As more organizations move to the public cloud and to DevOps and DevSecOps processes, the open source alternative for host-based intrusion detection is finding new uses. Used by more than… Continue reading A ‘Cloudy’ Future for OSSEC

At least 21 individuals died during the 2019 Polar Vortex—including two university students. The University of Vermont and the University of Iowa both experienced deaths suspected to be due to… Continue reading Your Guide for Creating a Weather Preparedness Plan for Your Campus

Weather phenomenon isn’t the only concern when considering an emergency plan. OSHA defines workplace emergencies as “an unforeseen situation that threatens your employees, customers, or the public; disrupts or shuts down… Continue reading 5 Steps to Ensuring Employee Safety During an Emergency

The right to be forgotten is a fundamental aspect of both the GDPR and CCPA privacy laws; but its impact on personal information in data backups has yet to be… Continue reading The right to be forgotten versus the need to backup

(TNS) – Cambria County officials are making efforts to ensure that first responders can communicate effectively and consistently with each other when it matters most – during emergency calls. An… Continue reading Cambria County, Pa., Preparing for 911 Radio System Overhaul

Financial software company Intuit discovered that tax return info was accessed by an unauthorized party after an undisclosed number of TurboTax tax preparation software accounts were breached in a credential stuffing attack. A credential… Continue reading Tax Returns Exposed in TurboTax Credential Stuffing Attacks

Despite the openness of the Android platform, Google has managed to keep its Play store mainly free of malware and malicious apps. Outside of the marketplace is a different matter.… Continue reading Lessons From the War on Malicious Mobile Apps

The reports of the death of the field of business continuity have been greatly overstated. But those of us who work in it do have to raise our performance in… Continue reading Business Continuity, R.I.P.?

Recommended best practices not effective against certain types of attacks, they say. Automated online password-guessing attacks, where adversaries try numerous combinations of usernames and passwords to try and break into… Continue reading Researchers Propose New Approach to Address Online Password-Guessing Attacks

Safe Web Use Practices for Investment Firms Regulating web use for employees via compliance handbook and URL filters for blacklisted (bad) and whitelisted (good) online resources has failed to improve… Continue reading Compliance And The Blacklist/Whitelist Fallacy