Earlier this year, the CFO of a company I work with opened an urgent email from his boss, the CEO, who we’ll call Sally. The CEO was out on the golf course and forwarded a vendor inquiry to the CFO, who we’ll call Harry. In the message, the vendor asked Sally when it would receive…

Cybersecurity attacks are more organized than ever. The threats to organizations’ applications and data require IT professionals to be more focused than ever, too. The attention that organizations are paying to security was on display in August at the CDW Managing Risk Summit in Boston. The event brought IT leaders from across the U.S. together…

In April, the Center for Internet Security announced that Emotet arrived in the U.S. This malware represents a serious threat. It has largely targeted financial organizations in Europe, but other industries also have been infected. With Emotet’s recent arrival in the U.S., IT professionals should be aware of what this malware is, how it works…

The makers of endpoint security solutions must deal with a constantly changing threat landscape and new attack types, but ransomware has evolved beyond nearly any threat we’ve seen before. It’s the next generation of malicious code, and it’s pandemic. An organization that fails to establish a plan of defense against ransomware is essentially leaving its…

The WannaCry ransomware attack has been big news since Friday, May 12, 2017, and organizations are scurrying to understand and mitigate the risk from this attack. The following is a very quick summary of the attack and specific action steps you can take to help protect your organization. This type of ransomware is unique because…

Remember the old days of phishing, where poorly written and designed e-mails linked to obviously fake websites, where you were asked to divulge your Social Security number, your mother’s maiden name, even your passwords. Those were simpler times — so much easier to spot a phishing scam. The warnings were clear and the perpetrators clumsy…