On a recent internal penetration test, I was able to obtain Domain Admin privileges in a segmented network by calling on my ancient digital forensics skill set. I got my start in infosec directly after college doing digital forensics and incident response for a few years, but I got tired of cleaning up after the […]
In today’s digital age, cybersecurity is no longer just an IT issue, it’s a critical business risk that can impact every aspect of an organization. This is even more true with the rise of artificial intelligence (AI). That’s why it’s more crucial than ever for Chief Information Security Officers (CISOs) to have a seat at […]
Many industries have regulatory requirements that mandate regular security assessments to help safeguard sensitive data. Penetration tests are key in this regard. These assessments not only identify and address vulnerabilities, but also help companies strengthen their overall security posture, reduce the risk of cyberattacks, and data breaches while demonstrating compliance with relevant regulations. Conducting penetration […]
Effective July 1, 2024 The data privacy landscape for Texans and businesses operating in the state has now changed significantly. With the Texas Data Privacy and Security Act (TDPSA), which went into effect on July 1, this comprehensive legislation grants individuals new rights over their personal information. Businesses are now responsible for reviewing their data […]
In today’s rapidly evolving digital landscape, cybersecurity is no longer just an IT concern. It’s a critical business risk that demands the attention of the highest levels of leadership. While a technically oriented Chief Information Security Officer (CISO) excels at understanding the intricate details of cybersecurity systems and vulnerabilities, a business-minded CISO brings a broader perspective. […]
The tech world has been buzzing about Microsoft Copilot over the past 12 months – and for good reason. The technology has the potential to enhance the way you work, as well as your experience within Microsoft 365. An AI-powered tool, Copilot offers personalized assistance by harnessing the power of diverse data sources, including your […]
Today’s dependence on technology demands the need for security. A quick scan of the news provides details on latest the breach of the day – yet another tale of how a hacker was able to bypass an organization’s security layers to gain access to customer data. Protecting your organization’s assets involves more than emphasizing cyber […]
Make no mistake: investing in cybersecurity is critical to the health of your entire organization. Once viewed as an IT issue, cybersecurity has evolved to become an organizational issue. While the investment spans technology, personnel, and training, these costs are frequently dwarfed by potential financial and reputational losses. Cyber threats continuously evolve, advancing in complexity […]
Your organization has made numerous investments to protect against external threats. But what about internal threats? Threats today aren’t just external, companies face challenges detecting and mitigating a wide range of internal threats. This includes individuals with legitimate access to your organization’s network who might use this access in a way that causes damage to […]
Background The Security and Exchange Commission (SEC) continues to convey the importance of Cybersecurity for publicly traded companies by finalizing additional rules requiring disclosure of material cybersecurity incidents on Form 8-K and periodic disclosure of a registrant’s cybersecurity risk management, strategy, and governance in annual reports. The rationale, in my opinion, results in the strengthening, […]