Blogs

Detecting and Responding to Ransomware and Other Destructive Events No organization is immune from cybersecurity threats and attacks, which can range from minor inconveniences to major catastrophic events that may take months sometimes years to overcome. Events such as ransomware, destructive malware, insider threats, and even honest mistakes, can threaten an organization’s infrastructure, not to mention its most valuable asset—its reputation. Moreover, database records and structures, system files, configurations, user files, application code, and customer data are all at risk should an event occur.

Cybersecurity : The Hidden Risk For Your Small Business

in CyberSecurity

March 3, 2018

Is My Business Too Small to Worry About Cybersecurity? Many businesses have been putting resources including people, technology, and budgets into protecting themselves from information security and cybersecurity threats. As a result, they have become a more difficult target for malicious attacks from hackers and cyber criminals. Consequently, hackers and cyber criminals are now successfully focusing more of their unwanted attention on less secure businesses. Because small businesses typically don’t have the resources to invest in information security the way larger businesses can, many cyber criminals view them as soft targets.

How to Better Protect Your Network from Ransomware

in CyberSecurity

March 3, 2018

Ransomware is the fastest growing malware threat, targeting users of all types, from the home user to the corporate network. On average, more than 4,000 ransomware attacks have occurred daily since January 1, 2016. This is a 300-percent increase over the approximately 1,000 attacks per day seen in 2015. There are very effective prevention and response actions that can significantly mitigate the risk posed to your organization. Ransomware targets home users, businesses, and government networks and can lead to temporary or permanent loss of sensitive or proprietary information, disruption to regular operations, financial losses incurred to restore systems and files, and potential harm to an organization’s reputation.

The Sooner You Know about Ransomware The Better

in CyberSecurity

March 3, 2018

Ransomware is a type of malicious software cyber actors use to deny access to systems or data. The malicious cyber actor holds systems or data hostage until the ransom is paid. After the initial infection, the ransomware attempts to spread to shared storage drives and other accessible systems. If the demands are not met, the system or encrypted data remains unavailable, or data may be deleted. How Do I Protect My Business From Ransomware?

Better Website Security : What Everybody Needs to Know

in Website Security

March 3, 2018

Every community organization, corporation, business, or government agency relies on an outward-facing website to provide information about themselves, announce an event,or sell a product or service. Consequently, public facing websites are often the most targeted attack vectors for malicious activity. Web server attacks include: Exploitation of software bugs in the web server Denial of Service (DoS) or Distributed Denial of Service (DDoS) attacks Compromising “backend” data through command injection attacks, such as Structured Query Language (SQL) injection; Lightweight Directory Access Protocol (LDAP) injection; and cross-site scripting (XSS) Website defacement for malicious purposes Using compromised web server capabilities to attack external entities Using a compromised web server to distribute malware.

How to Better Secure Your Web Server

in Website Security

March 3, 2018

The World Wide Web is one of the most important ways for an organization to publish information, interact with Internet users, and establish an e-commerce/e-government presence. However, if an organization is not rigorous in configuring and operating its public Web site, it may be vulnerable to a variety of security threats. Although the threats in cyberspace remain largely the same as in the physical world (e.g., fraud, theft, vandalism, and terrorism), they are far more dangerous as a result of three important developments: increased efficiency, action at a distance, and rapid technique propagation.

How to Identify SQL Injection Vulnerabilities for Better Security

in Website Security

March 3, 2018

The class of vulnerabilities known as SQL injection continues to present an extremely high risk in the current network threat landscape. SQL injection has been ranked as one of the top risks on the MITRE Common Weakness Enumeration (CWE)/SANS Top 25 Most Dangerous Software Errors list. https://www.sans.org/top25-software-errors Exploitation of these vulnerabilities has been implicated in many recent high-profile intrusions. Although there is an abundance of good literature in the community about how to prevent SQL injection vulnerabilities, much of this documentation is geared toward web application developers.