Cybersecurity Lessons from the Pandemic: Why Not

You might notice there’s no question mark at the end of the title. That is intentional. In a May 18, 2021 Opinion article in The New York Times by Dr. Sema K. Sgaier, with the title: “Meet Four Kinds of People Holding Us Back from Full Vaccination,” wh… Continue reading Cybersecurity Lessons from the Pandemic: Why Not

Ransomware and the C-I-A Triad

In earlier, more innocent (?) times, cyberattacks seemed to be fairly straightforward. You have the data exfiltration attacks, where copies of sensitive personal information and intellectual property are stolen, often without the victims’ knowledge sin… Continue reading Ransomware and the C-I-A Triad

Krebs on Ransomware

The Krebses—Chris and Brian—are not related, but they have both come out with positions on ransomware. Chris was the former head of DHS’s CISA (Cybersecurity & Infrastructure Security Agency), and Brian is a journalist and much-admired author (by m… Continue reading Krebs on Ransomware

Inadequate Cybersecurity

It is customary to begin an article on cybersecurity with statements about huge increases in threats and attacks and mounting cyberspace losses from fraud, identity theft, ransoms, data exfiltration, blackmail, etc. Few, who confront cyber issues daily… Continue reading Inadequate Cybersecurity

Cybersecurity Lessons from the Pandemic: Hubris

On Saturday Night Live’s “Weekend Update,”, Kate McKinnon plays Dr. Wayne Wenowdis, the all-knowing physician. In response to COVID-19 and vaccine questions, she says “we know dis,” except when “we don’t know dis.” One of the hilarious Dr. Wenowdis ske… Continue reading Cybersecurity Lessons from the Pandemic: Hubris

Cybersecurity Lessons from the Pandemic: Protection

To paraphrase an old saying: “One person’s prevention is another person’s protection.” This may well apply to the wearing of masks during the pandemic, the efficacy of which is still being hotly debated by some. Having gone through various iterations, … Continue reading Cybersecurity Lessons from the Pandemic: Protection

The Massive Shift to Cyber Crime

There is a cartoon in The New Yorker of March 30, 2020 showing four mobsters, one with a gun, sitting around a table. The caption reads: “For health and safety reasons, we’ll be transitioning to cyber crime.” You can see the cartoon at https://www.newy… Continue reading The Massive Shift to Cyber Crime

The Demise of the Internal Datacenter and Consequential Risks

Recently, I happened upon a short article about the demise of internal data centers in favor of cloud services. The article, by John Delaney, appeared on page 28 of the May 2020 edition of the Communications of the ACM, and has the title “The Shu… Continue reading The Demise of the Internal Datacenter and Consequential Risks

Cybersecurity Lessons from the Pandemic: Metrics and Decision-Making

We have discussed previously, such as in my May 18, 2020 BlogInfoSec column, some of the more challenging characteristics of data, such as those relating to value and uncertainty, which are generally not given adequate consideration. This is because th… Continue reading Cybersecurity Lessons from the Pandemic: Metrics and Decision-Making

Cybersecurity Lessons from the Pandemic: Data – Part 2

Having discussed issues relating to the collection and reporting of COVID-19 data in Part 1, we now turn to cyberspace, even though the jury is still out regarding much of the pandemic data. Equivalent situations to those described with respect to the … Continue reading Cybersecurity Lessons from the Pandemic: Data – Part 2