External auditing and the human element

External auditing and the human element For the analysis of internet security, the subject can be broadly divided into three components: software, processes, and people.  They all function dependently on one another.  Like blocks in a wall, they need to function...

Ubiquity UI.com announces supply chain breach

As reported by ZDNet today UI.com home of Ubiquity network and security products announce a breach of its data systems via a supply chain attack.  It was as noted via a suspicous email although its origin story checked out.  Deatials are sketchy.  "We recently became...

Update on Solarwinds exploit and what to do.

Although the hype around the SolarWinds breach is slipping into distraction. The need to do something about the security situation remains.  The focus on one company, even a high-profile vendor like Solarwinds sensationalizing long known supply chain breaches shows a...

CISA December Bulletin re: Orion etc.

The infiltration of systems can be reduced and must be remediated now. One thing we know about supply chain attacks is they can be stopped with careful internal and external auditing.     CISA Insights: What Every Leader Needs to Know About the Ongoing APT Cyber...

Audit IT now

It is less dystopian nightmare of books and movies that we have to fear, rather the bad actors at home and abroad that attack easily compromised systems.  Internal audits are nessesary and yet not enough. External IT Audit analysis provides a back stop to your...

R1 RCM ransomware take down

R1 RCM exploit means that there is likely an uptick in ransomware attacks coming in the second half pf 2020. External auditing, backup, training, and internal auditing is necessary now.

Update on Capital One data breach

Update on Capital One data breach

Update on the Capital One breach A criminal complaint was filed in the Western District of Washington on July 29, 2019 against one Paige A. Thompson accusing her of committing the Capital One breach.  A link to the complaint is available here:...