TraceSecurity Blog

Hiding In Plain Sight: Digital Ads Get Improved Malware

WeMo Smart Homes Under Attack from IoT Threat

​An improved version of Bashlite botnet malware was recently discovered by security researchers. This new and improved variant of Bashlite can hack smart homes using the Belkin WeMo automation switches and a whole lot more.

Keeping Your Bank Account and Credit Cyber-Smart

​Financial institutions and hacking go hand-in-hand these days and keeping your bank account and credit from being the next victim is more important than ever.

Your Social Security Number Has Been Suspended?

There are many scams that use the names of official organizations such as the SSA or the Internal Revenue Service (IRS) to try and skim some money from unsuspecting victims.

How the Energy Sector Can Defend Against DoS Attacks

Energy companies are a target for denial-of-service events that overwhelm networks with bogus traffic and have the potential to cause massive utility outages.

A Better Security Risk Assessment Tool: TraceSRA. What It Is and Why You Should Use It.

Learn about the TraceSRA, a security risk assessment tool modeled after the HHS tool but with improved usability and enhanced feature sets.

40% of Health Organizations Suffered WannaCry Attack in Past 6 Months

A report from Armis found that two years after WannaCry, healthcare and manufacturing organizations are still being impacted due to unpatched, legacy devices.

De-mystifying Integrity Checking Controls

One of the many recommended practices in cybersecurity is to employ "integrity checking mechanisms" to verify software, firmware, and information integrity. As a cybersecurity consultant, clients often ask me for clarification, or in some cases, implementation guidance for this practice. This is not surprising given the many use cases and interpretations for integrity checking. And to make it worse, the answer can differ dramatically depending on the operating environment. Given these factors, I thought it might be helpful to "de-mystify" the subject of verifying software, firmware, and information integrity.

Nearly 1.4 Million New And Unique Phishing Sites Created Monthly

The Public Service Announcements from the FBI claimed that phishing scams cost businesses in the United States over $500 million each year.

Oregon Specialist Phishing Attack Causes Months-Long Data Breach

Hematology Oncology Associates recently began notifying patients that their data was potentially breached during a months-long phishing attack; a mailing error and records’ dump complete this week’s breach roundup.