Resources

There is a new, growing attack surface that is becoming increasingly dangerous to your network operations—the cloud, specifically your Google Apps or Microsoft 365 cloud instances. I have read commentary that M365 is believed to have the greater attack surface.

Welcome back! This summer flew by, and my summer vacation seems like a distant memory. In my 44 years of helping schools open for the new school year, this one was different. Several districts suspended all major work the last week of August. This was a summer of busy projects.

A year ago, my very short wife sat in a restaurant during March Madness on a bar stool that was too tall for her. The result was that while getting down off the stool, she blew out a disk in her back and was in tremendous pain. We went to a local ortho walk-in clinic.

You already know that “all” in security protection is vitally important. You need all your endpoints and servers protected with something. Hopefully, that something is EDR, MDR, and XDR products like CSI’s CSEDR powered by SentinelOne, CSMDR powered by Blackpoint plus SentinelOne, or CSI’s Managed XDR service powered by BlueShift Cybersecurity.

You have probably heard of the AT&T breach by now. Reports describe it as the largest breach in history with serious national security consequences. AT&T has reported that threat actors stole all client call and text records for six months. I have not read anything indicating that the threat actors know the contents of any […]

“Trust but verify.” -President Ronald Reagan, December 8th, 1987, at the Intermediate-Range Nuclear Forces (INF) Treaty Signing I watched a presentation the other day by the head of Threat Operations for a major Security Operations Center (SOC) that provides 24/7 security oversight over networks like yours.

It has been a rough two weeks for many of us who support technology for our school districts. We have experienced the worldwide meltdown of CrowdStrike due to a faulty update.

During the Pandemic, Threat Actors had a field day using phishing and SEO poisoning to attack users. We are in the same climate again with the horrible events of the last few days. Threat actors who practice phishing attacks are already using this event to send bombastic emails with salacious titles mentioning the event, knowing […]

Gabe, Lisa, and I attended the annual CyberSecurity Summit at my Alma Mater, Marist College. Back in the day, at the beginning of the IBM/Marist Joint Study, I was asked to be on the board of that program. My 20-year-old self had a lot of fun hanging out with the CEO of IBM and discussing […]

Would you be comfortable giving your plumber the key to your house so he/she can come in at any time to fix anything they might feel is amiss? The answer is probably no. Did you know that when you give a vendor unfettered access to your network you are essentially doing the same thing? Similarly, […]