Risk Management articles

HTTPS needed at least two decades to take hold, for a bunch of curious and sometimes contradictory reasons. Join Paul Ducklin for Part 1 of this peculiar but educational tale…

Dire cybersecurity warnings about QR codes are commonplace, but is the risk really as bad as some vendors are saying?

What do you do when malware you’re chasing hasn’t left a copy of itself behind on disk? Or if it’s lying about where to find it, so you grab the wrong thing?

Sometimes, measurements and observations that seem obvious and intuitive turn out to be way off base.

These ‘bad guesses’ can lead to all sorts of risky conclusions, especially in cybersecurity.

Following our recent article series about VPNs, a reader asked about Tor, saying, “Can you give us a balanced view so we can figure it out for ourselves?”

The answer is: Yes!

The healthcare industry has had a rough start to 2024. It’s still reeling from February’s attack on Change Healthcare that brought production screeching to a halt. The breach shut down offices and healthcare facilities, cut off patient access to medication and care, and cost large hospitals and pharmacies upward of $100 million per day. Though Change has managed to get many of its systems back online, an American Medical Association survey conducted on April 29 found that 60% of respondents […]

Just how much security does a VPN give you?

What could go wrong with the security you think you’re enjoying, and what potential problems do you need to be aware of?

Just how much security does a VPN give you? What could go wrong with the security you think you’re enjoying, and what potential problems do you need to be aware of?

Businesses are desperate for cybersecurity offerings, and business owners often turn to you, the MSPs, for help. An MSP is the logical first choice to consult because you’re already handling the business’s IT. Unfortunately, the sophistication and growing number of cybersecurity threats mean that MSPs may not have the resources or expertise to stay current and offer their customers reliable and consistent security service. Organizational cybersecurity needs have grown multifaceted and vast. The move to cloud-first services opens the door […]

Do you back yourself to spot the scams that drop into your email inbox?

Could you teach your friends, family and colleagues to do the same?

Organizations of all sizes face multiple cybersecurity challenges these days. Speaking recently at the Munich Security Conference, FBI director Christopher A. Wray said that the current threat environment is “more severe and more complex than ever before.” Not only have hacking tools grown more sophisticated, but they’re also easier to obtain. Additionally, artificial intelligence and the use of deep fakes make threat actors more convincing when using social engineering tactics, as reported by the U.S. Department of Homeland Security. Adding […]

Could quantum computers kill off encryption as we know it? If so, what can we do about it, and how long do we have to get ready?

Cybersecurity is no longer a “nice to have.” It’s a necessity for businesses of all sizes in all industries – whether or not they have a full-scale security team to implement and manage the program. However, setting up a cybersecurity program is significant work, and keeping up with best practices is challenging, even for large organizations. That’s why public cybersecurity frameworks have been developed.  Cybersecurity frameworks are sets of standards and processes that businesses use to implement and manage security […]

Could quantum computers kill off encryption as we know it? If so, what can we do about it, and how long do we have to get ready?