Another year is nearly closing out so now is the time to start taking stock of your progress and plan for things to come. Whatever small hops or large leaps you made in your organization’s security this past year, write it down, quantify it where possible, and give yourself a pat on the back. Maybe…

As companies continue their inevitable march to the cloud, so do their vendors. With this migration, new opportunities present themselves. Sometimes this is with previously unavailable technology now within reach, or more simply, it is a chance to start fresh. While there are many new hosted services to consider in the cloud, perhaps one of…

Open-source intelligence, or OSINT, is a powerful tool for gauging the security posture of an organization. Performing OSINT searches typically involves searching public repositories for information that may be useful to an attacker. At CTInfoSec, OSINT searches are part of every External Network Penetration Test that we perform and can also be requested on an…

Our team provides technical assessments to ensure the build of solution is completed as expected and security controls are implemented properly. In a way, we are a digital building inspector focused on security. We often find that expectations may not be in alignment with the implementations. This can happen for several reasons such as a…

It is often assumed that the goal of security is simple – “be secure.” The truth is, there are many goals in security beyond just being secure. Security goals for a small financial institution may look very different than those of a hospital, where unencumbered access to patient data can mean life or death. But…

Tabletop Exercises (TTX) have officially earned their position as a critical tool in the CISO’s toolbox. The use of TTX’s for internal security readiness has grown steadily over the past several years. TTX’s were once considered a nice-to-do activity; now they are required by many regulatory bodies. And while the requirement is often an annual…

Recently there has been a lot of chatter around ChatGPT and the Bing Chat platform. These AI engines are being used in a number of creative ways like composing jokes or writing essays in the ‘tone’ of specific individuals. Aside from these recreational uses, the platforms have considerations for cybersecurity as well. A simple example…

With a recent wave of attacks performed by Killnet, organizations should be on high alert and be prepared for potential DDoS attacks. A distributed denial of service attack or DDoS typically consists of many remote sources or proxies attacking an organization to render the organization’s services unusable. Because the number of sources can be significant,…

Here in the Northeast, the seasons are changing. The leaves have fallen, and the mornings are crisp, which means it’s that time of year when CISOs must focus on the cycles of the business: budgeting, regulatory audits, risk mitigation, year-end reviews. Taking stock of the good, the bad and the ugly of the past 12…