Collaborate Disseminate
In order for my bank to clear a third party check they must call the third party.But their phone number must be verified in their name or they will not call them. The third party’s number could not be verified so how do they get their phon… Continue reading In order for my bank to clear a third party check the person signing it has to have their phone number verified
Let us say you have an app where the users will be required to deposit cryptocurrency. Is it safe to let users sign in with third-party authentication? For example "sign in with Google" or "sign in with Facebook"?
If it… Continue reading Using SSO for a cryptocurrency app
My tech support company now has access to my computer 24/7… instead of our old system where I would email them, set an appointment, and then I would grant them permission to access my computer. A pop-up does appear when they are on scre… Continue reading Remote access at the will of my tech support service
I wonder what a small startup would typically do concerning third-party compliance?
Are you expected to send third-party vendors a security questionnaire? Do you need to do that regularly?
Continue reading How do you monitor the security control compliance for third party providers?
Manufacturing security is one of the top cyber concerns these days. Is there anyone who has seen an implementation of technical cybersecurity controls at a contract manufacturer? I understand given it’s a third party, this would be a diffi… Continue reading Cyber controls implementation at contract manufacturers [closed]
This is a brief sanity check for myself to confirm whether or not the premise of the title is a good idea or not.
Suppose we have an internal system for password reset or account verification. When a user performs an action, they are prov… Continue reading Sharing account verification tokens to third parties
Five worthy reads is a regular column on five noteworthy items we’ve discovered while researching trending and timeless topics. This week we are exploring the concept of supply chain cybersecurity in a time when there is a rising number of …
The post F… Continue reading Five worthy reads: Supply chain cyberwarfare
In reference to the Solarwinds attack, since many organisations have no access to the source codes of the software vendors from whom they just consume the services, how can organisations defend against supply chain attacks?
Continue reading How does one defend against software supply chain attacks?
Jason Kent, hacker-in-residence at Cequence, walks through online-retail card fraud and what to do about it. Continue reading Third-Party APIs: How to Prevent Enumeration Attacks
Jason Kent, hacker-in-residence at Cequence, walks through online-retail card fraud and what to do about it. Continue reading Third-Party APIs: How to Prevent Enumeration Attacks