Published inSystem Weakness·PinnedMember-onlyUC Data Breach- What Do I Do Now?Recently, the University of California (UC) as well as several other schools and companies suffered a major data breach. Attackers gained access to the system via a vulnerability in a vendor’s software and were able to encrypt a large portion of the data held by UC. The attackers then demanded…Ransomware3 min readRansomware3 min read
PinnedMember-onlyRussia’s “Sunburst Gambit — The Hack of SolarWinds, FireEye, et al.Russia’s “Sunburst Gambit” — The Hack of SolarWinds, FireEye, et al. Cyber security is a game between the aggressor and the defender. Both players play both roles at times. The game board is the systems of computers owned and operated by governments and corporations around the world. It is like…Cybersecurity4 min readCybersecurity4 min read
Jul 11, 2022What is a Cyber Security StrategyWhen I was in high school English class, many years ago, one of the worst assignments was “outlining an essay.” I remember having to turn in an outline before every essay was written. The outline had to be approved and the essays were graded against that outline. Mr. Dearbaugh, my…Cybersecurity4 min readCybersecurity4 min read
Nov 24, 2020Member-onlyMitigation vs RemediationIn the world of risk there are only 4 ways to address identified risks. Accept them. Mitigate them. Remediate them. Heed them. Accept is simply that. You accept that there is a risk and you will suffer the consequences. Heed is equal simple. The risk is too high so you…Cybersecurity3 min readCybersecurity3 min read
Apr 18, 2020Member-onlyCOVID-19 Tracking App ConcernsLast week, the media reported that Apple and Google had joined forces to create a COVID Contact Tracking App (CCT app). Various journalists touted the app would be secure and completely anonymous. Anyone who used it would maintain their privacy. Some reports had local healthcare providers sharing patient data to…Covid-196 min readCovid-196 min read
Apr 22, 2019Member-onlyEurope’s View on Cyber Security: “It’s not a concern!!”I wrote this in 2013 after moving to the U.K. to help push thru what we now call GDPR. GDPR was supposed to go into effect in March 2014 but it was stalled in the EU Parliament. …Cybersecurity11 min readCybersecurity11 min read
Mar 6, 2019Member-onlyRogue AgentI wrote and published this article in May 2016. Within 3 weeks of publishing, I was asked by my employer to remove it because it violated their social media policy that required all employees to clear ALL social media posts of any kind with their legal. I am re-posting now…FBI6 min readFBI6 min read
Oct 15, 2018Member-onlyYesterday Someone Tried to Extort MeImagine my surprise when, while driving my daughter to lacrosse practice, I received a telegram message trying to extort me and the company I work for, Path Network, for $1.6 million. Let me set the scene for you, I’m driving in my Mini with my daughter talking about lacrosse and…Extortion9 min readExtortion9 min read
Feb 21, 2018Today, I Am A Hacker.I have breached your system; I have stolen your customer and employee data, your financial account information and your intellectual property. I have your databases of stored email accounts and a large supply of employee personal data you did not know was stored on your system. …Security4 min readSecurity4 min read
Feb 15, 2018Inspected by Hacker #8This weekend while channel surfing I happened on an episode of a TV detective show. The main character is Sherlock Holmes type ex-cop with obsessive compulsive disorder. In this episode he is buying a new shirt but it must be exactly the same shirt he is wearing. It must be…Cybersecurity2 min readCybersecurity2 min read
