Blog

We’ve been active in communicating around breaches within particular industries, breach requirements across the 50 states and the effects of GDPR on data retention, breach notification and email security. Now, with Australia’s breach notification requirements  in effect, there’s another consideration to add to the fold. As of February 22nd, 2018, Notifiable Data Breaches (NDB) cameRead more

As old as the open internet itself, ransomware made some notable headlines in 2017. WannaCry, NotPetya and Bad Rabbit all led the news cycle, and many companies were hit hard. As one of our leading trends to watch for 2018, we expect ransomware to make headlines again. The growth of cryptocurrencies, RaaS (ransomware as aRead more

In October 2010, STOP.THINK.CONNECT. (STC) was launched by the Department of Homeland Security. This initiative aimed to promote simple steps that people can take to increase their safety and security online. The aim was to create a coalition of private companies, nonprofits and government, led by the National Cyber Security Alliance (NCSA) and the Anti-PhishingRead more

Spearing, Whaling, Angling, BEC, CEO Fraud – they’re all phishing by any other name. Phishing has evolved and so have the names to go with it. What isn’t really changing is that the attacks tend to play on human emotions and desires. Here are a few phishing examples and the motivations taken advantage of byRead more

On March 1st 2018, Alabama became the last state to require that businesses notify their customers when their data has been breached (within 45 days of its occurence).  Only a few days before that, South Dakota’s State Senate made it second-to-last in passing Bill No. 62, unanimously requiring breach notifications to customers and the attorney general’sRead more