High Turnover Equals Increased Risk
After the revelation that over 76 million users and 7 million businesses were affected by the recent JP Morgan Chase & Co. (JPM) data breach, many observers are wondering what lessons can be...
View ArticleOne More Data Breach: Are We Desensitized Yet?
Home Depot is reporting that it could be the point of origin for a massive credit card breach. Multiple banks, correlating compromised accounts, hint that the large home improvement retailer’s 1,977 US...
View ArticleFear, Greed & Curiosity:
Within the last few years, there has been growing popularity in social engineering attacks. We have experienced a change in both end user and attacker behavior, resulting in adaptations in attack...
View ArticleBeware: Backoff Malware Not to Be Taken Lightly
The government has been issuing warnings for a month now, and finally organizations are beginning to listen. On Friday, The Department of Homeland Security (DHS) published a release encouraging...
View ArticleTwo More Cases of Threat Visibility
As Jason mentioned in his post, last week brought yet more breaches to light in the form of Community Health Systems and now UPS Stores. To be fair, the UPS Stores breach affects a much smaller...
View ArticleClik here to view.
Who is going to be the next “Biggest Loser”?
All too often I hear the phrase, “compliance does not equal security”. While this statement is absolutely true, the statement in itself does not provide sufficient context. Compliance does not equal...
View ArticleClik here to view.
Weak Passwords | Defensive Readiness Program (DRP)
As we mentioned in the introduction to this blog series, SecureState has reviewed years of data in order to develop these attack vector results. By a decisive margin, weak passwords is clearly the...
View ArticleClik here to view.
Unraveling the Onion: A New Take on Defense-in-Depth
Like most areas of study, there are certain analogies that we learn as students that stick with us for the rest of our careers. In medical school, you might learn to associate the circulatory system...
View ArticleP.F. Chang’s Breach and the List of Unanswered Questions
Nearly two months ago, security blogger Brian Krebs broke the news about a credit card data breach at the chain restaurant P.F. Chang’s. This week the company’s CEO has posted an update regarding the...
View ArticleClik here to view.
It is Time to Stop Crossing the Line; A Risk Perspective
Time after time users are getting bit by not implementing a simple, but elusive concept; egress filtering and segmentation. With all the recent news about new variants of the Backoff POS malware, what...
View ArticleClik here to view.
What We Do Series: Organizing FTP Logs
Begin Blog: 10:54am EST I cannot remember the last time I actually reviewed FTP logs…. The layout of the ISS FTP log format (W3C) is well documented, but that was not the issue today. We are reviewing...
View ArticleWhat We Do Series: Decide How to Backup Our Data
Begin Blog: 13:20 EST; Shutting down Windows 7 Professional Edition The reason for today’s restart is that I was attempting to backup data to one of our network drives when I discovered that I could...
View ArticleClik here to view.
What We Do Series: Find Egress in PCAP Files
What We Do When Waiting for Windows to Boot… Welcome to the new series-based blog that provides our consultants something to do when powering up lab and analysis systems running *certain versions of...
View ArticleEU Directive Provides No Safe Harbor for US Firms
Earlier this year, 12 United States (US) business were identified as having violated their EU Safe Harbor attestations; essentially these companies had falsely claimed compliance (or allowed their...
View ArticleClik here to view.
Why Your Investment may not be Secured:
If you follow the start-up industry, specifically crowd-funding, you may have noticed that Kickstarter.com was breached. In a letter sent out to their customers, Kickstarter stated, “While no credit...
View ArticleClik here to view.
Stolen Vendor Credentials? What You Should Do Now
A little more than a month after Target announced it suffered one of the largest data breaches in history, we now know that stolen vendor credentials were the keys to the kingdom. So what does this...
View ArticleClik here to view.
What Happens When Your MSSP Fails?
SecureState was recently called in to help a client who experienced a data breach. When we arrived on site, everyone at the company was in disbelief that anything could have happened, since they hired...
View ArticleClik here to view.
Data Breaches Continue Unabated
Why do organizations keep suffering from relentless massive data breaches? Weak security, executive management ambivalence, increasing hacker prowess? Maybe all of the above, but the more cogent reason...
View ArticleClik here to view.
Back to School Online Safety
Like many parents, we’ve sent our kids back to school and we discuss among ourselves how quickly kids grow up. What some parents don’t realize is that their kids, especially those in middle school and...
View ArticleClik here to view.
Migrating to a Cloud Environment
As the Cloud moves from hype to initiation and growth, organizations are considering larger migrations of systems that have wide-reaching effects on IT and security departments. Clearly, there have...
View Article
![[imports/adg/photos/213899875_Police-Car-Lights-2.jpg]](http://wehco.media.clients.ellingtoncms.com/imports/adg/photos/213899875_Police-Car-Lights-2_t600.jpg?4326734cdb8e39baa3579048ef63ad7b451e7676)
