By: Carolyn Crandall The announcements on the hardware bugs dubbed Meltdown and Spectre, with particularly severe flaws for Intel and some ARM chips, has hit the news hard this week. Meltdown allows low privileged user programs such as database applications or JavaScript in web browsers...
By: Mackenzie Blaisdell In today’s world, client confidentiality goes beyond the customary non-disclosure regulations of attorney-client privileges; it comprises the cybersecurity measures a firm is willing to take to protect their client’s sensitive data, from basic confidential knowledge to major corporate trade secrets. Breaches within...
By: Carolyn Crandall 2017 was the year of unrelenting breaches. Unbelievable amounts of personal information were compromised, ransomware attacks reached into billions of dollars, and breach fines that cost companies millions. Not to be left out, threat actors also crossed ethical boundaries with attacks that...
By: Carolyn Crandall There is widespread industry discussion and debate about the current Active Cyber Defense Certainty Act (ACDC), introduced to Congress in March of 2017, that would allow companies the right to hack back after a “persistent unauthorized intrusion.” This bill has...
By: Carolyn Crandall When my kids were little, I used to read them “Pat the Bunny,” a “touch and feel” book where they could feel the fur of a rabbit (fake), or sandpaper that represented dad’s scratchy face in the morning. As we have learned...
By: Carolyn Crandall It is never a good time to have to report a Point of Sale (POS) breach, but having to do so as holiday spending season commences is especially miserable, as this is a sure way to lose consumers’ trust and confidence in...
By: Carolyn Crandall In my day-to-day conversations with the security community, including at the 2017 ISSA International Conference held in early October in San Diego, I continue to be surprised by misconceptions some very experienced cybersecurity professionals have about deception technology. I suspect it is...
By: Carolyn Crandall Halloween is here. A time for spooky, scary fun and one of my favorite holidays. When else can you openly become any one that you want to be and "trick" people out of candy. Genius! I love the parallels to deception-based...
By: Carolyn Crandall As Halloween approaches, I was thinking how appropriate that it comes on the last day of Cybersecurity Awareness Month each year. It is oddly fitting that this month Yahoo revised upward the number of people impacted by its 2016 breach from...
By: Carolyn Crandall Last week, Attivo Networks participated in The Information Systems Security Association (ISSA)® event in San Diego, CA. With the theme of “the Digital Danger Zone,” the conference focused on topics ranging from incident response to application security to business skills for the...