The Magnificent Seven 2019
Seven trends impacting Information Security Officers of Small Institutions! Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . Welcome to the Magnificent Seven, my annual predictive article, affectionately dubbed “M7,” about the seven trends in bank technology that will impact the Information Security Officers of small banks […]
Subdomain Hijacking Attack Gives Hackers Access To Legitimate Sites
The attack hinges on a common mistake made by large organizations… An article review. When evaluating a suspicious link, you probably scrutinize the URL to make sure it’s the site you intended to go to—not one that is slightly misspelled or has a zero in place of an O, for example—but what if the bad […]
KPMG Admits “Astonishing” Misconduct, Accepts Record Fine
The firm edited workpapers ahead of examinations, and had employees cheat on certification exams… An article review. We rely on accounting firms to provide us with accurate, unbiased information, but it appears that KPMG—one of the largest firms in the world—has been engaging in misconduct that the SEC has called “astonishing,” according to an article […]
Confirm Email Links – Awareness Poster
Another awareness poster for YOUR customers (and users). Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Download the large versions here:
Equifax Downgraded Over Data Breach
For the first time, a data breach has triggered a financial downgrade… An article review. If you’ve been following our blog–or just been watching the news–for the past couple of years you’re no stranger to coverage of the massive data breach suffered by Equifax in 2017. While much of this coverage has focused on the […]
Four Risk Appetite Statements
Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . For all the same reasons a board of directors would want to establish a risk appetite statement on loan risk or other major risk categories, the 2015 Cybersecurity Assessment Tool gave us the ability to establish […]
Interns Present New Social Media Risk
A new generation of interns may open organizations up to new risks… An article review. If you’ve been paying attention to the world of breaches and other security lapses over the years, the idea of the “insider threat” is probably nothing new—your own employees can sometimes be as likely to cause an incident as a […]
Fake Charities – Know How Your Money is Being Spent
Another awareness poster for YOUR customers (and users). Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Download the large versions here:
Many School Districts Are Still Vulnerable To WannaCry
Years after patches were released, many systems remain vulnerable… An article review. While it has been over two years since the WannaCry exploit was publicly announced, a new report submitted by our own Sean Waugh says that hundreds of thousands of internet-connected machines are still vulnerable…and many of those machines belong to government agencies and […]
Google Nest Highlights IoT Risk
Product longevity and data privacy have been called into question… An article review. When Google announced it was absorbing smart thermostat maker Nest in 2018, many customers were concerned about the future of their internet-connected devices and the privacy of their data. Those fears were realized during Google’s I/O 2019 event, where several changes to […]
