SecurityMetrics Blog

White abstract geometric line design over a dark cityscape with tall buildings.

FBI Remotely Hacking Computers to Aid Microsoft Exchange Breach

Heff and Forrest analyze the recent court order allowing the FBI to remotely hack hundreds of private computers.

White geometric typography forming the word 'NSE' over a grayscale cityscape with tall buildings.

In this shorter, quicker version of SecurityMetrics News, Heff and Forrest bring you your threat intelligence digest. They discuss the recent Ivanti breach, Apple ransomware, SonicWall's 3 zero days, and more.

White geometric design with curved and straight lines overlaying grayscale cityscape of tall buildings.

Sudo Vulnerability, Emotet and Netwalker Takedown, Bonobos Breach

Forensics

Heff and Forrest analyze recent cybersecurity news, including the recent Sudo vulnerability, Emotet and Netwalker Takedown, and Bonobos data breach.

Supercookies, Oldsmar Water-Treatment Breach, Morse Code Phishing Attacks

Forensics

Heff and Forrest analyze recent cybersecurity news, including supercookies, how to delete recordings from Siri, Alexa, and Google Home, morse code phishing attacks, and updates on the SolarWinds attack.

White geometric abstract line design over grayscale cityscape of high-rise buildings.

Microsoft Source Code Exposed, T-Mobile Breach, Whirlpool Ransomware Attack

Forensics

Heff and Forrest analyze recent cybersecurity news, including the recent Microsoft source code leak, the T-Mobile breach, Whirlpool ransomware attack, updates on the alarming Solarwinds breach, and a review of all the nasty breaches recorded in 2020.

White geometric line design resembling abstract shapes over a grayscale cityscape background.

Microsoft Exchange Server Zero-Days and SEO Cyberattack

Data Security

Directive to patch Microsoft Exchange server zero-days immediately SEO Cyberattack: hackers use strategy to push malicious web pages up the rankings Are password managers safe? Experts compare LastPass vs. 1Password

Abstract geometric white line design overlaying a grayscale cityscape with tall buildings.

SolarWinds and FireEye

Forensics

In this SecurityMetrics News episode, Heff and Forrest analyze recent cybersecurity news, including the unprecedented SolarWinds security breach and the FireEye compromise.

World map with blue circles showing locations and curved lines indicating global connections between regions.

How to Protect Your Organization From the Log4j Vulnerability

Data Security

For clients of the SecurityMetrics Threat Intelligence Center, we are actively scanning and informing clients of outbound Log4j indicators of compromise.

Black and white cityscape with abstract white geometric lines forming interconnected shapes.

Western Digital Vulnerability Causes Data Loss in Hard Drives

Forensics

Join Heff this week as he dives into the Western Digital hard drive vulnerability, the recent bad news from Microsoft, and breach #2 of this year for LinkedIn.

Rising 3D bar chart with shadows and text 'PANscan Data Trends' on the left.

Storing Unencrypted Credit Card Data: 2021 PANscan® Data Analysis

Data Discovery

Card data discovery is an important part of payment data security and complying with PCI DSS requirement 3. If you are going to store credit card data, you’ll need to know where it is captured, where it is stored, where it is transmitted, and where it is received.

Illustration with black background and gray speech bubble.

What Is Social Engineering? Social Engineering Examples

Data Security

Protect sensitive data from social engineering attacks.

Does Your Third Party Vendor Put You At Risk?

Data Security

The role of the third party is evolving.

HIPAA Security Rule Requirements and Healthcare Security

HIPAA

While most healthcare entities follow the Privacy Rule fairly well, many aren’t compliant in the HIPAA Security Rule.

Black and white misty mountain scene with a large blue triangular graphic overlay on right side.

SecurityMetrics Summit: A Cybersecurity and Compliance Conference

SMB

In 2020, we hosted the first annual SecurityMetrics Summit; a virtual data security and compliance conference on September 23rd and 24th.

Magnifying glass focusing on a stack of four blue server racks or data storage units.

2021 Forensic Predictions and What Happened in 2020: Part 3

Forensics

Learn how to maximize security through simple practices and employee training.

Computer connected to cloud storage syncing data with four server units.

How to Choose a Safe and Secure VPN

Data Security

VPNs are a popular tool that helps businesses make sure outside users are authorized and that transmitted data is encrypted.

Blue server stack with magnifying glass zooming in on two server units.

2021 Forensic Predictions and What Happened in 2020: Part 1

Forensics

The year 2020 was surprising in many ways and the digital forensics industry offered some surprises as well as some more predictable outcomes.

Illustration of burglar emerging from laptop screen holding a credit card with visible numbers.

Boost Your E-commerce Security Against Eskimming Attacks

Ecommerce Security

With ecommerce attacks on the rise, it's crucial for businesses to learn how to strengthen their ecommerce security.

Text saying hello PCI 4.0 surrounded by blue circles and squares on dark background.

Performing an SAQ C version 4.0 Merchant Self-Assessment

PCI Trends

Merchants using the SAQ C to validate their PCI DSS compliance should be aware of changes that were introduced into this questionnaire during the publication of the SAQ C version 4.0.