In years past, many organizations took a passive approach to cybersecurity. They’d sit back and wait for something bad to happen, then react to it. That approach is no longer acceptable for just about any organization. If you think your organization isn’t a target or that it doesn’t have anything that cybercriminals want, you’re wrong….
A poultry processing plant is a noisy place full of people, machinery and, of course, chickens. It’s probably not the first place that comes to mind when one thinks of a modern digital enterprise, but the industry relies heavily on technology to facilitate supply chain operations, automate customer interactions and communicate between facilities. I recently…
In September 2018, a new high-visibility remote code execution (RCE) flaw in the Apache Struts 2 framework was released. Apache Struts 2 is an open-source web application framework used by many developers and vendors when creating Java EE web applications. This is a critical flaw and should be patched by upgrading to at least v.2.3.35…
At a recent IT conference, Cyber Security Chicago, more than 4,000 cybersecurity professionals sat in on presentations covering everything from cyberattacks in the Internet of Things era to third-party vulnerability assessments and DevSecOps. My job provides me the opportunity to attend many events like this one, and I always make it a point to seek…
We have come to a time when vendors and industry professionals will tell you that it is almost guaranteed that you will have a security incident. So much so that the message is not if you will be attacked but when. This kind of messaging probably feel like a scare tactic, but the sad truth…
Last week, I spent two hours with the technology leadership team of an organization in a heavily regulated industry. We’ve gotten to know each other well in recent years as we worked together on a comprehensive technology refresh that included the modernization of the organization’s network, the redesign of its data centers and the adoption…
