Blog Posts for IT Security

The news headlines are everywhere – especially since the war in Ukraine began – when numerous cyberattacks were reported against that country. Cybercriminals have not only launched attacks on all types of industries, but also on government organizations, both in the U.S.  and abroad. These bad actors want to steal sensitive information, compromise operations or hold data ransom for large amounts of money. (more…)

As organizations of all sizes extend their commitment to supporting remote workforces for the future, cybersecurity teams are finding that they need to address new risks to stay protected. Employees using insecure devices and networks have created new security vulnerabilities for businesses – and with Google tallying more than 18 million malware and phishing emails related to COVID-19 each day earlier this year, hackers have never been more active. (more…)

The role of Information Security Officer at your financial institution is arguably one of the most important positions to hire. And it’s crucial to assign this position as soon as your organization allows, especially considering the current risk landscape. (more…)

All Covered joined ICBA as a Preferred Service Provider to give its members the opportunity to secure and maintain regulatory compliance while implementing security measures to mitigate cyber threats. And while we can provide services that these members need in order to make their businesses function better, we also look to build new solutions based on community banking pain points. (more…)

When I ask clients about their IT security strategy, I am generally surprised at the responses I receive. Most of the time, they give me a list of security program elements currently in play: firewalls, vulnerability management, IDS, anti-virus, etc.

But just as a shopping list does not constitute a three-course dinner, a list of elements is not the same as an IT security strategy.  Nor is it the most optimal place to begin building one!

The next most common response I get, is that there is no formal, documented security strategy in place. The company simply “does its best to keep hackers out and protect against breaches”. (more…)

Talk about kicking off 2018 with a bang! In the first week of the new year, several researchers reported a newly-found vulnerability in processors designed by Intel, ARM and others: one that theoretically allows hackers to read even the most secure information on any device. (more…)

As we quickly transition into a new year, I think back on 2017 and the rash of cyber security stories that made national and international news. Ransomware like WannaCry and NotPetya, the Equifax breach, SMBv1 and SSL vulnerabilities, etc. Even a global phishing scam used a fake Konica Minolta C224e scan to email message as bait.

Most noteworthy in the printer industry were the major campaigns launched by various MFP and print providers. As it turned out, one of the most prolific printer security campaigns actually backfired when it was discovered that the very printer vulnerabilities described in the campaign were actually discovered on their own portfolio of enterprise printers. You couldn’t make it up if you tried. (more…)

Customers, regardless of size or vertical industry, continuously tell us that security remains a top concern. It’s easy to see why when the news is filled with data breach stories regarding Kmart, Target, Dropbox, NATO, JP Morgan Chase, the Montana Department of Public Health and Human Services and St. Joseph Health System (just to name a few).

No business or organization is immune. Cyber security has become such a big concern that the Department of Homeland Security has declared October National Cyber Security Awareness Month.

(more…)