Ryan Heckman

Ohio Lottery has issued notifications to 538,000+ individuals regarding a data breach from a Christmas Eve cyberattack. Personal information was compromised but not yet used for fraud. The DragonForce ransomware gang claimed responsibility.Read more: https://lnkd.in/gFX2vhph #DataBreach #stabilitynetworks #cyberstability #cybersecurity #manageditservices #itconsultant #ITConsulting #itconsultancy #Microsoft365 #CSRA #itservices

2

Ex-Employee Extortion: A Stark Reminder to Terminate All Access for Departing Employees This article and criminal complaint detail the case of a cybersecurity consultant who extorted his former employer after being fired. The consultant stole confidential data and threatened to release it unless he was paid millions of dollars. The FBI arrested the consultant, and he now faces serious charges. This incident highlights the importance of ensuring that all access for departing employees is terminated immediately. This includes access to company systems, data, and physical locations. Failure to do so can have serious consequences, both financial and reputational. Here are some key takeaways from the article: • Terminating access for departing employees is essential to protect your company's data and systems. • It is important to have a clear and well-documented process for terminating access. •This process should be followed consistently for all departing employees, regardless of their position, level of access, or reason for departure. • Regularly review your access control policies and procedures to ensure they are up-to-date. By taking these steps, you can help to prevent a similar incident from happening to your company. References: • Criminal Complaint: https://lnkd.in/eiqkqCq5 • Register Article: https://lnkd.in/eX4WNcTd #cybersecurity #informationsecurity #riskmanagement #offboarding #insiderthreat #datasecurity

27

3 Comments

Join me for an engaging panel discussion, "Passkeys: The Great 'Password Killer'," on Thursday, June 6, 2024, from 1:00 PM to 2:00 PM PST. The team at Solutions Review is gathering leading experts to examine the potential of passkeys to improve authentication controls. Our moderator, Rebecca Herold, will kick off the event with a crash course on passkeys, setting the stage for an in-depth dialogue. We have a great lineup of presenters, including Chase Doelling, Principal Strategist at JumpCloud; Stuart Wells, Chief Technology Officer at Jumio Corporation; Pedro Martinez, Business Owner Authentication at Thales; and Jay Reddy, Senior Technology Evangelist at ManageEngine. Together, we will explore why passkeys have captured the industry's attention, what constitutes a robust passkey strategy, and the challenges IT teams face in enforcing these controls. Our discussion will also address the potential pitfalls of passkeys, examining the tactics threat actors use to compromise them and the consequences of such breaches. We'll debate whether passkeys can truly replace other passwordless authentication methods and if they have the potential to become the new standard. Ultimately, we aim to answer the pressing question: Are passkeys the long-awaited "password killer," or just another control in the growing list of cybersecurity solutions? Don't miss this opportunity to gain valuable insights and engage with industry leaders. #cybersecurity #risk

10

1 Comment

🎣🚫 Phishing Alert: Don’t Get Hooked! 🛡️ Phishing scams are getting more sophisticated every day, and no one is immune. Learn how to spot suspicious emails and messages, and keep your personal information safe with YK Communications' expert tips. Check out our blog to stay one step ahead: https://lnkd.in/gcbDWqWG Stay safe, stay smart, and don’t get caught in the scam! 🕵️‍♂️💻 #PhishingScams #StaySafeOnline #CyberSecurity #OnlineProtection #YKCommunications

6

Collaboration between IT staff & management is one of the most important parts of building and maintaining a strong #cybersecurity posture, but LMG Security often discovers gaps in this area when working with clients. Read Madison Iler's blog for advice: https://lnkd.in/gUS7k4K4

12

1 Comment

There are several items that are missed on any data security audit. One is the Cybersecurity Risk Management Plan and Assessment. Typically found in only 1% of audits. An Incident Response Plan. Found less than 1% of the time. But almost never found are Data Flow Diagrams. With over 50% of the organization's data on the cloud, without the data flows completed, no one, yes no one in the organization knows where all the PII, PHI, PFI, PCI and other critical data is located. It takes about a month to complete all the data flows for an organization since all the department heads need to share their knowledge. When complete, these secure documents will allow the organization's leaders to strategize how they will protect their data. Without the data flows, many segments of the organization's data are not properly managed or protected. The organization will not have a backup plan if access to these systems is lost. So ID.AM.03 of the NIST Core V2 is a critical data security control. Please download the CSF and do the work that needs to be done to protect your organization.

10