In my recent Security Week Article, “The Impending Facial Recognition Singularity,” I discuss how it is more difficult to remain anonymous, both online and off, these days. A major reason is that facial recognition systems are becoming cheaper, better, easier to use, and more widely deployed, while social media platforms...
The idea that firewalls and the perimeter are becoming less important is a growing trend. There is so much opportunity for compromised devices inside the network, including BYOD laptops and phones, that we can’t think of the inside as safe anymore. If the inside is dangerous, then we need to...
We are proud to announce that Info Security Products Guide, the industry's leading information security research and advisory guide, has named Ntrepid a winner in the 14th Annual 2018 Info Security PG’s Global Excellence Awards® in two categories. Nfusion 2, our secure virtual desktop, was named the Gold Winner of...
Don't keep data that you don't need on your network. It seems simple, yet it is not put into practice by many organizations worldwide. By regularly purging unnecessary information you can greatly reduce the relative degree of the toxicity within your network. If you don't need immediate access to your...
The internet is now part of almost all investigations, bringing significant new complexity to gathering evidence or conducting covert activity. Consequently, internet-based investigations create a whole new category of risks. Just as detectives work in plain clothes and drive unmarked cars, it is often important to avoid identification as a...
While mergers and acquisitions (M&A) are generally known for bringing economic growth and opportunity, people are beginning to realize that the process also brings serious cybersecurity risks. For example, along with the acquired company’s valuable assets, buyers also inherit all previous and current vulnerabilities and breach history. But there are...
Last month I traveled to Las Vegas to meet with some colleagues and analysts that attended Black Hat USA 2017, the world’s leading information security event.
In May 2018, the new General Data Protection Regulation (GDPR) will take effect, applying to the vast majority of organizations across the world and signaling one of the most significant changes in data protection regulation to date. The GDPR, focused on notice, consent, control, and security, will mean that websites...
Effective managed attribution (MA) is critical for successful cyber investigations and can be achieved by leveraging the right technologies and practicing proper OPSEC online.
In a recent webinar, I discussed my journey of discovering the lesson that avoiding a fight in the first place is also the right choice when it comes to cybersecurity. One reason is that blocking attacks has several drawbacks. If you miss, you get hit; and even if you block...
