Collaborate Disseminate
GuardRail OSS is an open-source project delivering practical guardrails to ensure responsible AI development and deployment. GuardRail: Tailored to an organization’s AI needs GuardRail OSS offers an API-driven framework for advanced data analysis, bias… Continue reading GuardRail: Open-source tool for data analysis, AI content generation using OpenAI GPT models
Last Friday, the Under Secretary of Defense for Acquisition and Sustainment (USD A&S) released draft 0.7 of the Cybersecurity Maturity Model Certification (CMMC) framework. The primary purpose of this newest draft was to provide guidance on practic… Continue reading What is new in CMMC v0.7?
On the internet, we believe we know who we are communicating with. And, for the most part, we are pretty sure when we send a message to a colleague that our colleague is answering the request. But, can we be sure? Could an attacker insert themselves in… Continue reading What are Man-in-the-Middle (MITM) Attacks?
The following article by PreVeil board member Admiral James Stavridis originally appeared in Bloomberg: The U.S. is now just a year from the 2020 presidential election. In 2016, we saw foreign interests influence the outcome of a presidential ra… Continue reading Defending the Perimeter Isn’t Enough on Election Hacking
Whale phishing is a type of phishing attack that focuses on high-profile employee targets, such as the CEO or CFO. Since individuals in the C-suite are significant to the company leadership, they are called “whales”. So, phishing attacks on… Continue reading 5 Things You Should Know About Whale Phishing
In a recent customer discussion, a CISO shared his concern with me regarding his company’s data. He worried that confidential data that had been shared with their suppliers would be leaked. He was worried that unsecured points in the supply chain… Continue reading Supply Chain Vulnerabilities from Legacy Approaches
Verizon’s recent Data Breach Investigations Report (DBIR) notes that company executives are six times more likely than regular employees to be targets of a social engineering attack. Social engineering is often the first step attackers take towar… Continue reading Email encryption and protecting executive communications
In a special segment for this week, John Strand and Paul discuss some companies that Paul had a chance to sit down for briefings with! They discuss GuardiCore and their Application Segmentation, Cyxtera and their Network Security and Software Defined P… Continue reading Briefings Summary – Enterprise Security Weekly #111
Nearly two-thirds (64%) of employees use a company-approved device for work. However, less than half (40%) of those who use a personal device are regulated when using that personal device, according to a new survey of 1,000 full-time employees publishe… Continue reading Sometimes employees follow cybersecurity best practices beyond company policies