Risk Management articles

When you come across a threat that seems mundane at first glance, because it’s just “the uninteresting malware that comes before the real malware,” is it OK to let AI try to mop it up on its own?

Don’t miss this wisdom-filled podcast from the cybersecurity experts at SolCyber.

Banks with safe deposit vaults don’t set them up so that every box gets the same key, for obvious reasons.

But when it comes to online accounts, some of which we use for storing secrets as important as the documents we keep in deposit boxes, we’re not always so careful.

HTTPS, short for secure HTTP, which shields your browsing from both snooping and tampering, sounds like something that every cybersecurity-conscious company would have jumped to provide for its website visitors as soon as it possibly could.

But in an early example of a ‘Stop The Insanity’ story, HTTPS needed at least two decades to take hold, for a bunch of curious and sometimes contradictory reasons.

HTTPS, short for secure HTTP, which shields your browsing from both snooping and tampering, sounds like something that every cybersecurity-conscious company would have jumped to provide for its website visitors as soon as it possibly could.

But in an early example of a ‘Stop The Insanity’ story, HTTPS needed at least two decades to take hold, for a bunch of curious and sometimes contradictory reasons.

Join Paul Ducklin for Part 1 of this peculiar but educational tale…

Dire cybersecurity warnings about QR codes are commonplace, but is the risk really as bad as some vendors are saying?

We dig into the history and use of QR codes, so you can judge the dangers for yourself.

What do you do when malware you’re chasing hasn’t left a copy of itself behind on disk? Or if it’s lying about where to find it, so you grab the wrong thing?

Sometimes, measurements and observations that seem obvious and intuitive turn out to be way off base.

These ‘bad guesses’ can lead to all sorts of risky conclusions, especially in cybersecurity.

Following our recent article series about VPNs, a reader asked about Tor, saying, “Can you give us a balanced view so we can figure it out for ourselves?”

The answer is: Yes!

The healthcare industry has had a rough start to 2024. It’s still reeling from February’s attack on Change Healthcare that brought production screeching to a halt. The breach shut down offices and healthcare facilities, cut off patient access to medication and care, and cost large hospitals and pharmacies upward of $100 million per day. Though Change has managed to get many of its systems back online, an American Medical Association survey conducted on April 29 found that 60% of respondents […]

Just how much security does a VPN give you?

What could go wrong with the security you think you’re enjoying, and what potential problems do you need to be aware of?

VPNs used to be a conservative, corporate cybersecurity choice pitched as a way of improving control and compliance. These days, however, VPN ads are everywhere, aggressively pitching VPNs as a must-have consumer product for breaking free of unwanted controls and steering clear of snooping and surveillance. Quite a double-edged sword! How do VPNs really work, and what purposes do they really serve? The VPN dilemma You’ve almost certainly come across the magic cybersecurity letters VPN, short for virtual private network, […]

Businesses are desperate for cybersecurity offerings, and business owners often turn to you, the MSPs, for help. An MSP is the logical first choice to consult because you’re already handling the business’s IT. Unfortunately, the sophistication and growing number of cybersecurity threats mean that MSPs may not have the resources or expertise to stay current and offer their customers reliable and consistent security service. Organizational cybersecurity needs have grown multifaceted and vast. The move to cloud-first services opens the door […]

Do you back yourself to spot the scams that drop into your email inbox?

Could you teach your friends, family and colleagues to do the same?

Organizations of all sizes face multiple cybersecurity challenges these days. Speaking recently at the Munich Security Conference, FBI director Christopher A. Wray said that the current threat environment is “more severe and more complex than ever before.” Not only have hacking tools grown more sophisticated, but they’re also easier to obtain. Additionally, artificial intelligence and the use of deep fakes make threat actors more convincing when using social engineering tactics, as reported by the U.S. Department of Homeland Security. Adding […]