Matt Roberts

I think Google cloud can be very convenient for a number of uses. It has very rapid expandibility and a myriad of use options on server-class hardware. It’s also extremely economical as you only pay for what you use, when you use it. The Google cloud makes it incredibly easy to quickly spin up a server of any kind. However, not having physical…[Read more]

https://news.sky.com/story/talktalk-urged-to-improve-cybersecurity-in-wake-of-worryingly-easy-web-system-flaw-11307730

UK telecommunications company TalkTalk has come under fire for a long-existing vulnerability in their websites. An anonymous hacker contacted news agencies about an easily exploitable function in many of their sites allowing a…[Read more]

https://www.cnbc.com/2018/03/16/only-13-percent-of-government-employees-take-personal-responsibility-for-cybersecurity-survey-finds.html

A recent survey was conducted of government employees which found that only 13 percent believed they had total personal responsibility for the security of their workstations. Even more troubling, 1 in 3…[Read more]

https://globenewswire.com/news-release/2018/02/21/1372539/0/en/Cisco-2018-Annual-Cybersecurity-Report-Reveals-Security-Leaders-Rely-on-and-Invest-in-Automation-Machine-Learning-and-Artificial-Intelligence-to-Defend-Against-Threats.html

A recent survey has revealed that as cyber security needs keep growing and labor supply struggles to keep up,…[Read more]

iOS 9 Leaked

https://www.technewsworld.com/story/85126.html

A portion of the source code for Apple’s iOS 9 mobile operating system has been leaked recently on GitHub. Apple has issued a copyright violation notice since then and maintained that the leak of this code should not compromise security, especially that of their more up-to-date…[Read more]

Hacked Cameras, DVRs Powered Massive Internet Outage
https://krebsonsecurity.com/2016/10/hacked-cameras-dvrs-powered-todays-massive-internet-outage/

In October of 2016, a massive attack on the internet infrastructure company Dyn caused massive outages throughout the country. The source code of a malware strain called Mirai had previously been…[Read more]

I think what you described is the main concern from a business perspective and the primary measure to combat this threat is to have documented procedures in place for key functions. This along with cross training can help ensure business continuity when disastrous external events take place. At the same time, however, cross training can be a…[Read more]

In general, I think this principle can translate into most areas technology. With a proprietary protocol or software, only the developers have reviewed the code and may be limited when it comes to recognizing weaknesses as they are “too close” to it. Open protocols tend to be more secure over time as more people can examine it in depth, and more…[Read more]

This is an interesting turn for the market considering Apple has long been considered the top brand and even the standard for personal mobile devices. Google has far outgrown its original status as a simple, but powerful search engine in a once competitive market for internet search tools. This technology, however, has become very ubiquitous,…[Read more]

This is really interesting insight into the reason that IT security is starting to become such an increasingly important field. Threats are becoming more and more sophisticated and many businesses’ personnel and policies are struggling to keep up. The need for both technical expertise and security-conscious administration has become vital to the…[Read more]

Very interesting article, for me it particularly shed more light on the continuing issues with Equifax’s response in recent weeks. Last week, I went on to their site and and typed my last six ssn digits to see if I was affected, and just as the article pointed out, it took almost no time to bring up a message telling me that I may have been…[Read more]

This is a very interesting and troubling trend. Smartphones could be very useful to attackers not only for the information stored on them, but also as springboard to launch attacks on bigger targets. This gives the attackers another level (or levels in the case of going through multiple devices) of anonymity and obscurity, making them more…[Read more]

This article brings up an issue that will ultimately have a very real effect on how information security is treated by all organizations going forward. This most recent decision from the appellate court grants consumers new leverages to file suit after data breaches, without having to prove actual injury or harm (such as identity theft). With…[Read more]

I think I recall hearing a bit about this recently. The most glaring mistake to me was that this compromised administrator account seemed to have such unrestricted access to a myriad of areas, which, to me, seems like blatant disregard for the concepts of least privilege and segregation of duties. The other thing is, with such a high-level and…[Read more]