Author Archives: Jason High

Keep yourself from becoming a target

Dark Reading takes a look at ‘How (and Why) Attackers Choose Their Targets‘: There is no single method used to identify and compromise vulnerable targets. Much like rock stars and CEOs, each attacker has a unique style and process. However, some methods are simply more successful than others and thus tend to be used more [...]

Posted in Cybersecurity, Data Security, Staying Safe | Leave a comment

Refurbished Motorola Xoom tablets still contain data

This story serves to further highlight the necessity for ensuring that your manufacturer is actually destroying your data when you return devices. Motorola’s fall sale of refurbished Xoom tablets has gone about as wrong as it could possibly have gone. The company said today that 100 of the 6,200 it sold through Woot.com between October [...]

Posted in Privacy | Leave a comment

LinkedIn going the way of Facebook and others?

As many readers of this blog are likely LinkedIn users as well, I wanted to pass along this latest privacy tidbit courtesy of Martin Kuppinger. Last Friday, I received two identical emails from LinkedIn contacts informing me about changes in the privacy conditions of LinkedIn. Without user consent, LinkedIn is now allowed to use names [...]

Posted in Cybersecurity, Privacy, Staying Safe | Leave a comment

New study gives advice for breach aftermath

Being the victim of a data breach is one of every company’s worst nightmares (at least it should be, if you’re paying any attention to what’s happening in the world today).  When the unthinkable happens and you are the victim of a breach, emotions will run high, decisions will be made, and plans will be [...]

Posted in Breach Notification, data breach | Leave a comment

The first step in proper breach notification

Dark Reading has a very informative article up regarding the rules surrounding breach notification.  While all of their points are essential ones (and there is much more to the subject), the first step is, as usual, the most important. The first step in ensuring compliance with breach notification laws is knowing whose data you have. [...]

Posted in Breach Notification | Leave a comment

How are you disposing of your data?

Are you enjoying all of those shiny new gadgets that you got for Christmas?  Ready to get rid of the old stuff that you’re not using anymore?  Don’t just throw them in the trash, particularly if they have any form of data storage. What you should do with your old computer equipment is actually a [...]

Posted in E-Waste | Leave a comment

Don’t be so emotional

Ransomware, or malware that holds your computer hostage until you pay a “ransom” (hence the name – clever, huh?), has been around for a while.  Today we became aware of a particularly crafty new strain is now posing as law enforcement. The software informs the user that he or she has all sorts of illicit material [...]

Posted in General, Malware | Leave a comment

Encryption is easy

Encryption, once a topic thought reserved for math geeks that were incapable of carrying on normal conversations around the water cooler, is now something that every organization should be using to secure their data.  And it’s easy to use. This has actually been a soapbox of mine for quite a while now.  To this day, [...]

Posted in Data Security | Leave a comment

Top Seven Emerging Threats from 2011

It’s always important to stay on top of what is threatening your data, and the end of the year is a great time for lists like this.  Not every threat is relevant to every organization, so it is important to understand not only what these threats are, but to take a look at them in [...]

Posted in Cybersecurity | Leave a comment

Five biggest breaches for the second half of 2011

Dark Reading has a list of the five biggest data breaches to occur in the second half of 2011.  These lists are useful, if for nothing else, to give us a gentle reminder that the risks to our data are very real, and that we need to continue vigilantly protecting our critical assets.

Posted in Cybersecurity, General | Leave a comment