “Big Tech” raises even more concern. There exists a blockchain called “Sia” that was created to be a platform for decentralized data hosting. Anyone can use free space on their PC to be a host, and the data is seeded across […]

Protecting Your Remote Workers

Monday, February 1st, 2021

It’s been almost a year now, since the pandemic seemingly turned our worlds upside-down in what was seemingly an instant.  Many workers who had never worked remotely began doing so on a regular basis.  And while that was immensely helpful in curtailing the spread of the physical virus, e-viruses have flourished, as anyone with even […]

Apple Patches: Update Your Apple Device NOW

Tuesday, January 26th, 2021

Today, Apple offered emergency security patches for the iOS 14.4 and iPad OS 14.4 platforms, warning users that they found three separate security vulnerabilities… Vulnerabilities that hackers might already be in the process of exploiting. READ: DO NOT DELAY UPDATING YOUR iPHONE OR OTHER APPLE DEVICE!!! While Apple declined to provide in-depth vulnerability details, here […]

Catch the Wave?

Wednesday, January 13th, 2021

Waves are everywhere, even if you don’t see them. In fact, you can’t see them until you observe them- hence the very weird “double-slit” experiment. As patterns go, they extend for what appears to be forever. Don’t believe us? Just ask the fractal (rapidly expanding) universe. Talk about a bad case of entropy! Surprisingly, these […]

Parler: Gets Hacked, Goes Black

Monday, January 11th, 2021

It was a dark week in US politics last week, ranging from the storming of the Capitol Building on January 6 to impeachment papers being drafted on the president, for inciting said act. But it’s turning out to be a dark week for others, as well. Take John Matze, for example.  He is the CEO […]

All Aboard the Bitcoin Bandwagon: $40K and Beyond!

Friday, January 8th, 2021

With only 8 days in, 2021 boasts a smorgasbord of choices for “Breaking News” headlines. Our favorite?  Bitcoin. The flagship cryptocurrency has hit record milestones, making believers out of many. From Forbes: “The bitcoin price has added a staggering 400% over the last 12 months, climbing as institutional investors warm to the cryptocurrency and payments […]

Physical and Cyber Security Breached in Capitol Building

Friday, January 8th, 2021

The breach of the Capitol building this week was both shocking and scary, but what is clear from the pictures that are emerging is that it was not only the physical structure that was violated that day. What we have seen since Wednesday is that the MAGA rioters were able to not only able to […]

Own Zyxel a Device? Update it NOW.

Tuesday, January 5th, 2021

Critical Threat Discovered A hardcoded, admin-level backdoor vulnerability (CVE-2020-29583) has been found in over 1000,000 Zyxel firewalls, VPN gateways, and access point controllers.  Discovered by Eye Control researchers, these backdoor accounts can allow bad actors to access your information either via the web administration panel or the SSH interface This flaw is so vulnerable, in […]

SolarWinds Breach: Did We Learn Our Lesson Yet?

Monday, December 28th, 2020

With time going by and no real response from the White House regarding the SolarWinds breach, it can be pretty easy to forget about it and move on to the next media cycle.  Because that’s what we tend to do here in the US. However, doing that is just NOT a good idea in this […]

New Cyber Superhero? Microsoft Flexes its Cyber Muscles

Friday, December 18th, 2020

It’s true that the current administration does not appear to be reacting to the massive CozyBear cyber breach it fell victim to this year, but fortunately, it appears that somebody is doing something. Who is that somebody? This little company you may have heard of before; it’s called “Microsoft.”  And if there was ever a […]

The Hack that Keeps on Hacking

Tuesday, December 15th, 2020

Every day, the information we learn about the FireEye hack just keeps getting increasingly worse. Last week we wrote about the hack occurring; yesterday we reported that not only was FireEye impacted, but the US government was, as well… Along with businesses and other governments across the globe; and today, we are starting to understand […]

Russian Attack on Cyber Security Firm Impacts US Government

Monday, December 14th, 2020

We wrote last week about the irony of FireEye being successfully infiltrated by hackers, and we cut them some slack because we realized that the attack was highly sophisticated…  FireEye is a $3.5 billion Cyber Security firm that has some big and important clients, like the US government, and though Russia is saying that the […]

GoDaddy Employees Tricked ONCE AGAIN

Tuesday, November 24th, 2020

GoDaddy employees were the target of a sophisticated (and successful) cyber attack… Again. GoDaddy is THE biggest domain registry across the globe.  In this scam, hackers were able to lure GoDaddy employees into transferring control and/or ownership of specific domains over to them, closely mimicking a ploy conducted in March, in which bad actors used […]

Hackers Leave Top Law Partner Functionally Homeless

Friday, November 20th, 2020

I’m not sure who exactly needs to hear this?  But for those in the back: Hackers.  Have.  No.  Shame. They not only give zero flips that there’s a deadly pandemic raging here in the US, but they are using the vulnerabilities created by virtual class- and boardrooms to their advantage… To extreme degrees. Just ask […]

Chris Krebs, Respected Director of CISO, Fired via Tweet

Wednesday, November 18th, 2020

In “news-that-comes-as-a-surprise-to-absolutely-nobody-paying-attention-but-is-still-noteworthy, Chris Krebs (who has been telling anyone that would listen for over a week now that he knows it’s only a matter of time before he is let go), respected Head of the Cybersecurity and Infrastructure Security Agency (CISA), was fired last night around 7 p.m. via a tweet… exactly two weeks to […]

Must I Comply with the New DFARS Interim Rule?

Wednesday, November 11th, 2020

Based on some confusing and potentially conflicting information we have found, we thought it was extremely important to clarify all expectations that the DoD has of its primes, subs and vendors. From listening to podcasts, watching and attending webinars, and reading any and every publication and white paper we can get our hands on, one […]

NIST Dishonesty: What Happens When Contractors Aren’t Truthful

Monday, November 9th, 2020

Penalties: Case Studies (An Excerpt from Craig’s newest book: “Ultimate Guide to CMMC: How to Access Millions in Government Contracts”) As we have established, it is clear that the “self-reporting” and “honor system” for government contractors who are required to abide by NIST 800-171 to gain government contracts is NOT working. But just because everyone […]

URGENT DFARS UPDATE: Do Not Lose Your Contract!

Friday, November 6th, 2020

“CMMC certification is your Driver’s License on the Information Superhighway.” -Katie Arrington And if that’s the case (which it is), then the self-assessment required by the new DFARS Interim Rule is your permit… One that you must attain before December 1st, 2020 if you want to keep your car on the road- or your contract […]

WARNING: Healthcare Industry Under Active Ryuk Attack

Tuesday, November 3rd, 2020

Intrigue. Subterfuge. Deception. Suspense. Is this a new James Patterson novel?  No, but it could very well be…  This is the tale of a new kind of attack – an attack in the Digital Age, where one person, clicking on an expertly-executed devious email and opening an innocuous-looking Google Doc, allowed hackers in 2020 to […]