Resilience. Security. Compliance.
Resilience. Security. Compliance.
The Tunick Case A potential landmark legal case centered on privacy and security concerns is taking shape right now!Security professionals and privacy advocates have long recommended a “duress password” to journalists, activists, and anyone who might be forced to unlock a device against their will: enter the wrong code and, instead of unlocking the phone, […]
When the VPN Is the Threat: Lessons from the “First VPN” Takedown Category: Cybersecurity | Reading Time: 3 min | Author: Fortiva IT Consulting What Happened On May 19–20, 2026, international law enforcement agencies executed Operation Saffron — dismantling a criminal VPN service called “First VPN” (operating through domains like 1vpns.com). Led by French and […]
How It Lands with IT Teams and Users More orgs are leaning into cyber insurance and recovery planning. It makes sense financially—but perception matters. 👨💻 IT / Cybersecurity Perspective 👍 Pros• Helps quantify risk in business terms• Provides a financial safety net for major incidents• Drives baseline controls (MFA, backups, EDR) ⚠️ Concerns• Can shift […]
🚨 What Was Exposed & What To Do The recent breach involving ADT Inc. impacted ~5.5 million individuals—and some of that data is already circulating after attackers failed to secure payment. (Tom’s Guide) What was exposed:• Names• Phone numbers• Home addresses• In some cases: dates of birth• In limited cases: last 4 digits of SSN […]
🔒✈️ Foreign Aircraft, Domestic Risks — An Exercise in IT/OT Cybersecurity I’m proud to share my new article published in CSO Online:“Foreign Aircraft, Domestic Risks” This piece isn’t just about aviation — it’s a real-world exercise in cybersecurity at the intersection of IT and OT. Using the example of a foreign-donated aircraft retrofitted for U.S. […]
The U.S. Department of Health and Human Services (HHS) has proposed significant updates to the HIPAA Security Rule to enhance the protection of electronic protected health information (ePHI) against modern cybersecurity threats. These changes, announced in January 2025, represent the most substantial overhaul of the Security Rule in over a decade .National Law Review+1Reuters+1Axios+1Axios+1 🔐 […]
In March 2025, President Donald Trump signed an executive order titled “Achieving Efficiency Through State and Local Preparedness,” which significantly shifts cybersecurity responsibilities from the federal government to state and local authorities. This policy change has sparked widespread concern among cybersecurity experts and state officials.Yahoo+6Inside Government Contracts+6The White House+6 Key Elements of the Executive Order […]
🔐 Overview of the Apple Zero-Day Vulnerabilities In April 2025, Apple addressed two critical zero-day vulnerabilities actively exploited in targeted attacks:GBHackers+2BleepingComputer+2Help Net Security+2 Apple released emergency patches for these vulnerabilities in iOS 18.4.1, iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, and visionOS 2.4.1. Help Net Security+6BleepingComputer+6Cyber Security News+6 🛡️ Recommendations
Why the CVE Program Matters — and Why CISA Saving It Is Critical The CVE Program — Common Vulnerabilities and Exposures — is the backbone of vulnerability tracking. It gives cybersecurity professionals a universal system to identify, communicate, and fix security flaws quickly. Without CVEs, patching would be slower, coordination chaotic, and defenses weaker. Earlier […]