Collaborate Disseminate
My tech support company now has access to my computer 24/7… instead of our old system where I would email them, set an appointment, and then I would grant them permission to access my computer. A pop-up does appear when they are on scre… Continue reading Remote access at the will of my tech support service
I wonder what a small startup would typically do concerning third-party compliance?
Are you expected to send third-party vendors a security questionnaire? Do you need to do that regularly?
Continue reading How do you monitor the security control compliance for third party providers?
Manufacturing security is one of the top cyber concerns these days. Is there anyone who has seen an implementation of technical cybersecurity controls at a contract manufacturer? I understand given it’s a third party, this would be a diffi… Continue reading Cyber controls implementation at contract manufacturers [closed]
This is a brief sanity check for myself to confirm whether or not the premise of the title is a good idea or not.
Suppose we have an internal system for password reset or account verification. When a user performs an action, they are prov… Continue reading Sharing account verification tokens to third parties
Five worthy reads is a regular column on five noteworthy items we’ve discovered while researching trending and timeless topics. This week we are exploring the concept of supply chain cybersecurity in a time when there is a rising number of …
The post F… Continue reading Five worthy reads: Supply chain cyberwarfare
In reference to the Solarwinds attack, since many organisations have no access to the source codes of the software vendors from whom they just consume the services, how can organisations defend against supply chain attacks?
Continue reading How does one defend against software supply chain attacks?
Jason Kent, hacker-in-residence at Cequence, walks through online-retail card fraud and what to do about it. Continue reading Third-Party APIs: How to Prevent Enumeration Attacks
Jason Kent, hacker-in-residence at Cequence, walks through online-retail card fraud and what to do about it. Continue reading Third-Party APIs: How to Prevent Enumeration Attacks
Tyler Technologies, Inc., revealed it suffered a ransomware attack that disrupted access to some of its internal systems. On September 26, Tyler Technologies published a statement on its website in which it disclosed that it had detected a security inc… Continue reading Tyler Technologies Reveals Ransomware Affected Some Internal Systems
Suppose a packet is encrypted and sent via an insecure channel so that it is intercepted by a malicious third party as well as the intended recipient. As long as a suitable encryption scheme is used, the message should be (practically) unc… Continue reading Can message length be useful information?