Why you need to know all the cloud services that your organisation uses – part 2 – (US DoD Nuclear Secrets!)

by | May 31, 2021 | News, Security

People are the weakest link

This sounds like a nightmare too impossible to happen. US soldiers putting sensitive information online in non-secure third party websites. It defies belief, yet we’re reading that it happened. The story popped up on ‘Gizmodo’

It is alleged that US Soldiers were saving sensitive information on a couple of common flashcard sites, presumably of things they were trying to memorise and learn. Even worse, their settings were on ‘public’ not ‘private’

It’s a classic warning about the risk of people, however well intentioned, saving critical data online in places the organisation is unaware of, and can’t control. That’s why our new KARE for Security S2 plan helps identify use of these sites in your organisation.

US Soldiers Accidentally Leaked Nuclear Weapons Secrets: Report (gizmodo.com)

Shadow IT

Shadow IT is one of the largest threats to data privacy in organisations today.

It’s not necessarily because these sites are going to be hacked, although that’s always possible, but just because if you don’t know the tools are in use, then there is no way that you can manage them!

The first step to maintaining this data is to identify it! That’s why you need new tools that are cloud focused. If you’re still using the same old security tools that you used to use prior to the cloud, then you are not keeping up and we need to talk!

Penetration Testing

Penetration Testing

Penetration testing is important for businesses because it helps them identify and fix security vulnerabilities before they can be exploited by attackers. It can be a significant job as it needs a team of security professionals to simulate a real-world cyberattack....

What would you do?

What would you do?

Imagine – you are busily going about your day when suddenly your meeting is interrupted.  “No one can access their files!!!” or “We just accidently paid $50,000 to a fraudulent account and we can’t get it reversed!!!” or something similar. What would you do? Where...

Security Updates

Security Updates

We need to make some security changes. These are in accordance with the continued work by Microsoft to protect 365 users.  This will keep your configuration current with their latest advisories but may have some (limited) impact on your IT experience.  It is all about...

Layered Security Works

Layered Security Works

There is no silver bullet in cyber-security. Best practice requires layers of protection. One of those layers is ‘geo-blocking’, which means you can only log in from specified countries and overcomes many of the African and Eastern European hacker fraternities....

Look out for LinkedIn Smart Links

Look out for LinkedIn Smart Links

This is a great example of needing new tools that didn't used to exist, to keep cyber-safe, even if they add cost to our cyber-protection. Hijacking your trust in LinkedIn Cybersecurity firm Cofense have detected phishing campaigns that used LinkedIn links called...

Is it really you?

Is it really you?

News that an elderly woman was tricked out of $100,000 over Facebook won't be a surprise to regular readers.  She was fooled into thinking she was talking to a friend, and then sending money to access some make-believe Covid fund.   AI makes it easy to speak in...

Ransomware claims increase 27%

Ransomware claims increase 27%

The Coalition Insurance  "2023 Cyber Claims Report: Mid-year Update" highlights the changing nature of the cyber threat landscape that businesses are currently facing, with a record surge in claims severity compared to the previous year. This is US data but it tends...