Ahmed A. Alkaysi

Rarely do we talk about cyber security in terms of our actual safety, its usually more about our privacy. However, with the advent of electric cars, drones, and any other electrical device that can harm a person, I think a lot of people will start to take cyber security more seriously. It is good to see the aviation industry being pro-active to…[Read more]

Very interesting article. It’s scary to think that 1 Tbps attacks will become “commonplace” when we can barely defend against 100s of Gbps. I think the best way to defend against these kind of attacks is to make sure IoTs are better secured with strong passwords so that they won’t become part of the botnet in the first place.

Mobile security is absolutely necessary in the corporate world, and I don’t think companies are taking it seriously. My work has a policy where you cannot take any pictures on company premises, but I won’t say if there are any other policies in place. I think one of the most basic things employees need to do is avoid putting confidential work…[Read more]

I am actually surprised that only 6,000 infections are “live” even though the app has only a half million installs. It is very interesting and scary to hear that the malware is smart enough to not activate itself and do anything detrimental until it is “calling the shots” and 2 hrs have passed. One has to wonder what other malware is hidden in the…[Read more]

To be honest, I would be worried if a financial institution did not have these controls in place already. Why is this just now mandatory? Things like: Establishing a cyber security program and policy, conduct assessments and pen testing, and establish written incident response plan as stated in the article should already exist. If I was a CEO of a…[Read more]

Interesting article. At my company we deal with PII data. Employees aren’t allowed to bring any storage devices such as USB or external hard drives, The flow of information into and out of the company networks are being regularly monitored and we can’t send any attachments externally through email. If there is any PII data being sent in…[Read more]

Hi Jason,

It’s a shame really that the FBI refuse to cooperate and share details of the flaw with Apple. This is a disservice to the millions of iPhone users. I wonder if they had to sign some sort of disclosure not to provide details to Apple if they agreed to use this hack. Whatever the case might be, refusing to share this information does…[Read more]

At work we use a VDI to do anything work related. Even if we bring a our own device, we still need to login to the VDI using our RSA tokens. Obvoiusly the VDI isn’t as great performance wise, it solves a lot of the security issues with having to do work on your own device.

I have seen sites that are not secured by HTTPS, to have the HTTPS red and cross out in the URL. I have also received prompts upon entering the site that it is an unsecured connection and will need to go through a couple hoops in order to bypass it. Not sure if it a Chrome thing by default or a plugin.

Honestly, I wouldn’t be very comfortable at all selling this malware. Any government in the world can buy this malware and make a case that they are doing it for the “safety” of the public or to counter the terrorists. However, the reality is they will use this malware to further whatever agenda they have. If there is a strong enough case to try…[Read more]

I used to have a Wells Fargo account, but because they charged me 2 bogus fees I ended up closing the account. What Wells Fargo did is nothing short of stupid. However, I am not going to blame the actual employees that did this. I will blame the lack of IT controls, ethics, and low morals that this company promotes.

These kind of issues start…[Read more]

It’s a shame really, although they caught these guys, there are still so many people out their that sell these type of services. They are available all over the darkweb. Nothing the authorities can do other than to continue looking for these types of people, but even if they end up being caught, there are other alternatives.

This is very scary indeed. Altering the data wouldn’t only be a simple thing such as a cosmetic issue, it will also be a functional issue with potential to lose the company millions of dollars. Without getting into too much detail, where I work this type of data is used to authorize transaction made by credit cards. If any of the data is altered,…[Read more]

I totally agree with your statement that paying the ransom will “encourage more ransomware campaigns..” However, I remember reading an article a few months back where a hospital”s information system was basically held hostage until a ransom was paid. It is one thing if a company like Target experienced a data breach, but it something entirely…[Read more]

Great article Silas. The company I work for brought in a speaker to talk machine learning for cyber. The idea behind it is to automate tasks that a human might do. For instance, in the case of incident response where there was a network breach. Instead of having a human do the analysis on what and how something was stolen, and patching the system,…[Read more]