I am a 25+ year information security veteran, and I tell it like I see it. I’m not known for being politically correct, and this sometimes gets me into trouble. More often than not; however, clients and colleagues come to appreciate the candor and common sense approach. If you look at security (the right way), you’ll find that it’s just not as complicated as people make it. I hope you enjoy my writings on security and other miscellaneous things. I really have a strong and deep passion for helping people and making the world a better place.
Check out my new book
UNSECURITY
The Hugging Face AI Incident Situation: TL;DR You may have heard the news: an autonomous AI system caused a breach. You might be thinking, “So what?” But this is a pretty big deal, even if you don’t think your organization uses AI agents yet. (You probably do more than you realize. More on that below.)…
Payment fraud prevention has never been more important. 127 million Americans have already been victims. Is your business doing everything it can to protect its customers?
We’re very excited to host FRSecure’s upcoming 13th annual CISSP course. Registration for classes is open, and sessions will begin on Monday, April 11, 2022. As the event has grown exponentially throughout the years and has now been attended by thousands of students, we felt that this year was a good time to look back…
RE: The joint statement made by the FBI and Cybersecurity & Infrastructure Security Agency (CISA) “Ransomware Activity Targeting the Healthcare and Public Health Sector” FRSecure has been working with the FBI and CISA, directly and indirectly since Saturday, October 24 to assist in the investigation of a credible threat to U.S. hospitals and healthcare providers.…
During the COVID-19 pandemic, FRSecure will remain vigilant in serving each other and our customers. Read the full release here.
When the lights go down in the city, it might be something far more nefarious than bad weather or a simple equipment malfunction. The cause could be an attacker who has infiltrated the utility company’s defenses (or lack thereof), infected controllers, and is now holding the city ransom. Ransomware attacks have become an increasingly popular reality. Learn why it’s important to not pay a ransom to attackers.
Sometimes it can be challenging to determine what’s the truth and what isn’t. In the information security industry, the truth can hurt. But the only way to make a difference is by listening to the things you don’t want to hear. Here are 100 days of InfoSec truth.
In the brokenness of the information security industry, our inability to communicate effectively stands out above the rest as one of the root causes. We lack a common language that holds us all together. It’s important that we break through to non-experts about security. Here’s how we can do that.
Working for an organization that doesn’t understand the importance of information security the same way as you do is a difficult challenge. If you find yourself in a situation where management isn’t on the same page, there are a few options you can take. Evan Francen breaks them down here.
Information security incidents are unavoidable. It’s important to learn how to respond effectively to and manage an incident that does occur. CEO Evan Francen breaks down the four steps your organization can and should take in order to manage an incident properly before calling in an expert. Prepare now.
Our 10 Information Security Predictions for 2018. Besides more of the usual breaches and responses, here are more specific things that we expect to happen over the coming twelve months.
Logically, we approach investigations holistically from four different perspectives; the company itself, what was in place for prevention, what was in place for detection, and how well is the response handled? My take on the Equifax breach revolves around these four perspectives.