Attackers Still use Drupalgeddon2 Vulnerabilities for Cryptojacking
A vulnerability in Drupal’s content management system was found weeks ago, but as with many patches site owners either don’t know that they need to patch their software or they disregard it as unnecessary. Unfortunately, this is the crux of a widespread problem in recent days that indicate more attackers are using the Drupalgeddon2 exploit…
Read MoreMore Malicious Sites Threaten Your Organization’s Cyber Security
Having Internet access is a must for most employees. They need it for various productivity tasks. What was once a “nice to have” is not necessary for job function, and IT administrators are forced to provide Internet access even if it’s limited to certain parts of the web. The difficult part is providing open Internet…
Read MoreMalware Writers Use Memcached Servers to Amplify DDoS Attacks
Insider threats aren’t just malicious attacks on your network. Some risks are from poorly configured servers. Whether it’s negligent IT configurations or improperly updated critical software, these threats can do massive damage. The risks associated with these threats include data leaks and your servers being used in a botnet to attack other sites. A recent…
Read MoreInsider Threats and the Dangers of Crypto Mining to the Enterprise
Although there has been several debates on the advantages and disadvantages of cryptocurrency and the enterprise, one issue with it is cyber security. Dealing with bitcoin or any other cryptocurrency could be an advantage for revenue, but cyber security experts are concerned with the risk of mining and using internal resources on the local network.…
Read MoreWhen Human Error Sends Panic Across the Country
On January 13th, the state of Hawaii went into a state of panic when they received an emergency text message telling them that a ballistic missile was incoming. It took 38 minutes before a follow-up message was sent telling people that the message was in error. The governor of Hawaii later held a conference explaining…
Read MoreProtecting Your Organization from Insider Threats
Most organizations know that they need cyber security to protect from outside threats, but what they don’t account for is the growing number of insider threats. Insider threats come from trusted employees, which is something most employers don’t consider. It’s hard to imagine that a trusted employee could be the one to cost you millions…
Read MoreThe Eastern Threat
From the US presidential election to Kaspersky, there is nary a day that goes by that doesn’t contain at least one reference to nefarious cybersecurity acts sponsored by Russia and Russian-aligned entities. The Baltic NATO members have felt that threat and in even in nations like the Ukraine, competing factions vie for influence with the…
Read MoreOne Hard Lesson From the Breach of Breaches
Spoiler alert: we’re talking about Equifax. It seems like once a week there’s a new hacking making headlines. The one at the top of our list lately that we’re reading obsessively about—Equifax. In the wake of the Equifax breach, businesses, lawmakers, and individuals (including all of us over here) are putting the protection of our…
Read MoreMedical Security with GateKeeper
GateKeeper is a localized wireless tracking solution that allows for constant real-time monitoring of personnel in a pre-determined and well-defined location. Personnel only carry a small wireless Smart Key with them, and their presence and absence in the trauma center will automatically be monitored. This system does not require any action from the care provider,…
Read More