Intelligence

The DoD’s CMMC 2.0 final rule is live, and the clock is officially ticking for defense contractors. As Level 1 and Level 2 requirements phase in, knowing who’s in scope and where to focus first is critical. Join our March 10 webinar to cut through the noise, understand what certification really requires, and walk away with a practical, defensible roadmap to readiness.

Do MSPs need CMMC Level 2 certification? The answer depends on how the MSP interacts with CUI. This article breaks down when MSPs are in scope, what types of access trigger compliance, and how organizations can address CMMC risk early.

CMMC 2.0 implementation has officially begun. Learn how the DoD’s 4-phase rollout impacts your current contracts, what to expect from Phase 1 self-assessments, and how to close security gaps before your next audit.

Data poisoning is quietly reshaping AI behavior. Learn how poisoned data compromises AI models, real-world risks, and how governance can protect trust.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  New ChatGPT Health Raises a Familiar Question: Who Really Owns Your Medical Data?, A Five-Year-Old Flaw Still Opening Doors: Fortinet Firewalls Under Renewed Attack, The First Major Crypto Hack of 2026 and What It Reveals

CMMC 2.0 assessments are more than a one-time audit. Learn how often assessments are required, POA&M rules, SPRS issues, and how to stay compliant.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Another Federal Contractor Hit: Lessons from Sedgwick’s Cyber Incident, California’s New Privacy Tool Takes Aim at the Data Broker Economy, New Report, How the LastPass Hack May Still Be Costing Millions

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  MongoBleed: A Silent Data Leak Targeting Exposed MongoDB Servers, Interpol-Led Crackdown Delivers Rare Wins Against Ransomware and Cybercrime, Spotify Scraping Incident Highlights Growing Risk of Platform-Scale Data Abuse

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Chinese-Linked APT Targets Cisco Email Security Appliances in Stealthy Campaign, French Interior Ministry Confirms Breach After Days-Long Cyber Intrusion, UK Health Tech Supplier Breached as Third-Party Risk Remains in Focus

Confused about how CMMC levels are determined for DoD contracts? Learn more about the CMMC Model, Level 2 requirements, and how NIST SP 800-171 revisions impact your certification path.

2025 was a defining year for cybersecurity, and this article brings together the insights that mattered most. Inside, you’ll find Echelon’s top reports and articles covering real-world threats, defensive gaps, compliance shifts, and lessons learned across industries. It’s a guided entry point into the stories and strategies worth revisiting as you plan what comes next.

CMMC 2.0 requirements are officially rolling out, and defense contractors must act now to stay contract-eligible. This first section of our CMMC FAQs breaks down key timelines, costs, assessments, and official DoD resources, giving you clear, authoritative guidance to prepare for compliance with confidence.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Trust Under Pressure: Why Tech Companies Keep Falling for Fake Police Requests, CBP Adding Social Media as a Mandatory Data Element, Petco’s Vetco Data Leak Shows How Simple Web Bugs Become Major Breaches
 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Dry Spell: How the Asahi Ransomware Attack Froze a Supply Chain, CISA Issues New Playbook for AI in Critical Infrastructure, Marquis Breach Exposes Data from 74 U.S. Financial Institutions
 

CMMC 2.0 introduces new requirements for defense contractors. This guide explains what it is, the differences from CMMC 1.0, and step-by-step strategies for planning, assessing, and preparing for certification.

Preparing for CMMC 2.0 certification isn’t just about checking boxes it’s about timing and strategy. Learn how Gap Assessments and Pre-Audit Assessments work together to uncover weaknesses, validate controls, and ensure your organization is truly audit-ready.

From football fields to firewalls, John Blanzy’s path into cybersecurity is driven by curiosity, discipline, and a passion for helping others stay secure. In this Cybersecurity Champion spotlight, he shares how an unexpected seminar sparked his career, why AI governance matters, and how community engagement continues to shape his work at Echelon.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  FBI Warns: $262M Lost to Account Takeovers as Holiday Fraud Season Begins, California Just Triggered the Biggest Privacy Shift Since GDPR, ChatGPT Ads Leak Raises Big Questions About the Future of AI Search
 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  How a Routine Database Change Triggered Cloudflare’s Worst Outage in Years, Azure Withstands Historic 15.7 Tbps Barrage From Aisuru IoT Army, FCC Scraps Cyber Rules for Telcos—Even After Chinese Espionage Breaches

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Anthropic Takes Down World’s First Largely Autonomous Cyberattack, New FortiWeb Exploit Lets Attackers Create Admin Accounts Without Authentication, Europol Leads Massive Crackdown on Rhadamanthys, VenomRAT, and Elysium

Most organizations rely on a single provider for both IT and cybersecurity but that overlap can quietly create blind spots. Learn why separating your Managed Service Provider (MSP) from your Managed Security Service Provider (MSSP) strengthens accountability, improves threat response, and delivers real protection.

AI is transforming business operations but also introduces privacy and security risks. Learn how governance, approved tools, and clear policies enable safe, responsible, and compliant AI adoption.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: LLM-Powered Malware Signals the Dawn of Adaptive Cyber Threats, EdTech Breach Fallout: Illuminate to Pay $5.1M in Landmark Privacy Case, Root of the Problem: Cisco Contact Center Software Under Critical Scrutiny

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Meet Aardvark: OpenAI’s New AI That Hunts Bugs Like a Human, State-Backed Exploits Target Cisco ASA Devices Globally, Cloud Confidence Shaken Again: What the Azure Outage Tells Us About Centralized Risk

Protect your business 24/7 without adding headcount or burning out your team. Learn how MDR, SOC-as-a-Service, and co-managed SIEM deliver always-on threat detection while keeping costs and complexity under control.

Discover how executives can balance AI automation with human judgment, build trust with frameworks like NIST AI RMF, and prepare teams for AI-augmented roles, accelerating compliance and reducing risk without slowing innovation.

CISOs and IT leaders face growing pressure to prove cyber risk maturity. This guide breaks down six actionable steps to build a scalable, compliant, and board-ready risk management program.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: One Region, Global Chaos: What the AWS Outage Exposed, UN Cybercrime Treaty Signing in Hanoi: Global Response and Concerns, Canada Drops a $176M Bomb on Cybercrime Payment Hub

A critical Microsoft 365 misconfiguration is enabling untraceable internal phishing. Learn how Echelon’s experts uncovered the issue and how to fix it fast.

From detective stories to digital defense, Daniela Villalobos shares how curiosity, community, and a passion for learning shaped her journey in cybersecurity.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Identity Hacks Surge 32% in 2025 — Stolen Credentials Lead the Way, Envoy Air Confirms Oracle E-Business Suite Breach Linked to Clop, Secret FBI Task Force vs. Russian Ransomware

IT and security teams are stretched thin, juggling daily operations, compliance, and cyber threats. Learn how managed cybersecurity support helps reduce burnout, streamline audits, and shift from reactive firefighting to proactive protection.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: 

Financial institutions face growing cyber risks and complex regulations like FFIEC, GLBA, and NYDFS. Echelon’s experts explain how banks, asset managers, and fintechs can stay compliant while building stronger cyber resilience.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Clop’s “Business Deal” Extortion Emails Target Oracle Customers, Scattered LAPSUS$ Hunters Escalate Salesforce Extortion with New Leak Site, Discord Breach Exposes IDs, Payment Data Through Third-Party Provider

Attackers moved faster than ever in 2025. What’s next? Join experts Steve Dyson and Brayden Park as they unpack key findings from the Blue Lens Report 2025 and share practical steps to stay ahead of 2026’s biggest threats.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: CISA Orders Rapid Patch of Cisco Firewall Zero-Days as ArcaneDoor Expands, 100,000 SIMs, 300 Servers: The Spam Machine That Could Have Hit NYC’s Cell Network, Scattered Spider: How a Help-Desk Hustle Became a $115M Ransom Machine

FedRAMP 20x is here. Learn what’s changing, who it impacts, and the steps you should take now to prepare for faster, automated compliance.

Prepare for Q4 with a strong business continuity plan. Learn how to manage seasonal risks, prevent costly downtime, and build resilience into the new year.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Jaguar Land Rover Cyber Shutdown Drags On – Risk in The Supply Chain, How an Obscure Token Chain Nearly Broke Azure Tenancy Boundaries, DOJ: Scattered Spider’s $115M Ransom Spree Reached a U.S. Court Network

With over 30 years of experience, Jake DeWoskin, Echelon's Cybersecurity Manager, navigated cybersecurity’s biggest shifts—from Y2K to cloud to AI. In this interview, he shares lessons on adaptability, risk management, and staying ahead in a constantly changing field.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: iPhone 17’s Quiet Upgrade: Memory Tagging That Breaks Exploit Chains, FTC Puts AI Chatbots on Notice Over Kids’ Safety and Privacy, Old Bug, New Breaches: Akira Ransomware Piggybacks SonicWall SSL-VPN Flaw

Automation and AI are reshaping compliance but trust and oversight can’t be automated. Join our Oct 29 live roundtable with security leaders as they discuss where AI adds value, where human judgment is essential, and how to prepare teams, budgets, and guardrails for the future of compliance.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Red Sea Cable Cuts Jolt Azure: What Slows Where—and For How Long, Qantas Cuts Exec Bonuses After Breach – A Board Level Cyber Reckoning, From Salesforce to Mailboxes: UNC6395 Turns Drift Integrations into Exfil Pipelines

Download the OWASP LLM Security Checklist to evaluate and secure your AI systems. Covers threat modeling, dependency checks, deployment protections, and continuous governance for LLMs.

AI offers innovation and efficiency, but also introduces new risks. This article explores NIST 600-1 and ISO/IEC 42001, real-world examples of AI failures, and practical strategies leaders can use to govern AI responsibly.

Download the NIST AI RMF (AI 600-1) Security & Risk Mitigation Checklist to safeguard your AI systems. Evaluate readiness, manage bias, privacy, and security risks with clear, actionable checkpoints.

Discover what a red team exercise is, how long it takes, and what findings executives and engineers should expect. Learn how offensive security testing improves detection, response, and resilience. 

On June 20, 2025, Governor Greg Abbott signed the Texas Cybersecurity Safe Harbor Law (SB 2610). This law takes effect on September 1, 2025, and brings major changes for small and mid-sized Texas businesses that handle sensitive personal information.If your organization has fewer than 250 employees, this law could protect you from punitive damages after a data breach—but only if you maintain a documented, compliant cybersecurity program.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Nearly Every Fortune 500 Firm May Have Unknowingly Hired North Korean IT Workers, Apple Rushes Zero-Day Fix Flagged by CISA, Workday Breach Highlights OAuth Risks in Salesforce Ecosystems

Discover how ESSA Bank & Trust strengthened its cybersecurity posture with Echelon Risk + Cyber. This case study shows how the bank improved security, achieved compliance, and prepared for acquisition by revamping its security program, enhancing visibility, and practicing breach readiness. Download now to learn how they did it.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: U.S. and Allies Knock BlackSuit Offline After $370M Ransom Spree, Federal Courts Revert to Paper After Case-Filing Hack Exposes Sealed Records, North Korea’s ScarCruft Adds an Extortion Play to Its Spy Toolkit

In this On-Demand webinar, Echelon’s AI governance leaders, Josh Fleming and Steve Dyson, will break down how smart companies are embracing AI while protecting client data, preserving trust, and staying ahead of evolving compliance expectations.​

Meet Juan Hernandez, an Offensive Security Consultant at Echelon, who shares his cybersecurity career journey, key lessons, and tips for aspiring professionals.

Echelon Risk + Cyber has made its debut on the 2025 Inc. 5000 list of America’s fastest-growing private companies - ranking in the top 10% nationwide on its first attempt.

Discover how to develop a business continuity plan with this 10-step guide designed to help mid-sized organizations minimize downtime and recover quickly. Learn clear, actionable strategies to boost resilience and protect operations through effective business continuity planning.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Clorox Sues Cognizant Over Password Resets That Opened Door to 2023 Hack, Feds: Filter the Web and Patch Fast—Interlock Ransomware Is on the Move, Microsoft Rushes Out SharePoint Fixes as Typhoon Crews and Storm‑2603 Exploit New RCE

Meet J.R. Hurd, a vCISO consultant at Echelon Risk + Cyber, whose journey into cybersecurity began with a curiosity sparked in high school and led him to Purdue University, and eventually, to our team.  Read on to learn more about his path, the value of soft skills in a technical field, and the importance of staying connected through mentorship and community. 

While artificial intelligence drives unprecedented value, it also opens the door to significant new risks like model bias, data breaches, and regulatory penalties. Our guide provides an actionable roadmap for implementing a robust AI governance framework, ensuring your innovation is secure, responsible, and builds digital trust.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Inside Washington’s New $1 Billion Bet on Cyber Power, EOT/HOT Mess: Decades‑Old Protocol Could Halt Trains with a Cheap Transmitter, OVERSTEP Rootkit Lets Hackers Re‑Infect Patched SonicWall Gateways

Join us live on August 27th to explore what really makes cybersecurity effective. Offensive security experts break down tool limitations, internal practices, and real-world defense strategies.

The FFIEC Cybersecurity Assessment Tool (CAT) is being sunset, leaving financial institutions in need of new ways to assess cybersecurity risks. Learn why it's being phased out, the top alternative frameworks to adopt, and how to ensure a smooth transition while maintaining compliance and security readiness. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Fast-Food, Slow Security: How a Chatbot Exposed McDonald’s Candidate Data, DragonForce Dragnet: UK Police Nab Four in Retail Cyber Siege, CISA Sounds the Alarm: ‘Citrix Bleed 2’ Must Be Patched in 24 Hours

Learn the real differences between red and purple teaming and how to use each to strengthen your cybersecurity program. Watch the full webinar on demand. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: FBI Investigates Former Ransomware Negotiator in Alleged Extortion Kickback Scheme, DOJ Cracks Down on Covert North Korean Tech Workforce Embedded in U.S. Companies, Ingram Micro Hit by SafePay Ransomware, Causing Major IT Supply Chain Interruption

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Citrix Bleed Returns? New Flaw in NetScaler Draws Alarming Parallels, Rising Cyber Threats as U.S.–Iran Conflict Escalates, Cyberattack on UNFI Highlights Growing Risks to the Food Supply Chain

Think you’re ready for a cyber incident? Preparation goes beyond having a plan. Learn how to build real IR readiness—before you’re tested. 

Join Echelon’s SIEM Engineer Blake Washer as he breaks down how Next-Gen SIEM stacks up against legacy platforms - and what actually matters when evaluating a shift. This session is for security engineers, IT leads, and directors who want faster insights, tighter integrations with EDR, and a smoother path to value.

Ley de Ciberseguridad en México: conoce la propuesta que busca fortalecer la defensa cibernética y garantizar la privacidad en un entorno de crecientes ciberataques.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Massive Password Dump Sparks Panic—But Here’s What You Really Need to Know, Scattered Spider Strikes Again—Insurance Sector Now in the Crosshairs, Feds Move to Reclaim $225M in Crypto Lost to Global Romance and Investment Scams

Mexico’s proposed cybersecurity law introduces a national framework to protect critical infrastructure, strengthen digital rights, and coordinate response efforts against rising cyber threats across the country. 

Curious about SOC 2 Type 2? This FAQ guide answers common questions about the audit process, Trust Services Criteria, preparation tips, and how compliance can boost business credibility. 

Diego Pérez Barrueta, Offensive Security Consultant at Echelon, shares his journey from music to cybersecurity, highlighting how curiosity, continuous learning, and collaboration shaped his path in the field.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Critical Disruption: Cyberattack at UNFI Strains U.S. Grocery Supply Chain, When Remote Access Becomes a Backdoor: SimpleHelp Exploited in Ransomware Surge, Spyware in the Spotlight: Journalists Targeted by Paragon’s Covert Surveillance Too

Learn how to effectively manage third-party cyber risk with proven strategies and tools. Build trust, reduce exposure, and meet compliance requirements. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Decoding the Chaos: Microsoft and CrowdStrike Align Threat Actor Names, £47 Million Fraud at HMRC: What Every Organization Should Learn, ChatGPT in the Wrong Hands: What OpenAI’s Crackdown Reveals About Threat Actor Tactics

Gain a clear view of 2025’s evolving cyber threats with real-world breach insights and a practical defense roadmap for security leaders.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Australia's New Ransomware Reporting Law: What Businesses Need to Know, Nation-State Hackers Exploit ConnectWise Tool in Targeted Attack, Cybercriminal Behind $19M Baltimore Attack Faces Prison Time

Compare ISO 27001 vs SOC 2 Type 2 audits in this detailed guide. Learn key differences in scope, timelines, frameworks, and compliance use cases to choose the right standard for your organization.

This article outlines the major 2024 updates to the ISA/IEC 62443 standards, focusing on changes to governance, supply chain security, monitoring practices, and workforce training. It highlights how Echelon’s Risk and Audit Assessment services can help organizations in manufacturing and the defense industrial base understand and implement these updates effectively. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Coinbase Uncovers Insider Scheme, Refuses to Pay $20M Ransom, Fake Devs, Real Threat: How Pyongyang Infiltrates Western Tech, Scattered Spider Crosses the Atlantic: U.S. Retailers Now Under Fire

Learn service account and PAM best practices to reduce risk, prevent privilege abuse, and improve security with actionable strategies and tools. 

Discover how Alyssa Slayton, a Senior Cybersecurity Consultant for Risk Advisory and GRC services at Echelon, transitioned from military service to a thriving cybersecurity career. Learn about her journey, key advice for newcomers, and the value of mentorship in cybersecurity.

Explore the proposed HIPAA Security Rule updates with cybersecurity experts Josh Fleming and Steve Dyson, Senior Cybersecurity Managers at Echelon Risk + Cyber. Learn what’s changing, who’s affected, and how healthcare organizations can prepare for stronger compliance without straining resources.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: PowerSchool Breach Fallout: Toronto School District Faces Second Extortion Threat, $2 Billion Heist: Hackers Breach Thousands of Japanese Trading Accounts, Cisco Issues Urgent Patch for Critical IOS XE Vulnerability Enabling Full Device Takeover

Stay ahead of proposed HIPAA Security Rule changes with our compliance checklist. Learn key updates, how to document and test your policies, and strengthen your healthcare security posture before regulations take effect.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Apple Warns Users in 100 Countries of Sophisticated Spyware Attacks, Ransomware Feast: Cyberattacks on Food Industry Double in 2025, Co-op, Harrods, and M&S: Inside the Retail Cybersecurity Crisis

Discover the top six financial benefits of continuous penetration testing, from reducing breach and downtime costs to lowering insurance premiums and boosting client trust. Learn how proactive security drives long-term savings and operational efficiency.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Blue Shield Google Ads Misstep Exposes Health Information of 4.7 million Members, Verizon Releases 2025 Data Breach Investigations Report, Inside the FBI’s 2024 IC3 Report: $16B Lost and a Growing Threat Landscape

Discover how the Detroit Pistons partnered with Echelon Risk + Cyber to build a resilient cybersecurity framework. Download the case study to learn how strategic testing, governance, and expert insights reduced critical risks and boosted compliance readiness.

Discover how red and purple teaming together can boost your cybersecurity defenses. Join our expert panel to explore real-world scenarios, improve detection and response, and build a stronger offensive security program.

GDPR compliance, GDPR compliance checklist, GDPR audit preparation, Data privacy regulations, GDPR audit mistakes, GDPR compliance services, Data protection best practices, How to prepare for a GDPR audit, GDPR data mapping guide, Records of processing activities, GDPR security measures. 

Learn the essentials of PCI DSS compliance, including penetration testing, quarterly vulnerability scanning, and the role of QSAs and SAQs. Stay ahead of cyber threats and ensure secure payment transactions. Contact Echelon Risk + Cyber to streamline your compliance strategy. 

Discover Brayden's journey from Minecraft modder to Cybersecurity Consultant at Echelon. Learn how passion, mentorship, and human connection fueled his success in the cybersecurity world.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: The Rise of the Smishing Triad: How Phishers Turned Apple Pay into a Global Fraud Scheme, 1.6 Million Affected in Cyberattack on Lab Partner for Planned Parenthood, Attackers Mimic Legitimate Devices to Bypass MFA and Steal Millions

Ensure your organization's IT and security program meets SOX compliance requirements. Learn how to implement access control, data protection, third-party risk management, backups, and monitoring to comply with Section 404 of the Sarbanes-Oxley Act and protect financial data. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: CISA Rings Alarm Over Active Exploitation of Ivanti Gateways, CISA and FBI Warn of DNS Evasion Technique in Use by Nation-State Hackers, Expert Witness Under Fire: FBI Investigates Forensic Consultant in 2,000+ Cases

Explore the top 10 key considerations for AI governance in 2025, including ethical frameworks, regulatory compliance, data quality, risk management, and international collaboration. Learn how effective governance ensures responsible AI development, transparency, security, sustainability, and public engagement.

This article explores the biggest cybersecurity challenges in healthcare for 2025, including IoMT device vulnerabilities, HIPAA Security Rule updates, and governance best practices. Learn how healthcare organizations can strengthen their security posture and protect patient data. 

Ensure a smooth post-acquisition cybersecurity transition with our 6-month integration plan. Download our expert whitepaper for a step-by-step roadmap today. 

Echelon Risk + Cyber, a leading provider of cybersecurity services, is proud to announce that Cybersecurity Manager Kelsey Cunningham has been honored as one of Consulting Magazine’s 2025 Rising Stars of the Profession. Kelsey was recognized in the category of Excellence in Leadership, highlighting her exceptional leadership, innovation, and impactful contributions within the cybersecurity consulting industry. 

Protect your organization from phishing attacks with proactive cybersecurity strategies. Learn how phishing awareness training, reporting protocols, and email security measures can safeguard sensitive data. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Silent Commits, Big Impact: How a GitHub Action Was Hijacked, Shadows in the Network: Chinese-Linked APT Targets Taiwan’s Infrastructure, ZDI-CAN-25373: How Nation-State Hackers Weaponize Windows Shortcuts

Learn how threat actors exploit AZUREADSSOACC to pivot from on-premises Active Directory to Azure. Get actionable defenses to secure your hybrid identity environment. 

Stay ahead of PCI DSS 4.0 compliance requirements with Echelon Risk + Cyber. Our PCI DSS Readiness Assessments help identify gaps, streamline remediation, and ensure a smooth audit process. 

Learn about SOC 2 compliance, including Type 1 vs. Type 2, Trust Services Criteria, key compliance steps, and how GRC software can streamline your audit process. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Cybercriminals Impersonate Booking.com in Phishing Scam Targeting the Hospitality Industry, Medusa Ransomware Strikes Over 300 Critical Infrastructure Organizations in the U.S., SuperBlack Ransomware Exploits Fortinet Flaws to Breach Critical Systems

This month, we’re featuring Alyson Pisarcik, Cybersecurity Manager for Risk Advisory and GRC services at Echelon, whose journey into cyber started with a leap of faith and a passion for solving complex problems. From overcoming imposter syndrome to taking control of her own career trajectory, Alyson shares how she navigated an industry that’s always evolving and how she’s using her experience to help others break into the field. 

Montauk Renewables reduced critical vulnerabilities by 90% with Echelon’s vCISO and Security Team as a Service. Through a structured 12-month cybersecurity roadmap, we helped Montauk enhance IT-OT security, meet SEC compliance, and shift from reactive firefighting to strategic cybersecurity execution. Download the full case study to see how we transformed their security posture. 

Presented by Echelon Risk + Cyber’s CEO Dan Desko and Josh Fleming, Senior Manager for Risk Advisory Services, this immersive session will focus on strengthening your organization’s IR capabilities. Learn to develop robust IR plans, create actionable playbooks, and execute impactful tabletop exercises to ensure your team is prepared for any cybersecurity challenge

Discover how Managed Firewall Services enhance cybersecurity, reduce complexity, and ensure compliance with 24/7 expert management and proactive threat prevention. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: U.S. Charges 12 Chinese Nationals in Massive Cyber Espionage Operation, Millions of Android Devices Infected with Hidden Backdoor for Cybercrime, Texas Border City Declares State of Emergency Following Cyberattack

At Echelon, our people are at the heart of everything we do. Read inspiring career advice from the women of Echelon as they share insights on leadership, work-life balance, and personal growth.

Learn how Zero Trust enhances Identity and Access Management (IAM) with best practices, real-world challenges, and practical steps for a seamless implementation. Secure your organization with Echelon's expertise. 

Discover how sophisticated social engineering attacks are leveraging legitimate Microsoft tools and services to deploy ransomware. Learn about recent phishing campaigns, Microsoft Teams vishing and effective cybersecurity measures to protect your organization. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: UK Healthcare Provider HCRG Care Group Suffers Massive Data Breach, U.S. Soldier Faces Charges for AT&T Hack and Attempted Defection, Palo Alto Networks Warns of Active Exploitation of Firewall Vulnerabilities

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Bybit Hacked: $1.4 Billion in Ethereum Stolen in Massive Cyber Heist”, Apple Pulls Advanced Data Protection in the UK Amid Government Encryption Demands, FBI and CISA Issue Warning on Ghost (Cring) Ransomware Surge

In this interview, Devin Jones, Principal Offensive Security Consultant at Echelon, offers valuable insights into his cybersecurity journey. He highlights the challenges and rewards of his dynamic role, the key lessons he's learned along the way, and the advice that has shaped his approach to both work and life.

Learn about Machine Account Quota (MAQ) attacks in Active Directory, where attackers exploit machine account creation and misconfigurations to escalate privileges, maintain persistence, and perform Resource-Based Constrained Delegation (RBCD). This article covers techniques such as manipulating delegation permissions and crafting Kerberos tickets to gain unauthorized domain access, including practical examples and tools for detecting and mitigating these threats.

DeepSeek R1’s security flaws highlight critical AI safety risks, from data exposure to adversarial attacks. Learn how vulnerabilities in open-source AI models compromise cybersecurity and what mitigation strategies organizations should adopt. 

Organizations face increasing challenges in securing their cloud environments, including unique risk, limited visibility and expertise, and a rising threat landscape. We’ll explore the key risks that make cloud environments unique, the value of structured assessments, and actionable steps to enhance your security posture while aligning with industry standards and compliance requirements.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Ransomware Payments Decline Despite a Year of Devastating Cyberattacks, UK Demands Apple Create Global Backdoor to Encrypted Cloud Storage, Russian Hackers Suspected of Compromising UK Prime Minister’s Email

Discover how Echelon's vCISO services can help high-growth software startups overcome cybersecurity challenges. Build scalable strategies to protect customer data, meet compliance, and stay ahead of threats without slowing innovation. Learn more today! 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Jailbreak Techniques Successfully Bypass DeepSeek AI Security Measures, Foreign Hackers Exploit U.S. AI Tools to Enhance Cyberattacks, Backdoor Found in Patient Monitors Used in U.S. Hospitals

Relying more on external vendors makes understanding and mitigating third-party risks crucial. Get a comprehensive overview of Third-Party Risk Management (TPRM), emphasizing CIS Control 15 and practical risk management strategies. 

Join us as Paul Interval, Director of vCISO Advisory Services and Shir Butbul, GRC Manager, from Echelon Risk + Cyber, share real-world examples, case studies, and actionable advice to help you identify, assess, and manage third-party risks effectively

Master the art of cybersecurity tabletop exercises with best practices for incident response. Learn how to plan scenarios, engage teams, and build a stronger cyber response strategy. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Massive PowerSchool Data Breach Exposes Personal Records of Millions of Students and Teachers, UnitedHealth Confirms Record-Breaking Data Breach Affecting 190 Million Americans, Security Vulnerability in Subaru's STARLINK System Exposed Customer Data and Vehicle Control Risks

Explore Echelon Risk + Cyber's Managed Defensive Security Services, a comprehensive suite protecting your organization with expert-led solutions for Microsoft 365, cloud security, threat management, and firewalls. Download checklists and capabilities overview briefs to strengthen your defenses. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Hackers Exploit Amazon S3 Buckets Using Encryption Tools in Ransom Scheme, U.S. Treasury Sanctions Chinese Entities for Salt Typhoon Cyberattacks, U.S. Removes Malware Linked to Chinese Hackers in Global Operation

Discover the journey of Michael Pettet, Senior Cybersecurity Consultant at Echelon, from self-taught beginnings to becoming a trusted expert in penetration testing and privacy advocacy. Gain insights into the challenges, rewards, and tools of the trade in this insider look at a cybersecurity career.  

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Apple Settles Siri Privacy Lawsuit for $95 Million, Over 4,000 Backdoors Neutralized Through Expired Domain Registration, New York Takes Action Against $2 Million Cryptocurrency Scam Exploiting Remote Job Seeker

Explore the proposed enhancements to the HIPAA Security Rule by HHS, designed to strengthen cybersecurity in healthcare. Learn how Echelon's incident response planning and tabletop exercises help organizations comply while improving resilience against cyber threats. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  US Treasury Department Breach Highlights Vulnerabilities in Remote Access Software, HHS Proposes Significant Updates to HIPAA Security Rule to Bolster Cybersecurity, U.S. Army Specialist Indicted in Telecom Hacking Scandal

We’re excited to share the 5 most-read articles of the year. These articles stand out for their relevance, depth, and impact on the ongoing cybersecurity dialogue. Whether you’re a seasoned pro or just starting to dive into the world of cybersecurity, these pieces offer valuable perspectives on the challenges and solutions facing today’s digital landscape.

In this interview, Zach Cambre, Risk Advisory Cybersecurity Manager at Echelon, shares his unique journey into cybersecurity and what drives his success. With a background in nursing and a growing interest in technology, Zach has thrived in the fast-paced world of cybersecurity consulting. He talks about how the variety of his work keeps him engaged, the importance of tackling challenges one step at a time, and the value of mentorship. Read on to learn more about Zach’s inspiring career and the insights he’s gained along the way. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Cleo Zero-Day Vulnerability Exploited in Widespread Attacks, DOJ Indicts 14 North Koreans for $88 Million Fraud Scheme Targeting U.S. Companies, SEC Cyber Disclosure Rules: A Year Later, Progress and Pitfalls

Earlier this year, the Federal Communications Commission (FCC) announced $200 million worth of cybersecurity grants will be distributed to eligible K-12 schools as part of the Cybersecurity Pilot Program. So, what are the biggest cyber risks to schools, and how can schools mitigate them in the most cost-efficient way?

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Operation Destabilize Unravels Crypto Money Laundering Networks, British Telecom Giant BT Group Confirms Cyberattack Attempt by Black Basta Ransomware, Cyber Force Proposal Scaled Back in 2025 Defense Bill

Explore the crucial differences between compliance and security in this insightful roundtable with Echelon’s Paul Interval and A-LIGN’s Blaise Wabo. Learn how to move beyond checkboxes, address risks, and implement forward-thinking strategies to protect your organization.

Discover the key cybersecurity predictions for 2025 as industry experts explore the transformative role of AI, the critical importance of employee training, navigating compliance challenges, and strategies to counter evolving threats like ransomware and social engineering. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Blue Yonder Ransomware Incident Wreaks Havoc on U.K. and U.S. Retailers, U.S. Soldier Suspected as Hacker Behind Snowflake Extortions, Chinese Hackers Breach T-Mobile Routers in Targeted Telecom Attack

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Microsoft's AI-Powered Recall Feature Now Available for Windows Insiders, Russian Hackers Exploit Wi-Fi in Innovative ‘Nearest Neighbor Attack', UK Drinking Water Supplies Impacted by Surge in Cyber Incidents

Learn more about the critical vulnerability found recently in the PAN-OS management interface by the CISA. 

Discover Travis Weathers's inspiring journey from military service to Senior Director of Offensive Security at Echelon. From a surprising start in ethical hacking to becoming a leader in the cybersecurity field, TW’s story is one of determination, growth, and a passion for protecting both organizations and individuals.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Canadian Man Arrested in Connection with Snowflake Data Extortion Scheme, Palo Alto Networks Confirms Exploitation of Critical Zero-Day Firewall Vulnerability, North Korean Hackers Experiment with New macOS Malware, Researchers Discover

In today’s digital world, managing access is essential for security, efficiency, and compliance. Role-Based Access Control (RBAC) simplifies this by assigning roles and granting access based on those roles, rather than individual permissions. This ensures consistent, well-managed access across the organization, making RBAC one of the most effective security methods. In this article, we'll explore RBAC, its implementation challenges, and practical tips for maintaining an effective system as organizations scale. 

Echelon is proud to announce its selection as a finalist in the Cybersecurity category at the Pittsburgh Technology Council's esteemed Tech 50 Awards. This honor recognizes Echelon’s key role in reducing cyber risks and enhancing digital security for organizations across Southwestern Pennsylvania's tech community.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Apple’s New iOS Feature Locks Out Law Enforcement with Inactivity Reboot, TSA Proposes Cybersecurity Reporting Mandate for Critical Infrastructure, Secure-by-Design: How AWS, Microsoft, and Others Are Embracing CISA's Cyber Goals

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Sophos' Five-Year Battle Against Chinese Hackers Exploiting Firewall Vulnerabilities, Russian Hacker Group Midnight Blizzard Launches Targeted Spear-Phishing Campaign with Malicious RDP Files, Police Dismantle Redline and Meta Infostealers in Operation Magnus

Join us this Cybersecurity Awareness Month to debunk myths and strengthen your defenses! Learn key truths about phishing, password security, and the importance of updates to protect your organization from digital threats. 

Inc., the leading media brand and playbook for the entrepreneurs and business leaders shaping our future, announced its third annual Power Partner Awards. The prestigious list honors B2B organizations across the country that have proven track records supporting entrepreneurs and helping startups grow. This year’s list recognizes Echelon Risk + Cyber (Echelon) among 359 companies in marketing and advertising, health and wellness, financial services, legal, logistics, public relations, and productivity, as well as other critical areas of business.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Chinese Hackers Allegedly Target Campaign Phones of Trump, Vance, and Harris, Black Basta Ransomware Group Uses Microsoft Teams to Masquerade as IT Support, Kremlin-Linked Hackers Target Ukrainian Agencies in Espionage Campaign

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Sudanese Hackers Charged for Cyberattacks Targeting Hospitals and National Security Systems, Alabama Man Arrested for SEC Hack That Manipulated Bitcoin Prices, Microsoft Investigates Logging Issues Impacting Multiple Services
 

In today's interconnected world, Third-Party Risk Management (TPRM) is essential for safeguarding your organization against cyber threats introduced by external partners. This guide explores the critical aspects of TPRM, providing a framework for identifying, assessing, and mitigating risks associated with third-party relationships. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: U.S. Officials Scramble to Assess Impact of China’s Salt Typhoon Hacks on Wiretap Systems, Internet Archive Breached, 31 Million Users' Data Exposed, Marriott Agrees to $52 Million Settlement Following Data Breaches
 

Hernán Lazarde,  Senior Consultant for our Defensive Security services has proven to be a true advocate for proactive security and community support. With a sharp eye for identifying security gaps, he believes that preparation and swift action are essential for staying ahead of threats. His passion for service began in high school in Venezuela, where he learned that helping others fosters personal growth. Explore his journey and discover how his commitment extends beyond technology.

Discover the top 4 things to know about ISO/IEC 42001:2023 for organizations new to AI standards. Learn how this framework supports ethical AI development, risk management, and continuous improvement to ensure responsible AI governance.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: Chinese Hackers Breach US Wiretap Systems, Access Telecom Networks, Evil Corp Members Sanctioned, Links to LockBit Revealed, Meta Smart Glasses Can Be Used to Dox Strangers in Seconds, Researchers Find

Discover expert strategies from Echelon to enhance your organization's cybersecurity during Cybersecurity Awareness Month. Learn about training enhancements, cyber exercise benefits, internal testing, and building a culture of awareness to strengthen cyber defenses. 

Choosing the right offensive cybersecurity service can be challenging, especially with options like red teaming, penetration testing, and vulnerability assessments that often appear overlapping. Each service, however, serves a distinct purpose and addresses different aspects of your security needs. To help you make an informed decision, let’s explore the differences between these services and how they align with your organization’s specific cybersecurity goals.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Kaspersky's Sudden Software Swap for US Users Sparks Concerns, Critical Linux CUPS Vulnerability Sparks Debate, but Risks Remain Manageable, Website Flaw Exposes Millions of Kia Vehicles to Hacking and Tracking Risks

In today's rapidly evolving cybersecurity landscape, Echelon Risk + Cyber believes that privacy and security are basic human rights, driving growth and innovation to protect and uphold this fundamental purpose. This commitment is exemplified by their recent addition of industry veteran Travis Weathers as the Senior Director of Offensive Security. With a robust background in security and military service, Weathers brings a wealth of experience and a fresh perspective to Echelon's mission of providing comprehensive security solutions. 

The OSI Model, or Open Systems Interconnection Model, is a way to break down how networked devices communicate into seven layers. It was developed in the late ‘70s and published by the International Organization for Standardization (ISO) in 1984.  This article details the vulnerabilities and recommended remediations of each layer of the OSI model. It will be helpful for anyone just starting their cybersecurity career, as well as a refresher for our long timers.

Discover essential strategies for strengthening your cybersecurity defenses based on the key insights from CISA's 2023 Vulnerability Report. Learn how to combat phishing, prevent lateral movement, secure credentials, and enhance incident response to protect your business from evolving cyber threats. 

Organizations often face confusion when selecting offensive cybersecurity services. Vulnerability Assessment, Penetration Testing, and Red Teaming are essential but serve different purposes. At Echelon Risk + Cyber, we frequently encounter this confusion, so we’re here to break down each service and clarify which might be the best fit for your organization. 

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  UK Privacy Watchdog Stops LinkedIn’s AI Training Program Using User Data, Singapore’s BingX Loses $44 Million in Major Crypto Hack, Massive Chinese IoT Botnet Goes Undetected for Four Years Before FBI Takedown

Shir Butbul, Senior Consultant for vCISO services, has made a powerful impact at Echelon. With roots in GRC, she’s grown into a strong leader, co-founding the Women in Cyber group to support and mentor others. Her passion for learning and sharing knowledge shines through her frequent conference talks. Join us as we explore her inspiring journey.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Windows Vulnerabilities Leave Systems at Risk Despite Security Updates, Cyberattack on Transport for London Exposes Customer and Employee Data, SonicWall Pushes Urgent Patch for Critical SonicOS Vulnerability

Written by Echelon’s Cybersecurity Associate, John Hurd, our guide, "Maximizing Cybersecurity with vCISO-Led Security Teams" dives deep into the potential pitfalls and offers strategic insights to help you safeguard your organization.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Navy Officer Demoted for Installing Unauthorized Satellite Dish on Warship, Russian GRU Officers Charged for Cyberattacks on Ukraine and NATO Countries, Food Supply at Risk: Why Cybersecurity in Agriculture Needs Urgent Attention

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Chinese Hackers Exploit Zero-Day Vulnerability to Infect ISPs and Steal Customer Credentials, ALBeast Vulnerability in AWS ALB Exposes Thousands of Applications, FBI Warns of Iranian Collaboration with Ransomware Gangs Targeting U.S. and Allies

Let's reflects on the transformative internship experience at Echelon Risk + Cyber, highlighting the journeys of interns Drew Foley, Cole LaCamera, Pamela Sanchez, and Niko Raketich. Each intern shares their insights gained through hands-on exposure to various aspects of cybersecurity, from vCISO services to compliance assessments and marketing. The program not only nurtures talent but also infuses the company with fresh perspectives, illustrating the profound impact of a supportive learning environment. A heartfelt thank you is extended to all interns for their valuable contributions this summer.

David brings extensive experience in cybersecurity and risk management, enhancing Echelon's ability to deliver innovative solutions and expert guidance. His addition to the team is expected to strengthen Echelon's position in the industry and further drive its mission to protect clients from evolving cyber threats.

In the ever-evolving world of cybersecurity and sales, Launa Rich, Echelon Risk + Cyber’s Client Solutions Manager, emerges as a beacon of perseverance and innovation. Her story is not just about expertise but about an extraordinary journey from the rowing waters of academia to the bustling corridors of high-stakes sales. With a narrative steeped in resilience, adaptability, and a deep commitment to community, Launa's transition paints a vivid picture of personal growth and professional triumphs. Join us as we delve into her inspiring path to Echelon, offering insights and reflections that highlight the essence of overcoming challenges and achieving success.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  US Law Enforcement Turns to Hacked Sky Messages in Major Drug Busts, Configuration Error at FlightAware Exposes Sensitive Customer Data, Halliburton Takes Systems Offline After Major Cyberattack

The origin of BSides goes back to 2009, when a group of cybersecurity professionals recognized the need for community in the field, of a place to share knowledge and ideas. It began as an alternative to popular cybersecurity conferences, putting emphasis on openness, accessibility, and collaboration. The concept was well received, leading to the establishment of BSides chapters worldwide.In this occasion, the Echelon Risk + Cyber’s Mexico team had the opportunity to attend BSides 2024 in Mexico City. This year’s event continued the tradition of providing an open space for discussing the latest trends and challenges in the cybersecurity field. We will explore the highlights and key takeaways from this event, offering a detailed overview and the most significant moments.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Iranian Hacker Group Targets Both U.S. Presidential Campaigns, Google Reports, Microsoft's Summer 6-Pack, Patch Tuesday Addresses Six Zero-Day Vulnerabilities, Unpatched Flaw in Google Pixel Phones Raises Security Concerns

The idea that cybersecurity compliance is a financial obstacle is a dangerous misconception. Having robust cybersecurity compliance is more than just checking the box on compliance. It is a strategic investment that can create significant returns for any organization, but for the investment to be successful, they must commit time and resources to it. Organizations that view compliance as an opportunity rather than just a box they must check, will have a competitive advantage against competitors. Customers are more likely to trust and engage with businesses that prioritize their data and privacy. Trust can then lead to increased customer acquisition and retention for any organization.  

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:  Trump Campaign Confirms Hack, Suspects Iranian Involvement, NHS Software Supplier Faces £6 Million Fine for Ransomware Attack Failings, Researchers Discover Decades-Old Vulnerability in Major Web Browsers

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW:1️⃣ How a North Korean Agent Nearly Infiltrated KnowB4
2️⃣ Google Fixes Email Verification Flaw Exploited by Cybercriminals
3️⃣ Revisiting Kernel Access: Microsoft’s Plan for Enhanced Windows Security

Written by Echelon’s Cybersecurity Associate, John Hurd, our guide, "The Security Risks of Generative AI," dives deep into the potential pitfalls and offers strategic insights to help you safeguard your organization.

The new CMMC 2.0 requirements can be overwhelming at first glance. By implementing an enclave, organizations can greatly lessen the efforts and costs associated with CMMC 2.0 compliance.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. In this week's CIW: 
1️⃣ AT&T Faces Major Data Breach Exposing Customer Call and Text Records
2️⃣ CISA Exposes Federal Agency's Security Gaps Through Red Team Assessment
3️⃣ DDoSecrets Mirrors Critical WikiLeaks Files Amidst Assange's Legal Troubles

WiCyS 2024 showcased the vital contributions of women in cybersecurity, featuring inspiring sessions and emphasizing the importance of community and mentorship. The conference encouraged more women to join and strengthen the cybersecurity domain.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: In this week's CIW: 49 Million Dell Customer Records Compromised, Justice Department Cracks Down on North Korean IT Worker Fraud, CISA Insider Reveals Critical Vulnerabilities in U.S. Telecom Networks

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: In this week's CIW: LockBit Lockdown, U.S. Indicts Key Ransomware Developer, Critical Condition: Cyberattack Disrupts Ascension Health's Nationwide Operations, FBI Urges Increased Surveillance Under Section 702 Amidst Controversy

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Biden's Bold Blueprint to Shield Critical Infrastructure from Cyber Threats, FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data, Massive Data Breach at Outabox Sparks Debate Over Biometric Privacy

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Massive Data Breach at UnitedHealth Affects “Substantial Proportion of People in America”, GitHub Exploit: Malware Masquerades as Microsoft Repo Files, ArcaneDoor Exploit, How Cisco Firewalls Became Gateways for Spies

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Urgent Update: 22,500 Palo Alto Firewalls at Risk of Critical Exploit, Critical Infrastructure at Risk: The Escalation of Cyber Attacks by Russian Hackers, New York Legislative Commission Faces Cyber Sabotage Amid Budget Season

FedRAMP announced a new red team requirement impacting cloud service providers. This article breaks down the details of the requirement and the difference between red teaming and pen testing.

Listen to our fourth installment of our webinar series, "Chew On This," where we delve into the complexities of cybersecurity investment strategies tailored for diverse business portfolios. In this co-branded episode with Expel, we explored pivotal insights into effectively securing companies that boast a portfolio of ventures.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Credential Stuffing Strikes Roku: Over Half a Million Accounts Compromised, Congress Unveils APRA in Landmark Privacy Legislation Attempt, Customer Turmoil Following Sisense's Vague Breach Announcement

In this session, we unravel complex IAM concepts, positioning authentication and authorization as the cornerstone for achieving zero trust architectures. Explore the challenges that legacy identity constructs face in today's dynamic threat landscapes and discover pragmatic approaches for continuous verification.

Discover insights into the recent SEC cybersecurity disclosure mandates, exploring the evolving intersection of finance and technology. Learn about critical updates, implications for the cybersecurity landscape, and the importance of compliance for companies and investors.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: New Cyber Safety Review Board Critical of Microsoft’s Security Efforts, Close Call, How the Linux XZ Backdoor Nearly Compromised Millions, Attempting to Unmask Jia Tan, The Architect Behind the XZ Utils Backdoor

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Apple's M-Series Chips Exposed: The Unpatchable GoFetch Vulnerability, Securing the Flow: The U.S. Urges Ramp Up of Cyber Defenses for Water Systems, Hotel Havoc, Hackers Can Open Millions of Rooms in Second

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Hearing Your Typing, A Novel Approach to Cyber Espionage, Reddit's AI Revenue Plan Under FTC Scrutiny, Busy Patch Tuesday, Microsoft Patches 60 Windows Vulnerabilities, Apple 2 Zero Days

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Healthcare in Crisis: Navigating the Aftermath of Change Healthcare Cyberattack, Midnight Blizzard Continues Cyber Siege on Microsoft, CISA Cybersecurity Breach, A Wake-Up Call for National Security

Dive into CrowdStrike's 2024 Global Threat Report with insights from Daniela Villalobos and Mitchel Sykes. Understand the most important cyber threat trends and learn strategies to stay ahead by focusing on identity protection and cloud security while fostering a cybersecurity culture.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: NIST Unveils CSF 2.0: A New Chapter in Cybersecurity Framework Evolution, Urgent Warning: Cyber Threats Targeting Ivanti Gateways Exposed, Millions of Malicious Forks, GitHub's Battle Against Hidden Malware

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: U.S. and U.K. Join Forces to Neutralize LockBit Ransomware Operations, The I-Soon Leak and the Glimpse into China's Surveillance State, Cybersecurity Company, Avast, Faces $16.5 Million Fine for Selling User Browsing Data

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: In this week's CIW: Breach of Trust, U.S. Internet Corp.'s Unprecedented Email Privacy Fail, Southern Water Cyberattack, Up to 470,000 Customers' Data Compromised, Russia-Aligned Hackers Target Embassies in Sophisticated Cyber Campaign

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: In this week's CIW: Beyond NSO Group, The Rise of European Spyware Giants, The Rise and Pause of OnlyFake, a Glimpse into the World of Synthetic ID Fraud, Ransomware's Record Year, The $1.1 Billion Threat

In the rapidly evolving landscape of cybersecurity threats, organizations face an array of risks that demand proactive measures to safeguard sensitive data. This article emphasizes the importance of creating a robust risk register and outlines a four-step process to identify, assess, and manage potential risks effectively.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: China's Cyber Threat Looms Large Over U.S. Infrastructure, FBI Warns, AnyDesk Confirms Security Breach: Source Code and Keys Stolen, Ivanti Unveils New Zero-Day Amid Ongoing VPN Vulnerability Crisis

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: More Details Revealed on the Midnight Blizzard Attack on Microsoft, Before Microsoft, Tracing Midnight Blizzard’s Attack on HPE, Australia Imposes First-Ever Cyber Sanctions on Russian Hacker Behind Medibank Breach

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Microsoft Leaders Breached by Russian Threat Actors Using Password Spray, Navigating the Ivanti VPN Zero-Day Crisis: What You Need to Know, 71 Million Unique Credentials from Naz.API Dataset Now on HIBP

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: AI in Cybersecurity: A Double-Edged Sword, Bitcoin ETF Fake News, The SEC X (Twitter) Account Compromise, Vulnerabilities Exposed in AI Hiring Chatbot by Hackers, Exposing Personal Data

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: The Blame Game: 23andMe's Controversial Response to a Massive Data Breach, HealthEC Data Breach Has Impact on Millions of Patients, To Pay or Not to Pay: Estes' Stand Against Ransomware Demands

At Echelon, our team takes pride in contributing to and participating in our cybersecurity community. We regularly publish articles on our Intelligence blog to help our clients (and everyone!) stay vigilant. Here are the top 10 articles from 2023.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Strangers in Your Network: The Ubiquiti Device Access Debacle, Congress Discovers Pharmacies Hand Over Patient Records Without Warrants, Ukrainian Telecom Targeted in Cyberattack by Russian-Affiliated Hacker Group

Understand the materiality of cyber incidents according to the Securities and Exchange Commission (SEC) rules. Explore 10 questions to assess the materiality of cybersecurity incidents.

Is your organization's Vendor Risk Management strategy robust enough? This article explores the critical role of CISOs in assessing new vendors and monitoring existing ones to safeguard against data breaches and potential disruptions. Stay ahead in the evolving landscape of third-party threats and enhance your cybersecurity posture.

Discover 7 essential steps for CISOs to bolster cybersecurity during the holiday season. Learn how to recognize and prepare for heightened cyber threats, including data-backed insights and attack-specific playbooks.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: ChatGPT's Inadvertent Data Exposure via a "Divergence Attack", Crypto Under the Microscope: The Binance Settlement and its Impact, UK Accuses FSB of Sustained Hacking Campaigns

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: U.S. Water Utilities Targeted in Series of Hack Attacks, Global Sting Takes Down Ransomware Syndicate in Ukraine, Healthcare Under Siege, New Jersey and Pennsylvania Hospitals Hit by Ransomware

Embark on a journey to HIPAA compliance with Daniela Villalobos' comprehensive guide. Explore the six essential steps, understand HIPAA's importance, and discover how Drata's automation tool streamlines the process.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Microsoft Exposes North Korean Supply Chain Attack on Global Software, FNF Cyber Incident Disrupting Real Estate Transactions Nationwide, Citrix Bleed, Lessons from Boeing's Ransomware Situation

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Hackers Weaponize SEC Disclosure Rules Against Victim, Law Enforcement’s Struggle Against the 'Scattered Spider' Cyber Gang, Ransomware Syndicate Alleges Theft of 430 GB of Data in Stanford University Hack

Explore the significant changes and updates introduced by the NYDFS Second Amendment to 23NYCRR500, impacting cybersecurity regulations for financial institutions. Erin Conway provides insights on critical amendments, timelines, and actions for compliance.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: SolarWinds Responds to SEC Charges With “Setting the Record Straight” Blog, LockBit Group Successfully Hacks Largest Bank in the World, ICBC, When Cyber Warfare Meets Missile Strikes: Sandworm's Attack on Ukraine

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: SEC Charges SolarWinds and CISO with Fraud, Internal Control Failures, NYDFS Releases Major Update to Part 500 Cybersecurity Requirements, Global Stand, Nearly 50 Countries Pledge Against Ransom Payments

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week:

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Protecting Your Genetic Privacy: Responding to the 23andMe Data Breach, Cisco's Critical Security Alert: 10,000+ Devices Compromised in Zero-Day Attack, Hired by Deception: How North Korean IT Workers Infiltrated U.S. Companies

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Cyber Chaos: How Hacktivists Intensify the Israel-Hamas Conflict, Vietnamese Government's Bold Attempt to Hack U.S. Officials, Robinhood Users Beware: Hackers Exploit Accounts in Cash-Out Scams

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Clorox Suffers Suspected Scattered Spider Cyberattack, MGM Faces $100 Million Blow from Data Breach, Sony Employees' Data Compromised in Another MOVEit Transfer Breach

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Chinese Hackers Hiding in Routers in the US And Japan, Chinese Hackers Compromise US State Department Emails in Microsoft Breach, Russian Firm Offers $20M Bounty for Mobile Zero-Day Exploits

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Caesars Entertainment Confirms Major Data Breach in SEC Filing, Rise in Thefts of Kia and Hyundai Vehicles in U.S. Cities, Patch Coming to Help, Microsoft AI Researchers Accidentally Expose 38TB of Data

In this article, Renata Uribe Sánchez explores the transformative impact of large language models (LLMs) in the field of cybersecurity. LLMs, particularly Transformers, are powerful tools within deep neural networks that can interpret and generate natural language, making them invaluable in various applications. The article discusses the benefits of integrating LLMs into cybersecurity, including advanced threat detection, phishing prevention, malware detection, and investigative data analysis. It also highlights the challenges associated with biases, AI-driven hacking, and data privacy.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Vishing Victories, MGM Resorts' Cybersecurity Breach Unraveled, Cybercriminal "USDoD" Targets FBI, Airbus, and Possibly More, Update Your Browser Now: Critical WebP Vulnerability Threatens Various Apps

Echelon's Offensive Security (OffSec) team of ethical hackers conducts daily penetration tests on web applications, uncovering common vulnerabilities that threaten online security. In this article, we explore the top 10 web app vulnerabilities frequently encountered during penetration tests. From SQL injection to CORS misconfigurations, we'll delve into each vulnerability and discuss how to both exploit and safeguard against them.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Forever 21 Faces Significant Data Breach Impacting Half a Million Current and Former Employees, Okta Warns of Social Engineering Attacks on IT Service Desks, Microsoft Hackers Stole Powerful Signing Key from Windows Crash Dump

Discover effective strategies and insights to bridge the gender gap in the cybersecurity field with our senior cybersecurity consultant, Shir Butbul. Explore her findings, recruitment practices, mentorship programs, and more as we delve into the crucial mission of attracting and retaining women in cybersecurity. Learn from Shir's expertise and contribute to building a diverse and resilient cybersecurity workforce for a safer digital future.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: MTA's "Feature" Raises Serious Privacy Concerns, Duolingo User Data Leak Raises Concerns on Data Scraping, U.S. Takes Down QakBot Botnet in Major Operation

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Lapsus$ Hacking Group: Teenagers Behind Major Tech Firm Attacks Found Responsible in Court, Hackers Exploit Credit Bureau Data to Dox Americans for a Fee, Danish Cloud Hosting Firm CloudNordic Faces Severe Ransomware Attack, All Customer Data Lost

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Brunswick in Rough Waters: Unraveling the $85 Million Cyberattack Impact, Chinese Hackers Compromise State Department & GOP Congressman Emails, Urgent Warning Issued Over Citrix ShareFile Vulnerability

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: NPO Mash Breach, North Korea's Growing Cyber Threat Targets Missile Maker, Electoral Commission Hack: Data of 40 Million UK Voters Compromised, Deep Learning Model Can Decode Keyboard Keystrokes Through Sound Have a wonderful week

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: CMU Researchers Uncover Inherent Weakness in AI Chatbots, Midnight Blizzard: Unveiling the Latest Social Engineering Attack on Microsoft Teams, Microsoft Patches Critical Power Platform Vulnerability Amid Criticism

Prepare for the eLearnSecurity Web Application Penetration Tester (eWPT) exam with this comprehensive guide. Learn about the exam format, prerequisites, and tips to pass the practical and written assessments. Acquire valuable web application penetration testing skills and enhance your professional profile.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: SEC Adopts Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies, U.S. Hunts Chinese Malware Threatening Military Operations, Call of Duty: Modern Warfare 2 Players Targeted by Self-Spreading Malware

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Underestimating the Threat: The True Reach of the Compromised Microsoft Key, North Korea-Backed Hackers Breach JumpCloud to Target Cryptocurrency Clients, Lack of Cybersecurity Priority? Few Fortune 100 Companies Include CISOs in Top Executives

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: From Plan to Action, Implementing the National Cybersecurity Strategy, Microsoft Security Flaw Exposes Intelligence Operation, The Case for a "Secure by Default" Approach, HCA Healthcare Data Breach, Hacker Puts Stolen Data Up for Sale

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Another week full of big stories and things to keep an eye on. In this week's CIW: New Truebot Malware Variants Target US and Canadian Organizations via Netwrix Auditor RCE Bug, New Critical SQL Injection Vulnerability Discovered in MOVEit Transfer Software, Critical FortiGate Vulnerability Leaves Over 300,000 Devices Exposed

Learn about network pivoting techniques for the eCPPT exam and penetration testing. Understand the concept of pivoting, explore tools like Metasploit, Proxychains, SOCKS Proxy, Chisel, and Ligolo-ng, and discover the differences between reverse shells and bind shells.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: SEC's Warning Shot: SolarWinds' CISO and Employees May Face Enforcement Action, Apple Joins WhatsApp and Signal in Voicing Concerns over UK's Online Safety Bill, MOVEit Ripples Continue to be Felt in Massive CalPERS Breach

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Operation Triangulation: Apple Fixes Zero-Day Vulnerabilities Exploited, Third-Party Vendor Hack, Data Breach Impacting Pilots in Major Airlines, UPS Canada Data Breach Exposes Customers to Targeted Smishing Attacks

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: MOVEit Transfer Customers Warned of NEW Critical Flaw, Government Agencies Hacked, Unsolicited Smartwatches Pose Cybersecurity Threat to Service Members, SEC Delays Final Rule on Four-Day Breach Notification for Public Companies

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Barracuda Networks Advises Replacing Compromised Email Security Gateway Appliances, Another Medical Data Breach Tied to Forta SFTP Software, Largest Healthcare Data Breach of 2023: Dental Insurer Hacked, 9 Million Patients Affected

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: MOVEit, Get out the Way, Get out the Way!, Barracuda Discloses Seven-Month Exploitation of Zero-Day Vulnerability, FTC Takes Aim at Amazon, Alexa and Ring Settlements Highlight Privacy Concerns

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Meta Hit with GDPR Record $1.3 Billion Fine for Privacy Violations, U.S. Surgeon General Issues New Advisory About Effects Social Media Use Has on Youth Mental Health, Spain's Push to Ban End-to-End Encryption Raises Concerns for Online Privacy

Here are our key takeaways from CrowdStrike's 2023 Global Threat Report. Discover the latest threat trends and explore recommendations for staying ahead of threats.

Uncover the truth about Microsoft 365 security in healthcare organizations. Learn why myths about security tools, Microsoft's default settings, third-party filters, and HIPAA certification can leave your organization vulnerable.

Cybersecurity breaches are on the rise for healthcare, with many coming through the supply chain. Here's practical advice on how to assess the maturity of a third-party risk management program and reduce the risk associated with vendors and business partners.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: KeePass Vulnerability Exposes Master Passwords: A Critical Security Risk, Unveiling the Risk: Police-Auctioned Cell Phones and Re-Victimization, Toyota Japan's Data Breach: Millions of Vehicle Location Data Expose

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Dragos Overcomes Ransomware Extortion Attempt by Threat Actor, FBI Disrupts Snake Malware Network Controlled by Russia's Federal Security Service, MSI UEFI Signing Key Leak Triggers Supply Chain Security Concerns

Healthcare organizations should assess their Microsoft 365 environment to protect sensitive data and reduce cyber threats. Read on to learn more.

Learn how to locate and exploit Cross-Site Request Forgery (CSRF) vulnerabilities in modern web applications by understanding client-side and server-side code interactions, CSRF tokens, and SameSite cookie policies.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Apple's Swift Response: First Rapid Security Fixes for iPhones, iPads, and Macs, Google Takes the Lead in Password-Free Authentication for All Accounts, Largest International Operation Against Darknet Drug Trafficking Recently Executed

Small to mid-sized businesses often wonder whether to hire a Chief Information Security Officer (CISO). This article examines the factors for SMBs to consider when deciding to hire a full-time or fractional CISO.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week:Double the Supply Chain Attack, Double the Fun!, Western Digital Faces Extortion Attempt After Hackers Steal 10 Terabytes of Data, March 2023 Sees the Highest Number of Ransomware Attacks in Three Years

Traditional penetration testing may not be enough to simulate real-world attack scenarios. Discover the benefits of adversarial-based red teaming with the TIBER-EU Framework to improve your organization's ability to detect, respond to, and mitigate sophisticated attacks.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Double the Supply Chain Attack, Double the Fun!, Western Digital Faces Extortion Attempt After Hackers Steal 10 Terabytes of Data, March 2023 Sees the Highest Number of Ransomware Attacks in Three Years

Cybersecurity terms like "red teaming" and "penetration testing" are often used interchangeably, leading to confusion and misinformation. This article explores the differences between these assessments and why the misuse of terms can be detrimental to the industry.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Air National Guardsman Arrested in Pentagon Classified Document Leak, Samsung Employees Leaked Sensitive Data to ChatGPT, First-of-Its-Kind Cybersecurity Guidance Urges Secure-by-Design Software

Six years into her professional career, Shir Butbul decided to make a career change and move into consulting after working as a GRC Lead for various companies. Here's what she has learned on her journey.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: U.S. Justice Department and International Partners Shut Down Genesis Market, Italian Regulators Crack Down on ChatGPT Over Data Privacy Concerns, TMX Finance Customers' Personal Data Stolen in Major Security Breach

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Kremlin Cyber Espionage Tactics Revealed in Released Vulkan Files, Massive Supply Chain Attack Hitting 3CX Desktop App, U.S. Executive Order Restricts Procurement of Commercial Spyware

A reactive approach to mitigating infrastructure vulnerabilities - or playing “vulnerability whack-a-mole” - is both unsustainable and ineffective. Here's how a formal vulnerability management program provides proactive, sustainable, and effective measures to defend against cyberattacks.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Is TikTok the Problem, or are We the Problem?, Chinese-Based Pinduoduo App Banned by Google Over Malware Concerns, Ferrari Reveals Cyberattack After Receiving Ransom Demand

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Google’s Mandiant Warns of Stealthy Chinese-Backed Attacks, Feds Charge NY Man as BreachForums Boss “Pompompurin”, SEC Proposes New Requirements to Address Cybersecurity Risks to the U.S. Securities Markets

Learn why pen testing alone isn't enough to secure healthcare organizations from cyber threats, and how red team assessments can help identify and mitigate vulnerabilities. Here's a comprehensive overview of red teaming and its importance in healthcare cybersecurity.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: SEC Fines Blackbaud $3 Million for Misleading Disclosures About Ransomware Attack, Minneapolis Public Schools Held Hostage by Medusa Ransomware Gang, U.S. Marshals Service Hit with Ransomware Attack and Data Breach

Preparing for the eLearnSecurity Certified Professional Penetration Tester (eCPPTv2) exam? Here are three experiences from the Echelon Offensive Security Team and tips on how to prepare.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Biden-⁠Harris Administration Announces National Cybersecurity Strategy, LastPass Security Breach: A Lesson on the Power of Timely Software Updates, Dish Network Hit by Ransomware Attack, Data Stolen by Cybercriminals

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Atlassian Investigates Breach as Hackers Publish Stolen Data Online, Pepsi Bottling, Where’s My Data?, Sensitive US Military Emails Exposed on Misconfigured Server

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: GoDaddy Suffers Three-Year Cyberattack Siege by Hackers, Cybersecurity Incident at MKS Blamed for Sales Shortfall for Applied Materials, CNN Reports that FBI Systems Were Breached by Hackers

A few weeks ago, I received an email stating that I had passed the eJPTv2 certification. I wanted to share my perspective on the exam, what’s covered in the eJPTv2 syllabus, and how to prepare for it in this eJPT exam review.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: United States and United Kingdom Sanction Members of Russia-Based Trickbot Cybercrime Gang, TruthFinder and Instant Checkmate Background Check Services Suffer Massive Breach, Toyota’s Global Supplier Management Network System Pwn’ed by Security Researcher

When it comes to cybersecurity, all organizations share a similar risk – the possibility of human error. When it comes to educating your people about cyber, one size does NOT fit all. Here are six strategies to mature your information security awareness and training program.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: GoodRx Hit with $1.5 Million Fine for Sharing User’s Health Data, VMware ESXi Servers Targeted in Massive Worldwide Ransomware Attack, Threat Actors Abuse Microsoft’s Verified Publisher Status to Carry Out Attacks

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Riot Games League of Legends Source Code Stolen, Hackers Demand $10 Million, For LastPass Owner, GoTo, Breach Situation Gets Worse, CISA, NSA, and MS-ISAC Release Advisory on the Malicious Use of RMM Software

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: New T-Mobile Breach Affects 37 Million Accounts, Thousands of Norton LifeLock Customer Accounts Breached, Third-Party Administrator, Bay Bridge, Notifies Patients of Data Breach

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Royal Mail Service Interrupted After Ransomware Attack, Police App Leaks Secret Details About Raids and Personal Data About Suspects, FAA Blames Massive Outage on Database Integrity Issue

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Slack’s GitHub Compromised Over the Holidays, Zero-Day to Blame for Rackspace Breach, U.S. Nuclear Scientists Were Targeted by Russian Hackers.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: The LastPass Hack, What You Need to Know, The Worst Hacks of 2022, The Equifax Breach Settlement Offer is Real, For Now

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Stolen Information on More Than 80K InfraGard Members Is Allegedly Being Sold on the Dark Web, Former Twitter Employee Hit with Jail Sentence for Spying for Saudi Arabia, Rackspace Hosted Exchange Email Capabilities Still Offline After Ransomware Attack

At Echelon, our team takes pride in contributing to and participating in our cybersecurity community. We regularly publish articles on our Intelligence blog to help our clients (and everyone!) stay vigilant. Here are the top 10 articles from 2022.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: New Ransom Payment Schemes Target Executives, Telemedicine, Majority of U.S. Defense Contractors Not Meeting Basic Cyber Requirements, ChatGPT Unlocking the Potential of AI For Threat Actors?

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: LastPass Announces Another Security Incident, Huge Trove of Phone Numbers (360 Million) for Sale on Dark Web, Krebs Notes That ConnectWise Quietly Patches Flaw That Helps Phishers

If you are a modern-day developer, you’re probably plenty familiar with JSON Web Tokens (JWT’s). They perform their job efficiently when correctly implemented. Unfortunately, they can also be vulnerable to malicious threat actors.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Department of Defense Releases Zero Trust Strategy and Roadmap, FCC Bans Authorizations for Devices That Pose National Security Threat, Hundreds Arrested in UK Fraud Service Website iSpoof

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: CISA Announces Iranian Government-Sponsored APT Actors Compromise Federal Network, Researchers Quietly Cracked Zeppelin Ransomware Keys, Russian Software Disguised as American Present in 8,000+ Apps

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Twitter Verification Mess Causing Billion Dollar Losses in the Stock Market, Australian Federal Police to Hackers, “We Know Who You Are”, Feds Seize $3.36 Billion in Cryptocurrency Hidden Under Floorboards (This is a real story!)

The highly anticipated ISO 27001:2022 updates modernize the standard to keep up with the evolving cyber landscape. Here's everything you need to know about the changes and how you can get (and stay) compliant.

Virtual Private Networks (VPNs) are often presented as the ultimate tool for privacy and anonymity. But this is a strong misconception. Using a VPN does not guarantee protection from location tracking, social and web profiling, and most importantly, using a VPN does not guarantee anonymity.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: United States Exploring Review of Twitter Deal, Ties to Foreign Investments, Snack Maker Mondelez Settles NotPetya 'Act of War' Insurance Suit with Zurich, NSA Watchdog Concluded One Analyst’s Surveillance Project Went Too Far

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Advocate Aurora Health Confirms Breach of Millions of Patient Records Due to Meta Pixel, Misconfigured Microsoft Data Bucket Leaks Sensitive Data of 65,000+ Entities, LockBit Group Says They Stole 1.4TB of Data From UK’s Kingfisher Insurance

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Australia’s Largest Healthcare Insurer Confirms Data Breach, CISA Begins Request for Comments on Microsoft 365 Security Configuration Baselines, Feds Warn About Ransomware Threats to Healthcare Organizations

Utility Cloud is an operations management software designed to help utilities such as water, wastewater, and natural gas digitally manage their assets and work orders. Here's how Echelon Risk + Cyber helped ensure they are functioning at their most secure level.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Vulnerable Fortigate Products FortiOS / FortiProxy / FortiSwitchManager Allow Authentication Bypass on Administrative Interface, Ferrari Denies Data Breach and Ransomware Attack Following Gang’s Online Claims, GCHQ Head says Chinese Tech Poses Major Risk

Multi-factor authentication (MFA) is the process of having more than one form of authentication to ensure that if one methods is compromised, an attacker is still unable to access the account.

Passwords have not gone away yet. Although there may be new forms of logging in, such as biometric logins, passwords still ultimately serve as our master key to sign in. This means we need to take better care of how we create, use, and store our passwords.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Former Chief Security Officer Of Uber Convicted Of Federal Charges For Covering Up Data Breach, LA School’s Stolen Data More Sensitive than Expected,Russian Speaking Hackers Knock US State Government Websites Offline.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Microsoft Exchange Server Experiencing Two New Zero-Day Vulnerabilities, LinkedIn Riddled with Fake Fortune 500 CISO Profiles, Fast Company Content Management System Hacked, Offensive Apple News Alert Sent

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Microsoft Releases Out-of-Band Security Update for Microsoft Endpoint Configuration Manager, American Airlines Data Breach Exposes Employee and Customer Data, Australian Telecom Giant Optus Suffers Hack

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week:

Buckle up for the story of how the Echelon team won the coveted DEF CON Black Badge, and dive deep into Ross Flynn's detail breaking down the Black Badge.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Security Officials Concerns Raised Over Liability for Attacks, GIFShell attack creates reverse shell using Microsoft Teams GIFs, New Google Chrome Zero-Day Has Users Scrambling to Update

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Chinese Database with Facial Recognition and License Plate Data Leaked, Nelnet Servicing Breach Exposes Data of 2.5M Student Loan Accounts, Italian Oil Giant, Eni, Hit by Hackers

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Popular Password Manager LastPass Suffers Security Incident, Mudge has some Serious Twitter Beef, Roasting 0ktapus: The Phishing Campaign Going after Okta Identity Credentials

We can think about an amusement park’s rider height and restriction requirements as a useful way to describe risk tolerances when onboarding new vendors or increasing scopes of work to existing ones.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: TikTok’s Built-In Browser Can Log Keystrokes, Researcher Says, Lloyd’s of London to Exclude State-Backed Cyber Attacks from all Coverage, 1,900 Signal User’s Numbers Exposed Due to Twilio Breach

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Sounding the Alarm on the Emergency Alert System (EAS), Starlink Satellite Dish Hacked with $25 in Parts, Cisco Confirms Cyber Attack in May of 2022, Ties to $Lapsus

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: A Peek into Microsoft’s Microsoft Offensive Research & Security Engineering (MORSE) Team; Scammers Sent Uber to Take Elderly Lady to the Bank; Another Rough Week for Web3, Dual Hacks Causing Havoc

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: UEFI Rootkits, Hidden Lurking Malware, Untangling KNOTWEED, Microsoft Highlights Austrian Cyber Actor in Latest Blog, Hacker Teaches How to Shoplift at Recent Conference.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Data of 5.4 Million Twitter Users is Allegedly up for Sale, Popular NFT Queue Software PREMINT Compromised, $375k in NFT’s Stolen, Russian Hackers Released Fake Pro-Ukrainian App to Track Users and Infrastructure

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Amazon Handed Ring Videos to Police Without Warrants, Honda Key Fob Hack Allows Anyone to Remotely Unlock Honda Cars, North Korean Operatives are Trying to Infiltrate US Crypto Firms

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Florida Man Arrested for Selling $1 Billion in Fake Cisco Hardware on Amazon, eBay, Apple Unveils new “Lockdown Mode” to Protect Users from Targeted Spyware, NFT Marketplace OpenSea Reports Massive Email Data Breach

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Flagstar Bank Breach Affects over 1.5 Million Customers, Attorney General James Secures $400,000 From Wegmans After Data Breach Exposed Consumers’ Personal Information, Microsoft Finds Raspberry Robin Worm in Hundreds of Windows Networks.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: The TikTok Tapes, Leaked Meeting Recordings Show US User Data Accessed Regularly in China, Microsoft Releases New Report; Defending Ukraine, Early Lessons from the Cyber War, Users Being Targeted by New Zero-Day Spyware, Hermit

This year’s RSA 2022 event was centered around the theme of “Transform,” which is really on-point for the world we live in. Here are Paul Matvey's big takeaways from the event.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: L3Harris Technologies in Talks to Buy NSO Groups Hacking Tools, Actively Exploited Follina Vulnerability Finally Addressed in Latest Windows CU, Hacked Email Account Potentially Led to Breach at Kaiser Permanente

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: NSA, CISA, and FBI Expose PRC State-Sponsored Exploitation of Network Providers, Devices, Back From the Dead, Emotet Returns in 2022, Follina Exploiters Growing by the Day, Still No Patch from Microsoft

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Microsoft “Follina” Zero-Day Vulnerability Causing Worldwide Concern, Massive Cyberattacks Crippling Costa Rica and Several Universities Put on Watch, Credentials Offered for Sale

Upon returning home from Scottsdale, AZ for the PA Bankers Convention of 2022, I had some time to reflect on my three key takeaways from my time spent amongst leaders in the great banking industry of Pennsylvania.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Microsoft “Raising the Baseline Security for all Organizations in the World”, FTC Charges Twitter with Deceptively Using Account Security Data to Sell Targeted Ads, Hacker Steals Data on Hundreds of Verizon Employees

File uploads are ubiquitous, making them a prime target for attackers. Here's how ethical hackers test your resilience against these kinds of attacks.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Department of Justice Announces New Policy for Charging Cases under the Computer Fraud and Abuse Act, Flaw in Texas Website Exposed 1.8 Million Resident’s Data for Years, and Microsoft Bing’s Chinese Political Censorship of Autosuggestions in North America.

Are you exposing your company's internal data? Algolia APIs are extremely useful for efficient access to stored data, but the keys used to access them are easily misconfigured and can give attackers access to allow an attacker to launch a site-wide attack.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Thousands of Websites Collect Your Data in Web Forms Before Form Submission, DEA Law Enforcement Portal Possibly Breached, Businesses Seek to Soften Up SEC Cybersecurity Reporting and Disclosure Rules

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Data Broker Is Selling Location Data of People Who Visit Abortion Clinics, Nakasone Says Cyber Command Did Nine 'Hunt Forward' Ops Last Year, Heroku Recently Forced Customer Password Resets After GitHub OAuth Token Theft

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Russia Sanctions Complicate Paying Ransomware Hackers, French Fiber Optic Attack Highlights Physical Vulnerabilities to Critical Infrastructure, FBI Conducted Millions of Searches of Americans’ Data Last Year

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: T-Mobile Breached Again, This Time by Lapsus$, Criminals Abuse Apple Pay in Spending Sprees, Millions of Lenovo Laptops Contain Firmware-Level Vulnerabilities

Many cutting-edge security programs base their defenses on sophisticated, nation-state level threat actors. How, then, have so many of them gotten hacked recently by a new and less-sophisticated group, Lapsus$?

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Feds Uncover a ‘Swiss Army Knife’ for Hacking Industrial Control Systems, Widely Used Autonomous Hospital Robots at Risk of Remote Hijacking, Mirai Malware Leveraging Spring4Shell Exploits for Botnet Delivery

The Lapsus$ attacks have helped companies realize that third-party vendors can be the 'weakest link' within their own organizations. This article summarizes what companies can learn (and do) to protect data.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: US Government Disrupts Russian Government Controlled Botnet, German Federal Police Shut Down Russia’s Dark Web Market, Hydra, Block Says Former Worker Accessed U.S. Customer Data Without Approval

Most current third-party risk management (TPRM) programs are external-facing. But what if the greatest threat to your organization wasn’t external?

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Software Giant Globant Confirms Breach after LAPSUS$ Shares 70GB of Stolen Data, Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”, Critical GitLab Vulnerability Allows Attackers to Take Over Accounts

The year 2021 brought about some serious cyber challenges. This article summarizes key takeaways from CrowdStrike's Global Threat Landscape report, provides a breakdown of the five 2021 themes, and gives our take on seven recommendations that resonate most with us.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Okta Compromise by LAPSUS$ Causes Massive Concern, LAPSUS$ Hackers Leak 37GB of Microsoft's Alleged Source Code, U.K. Police Arrest 7 Related to LAPSUS$ Hacks on Tech Firms

In January 2021, the Federal Reserve Banks implemented the Security and Resiliency Assurance Program outlining new compliance requirements for banks that use FedLine® by the end of 2022. This article outlines everything you need to know about this new program.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Germany Warns Against Use of Kaspersky Antivirus Software, Microsoft Defender Tags Office Updates as Ransomware Activity, Ukraine’s President Zelensky Deepfaked in False Surrender Tactic

The eWPTX is an expert-level certification covering advanced web application exploitation and analysis. Here’s one cybersecurity consultant’s experience and tips on how to prepare.

Role Based Access Control (RBAC) has become the holy grail of access management. What does RBAC stand for? Here are a few tips on how to strategically approach your RBAC adoption journey.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: SEC Steps up Cybersecurity Requirements in a Big Way, Hackers in Space Disrupt Satellite Systems and Customers, Serious Flaw Found in Microsoft’s Azure Automation Service

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Senate Passes Cyber Incident Reporting Bill, House Next Up, Kinetic and Cyber Warfare, Microsoft Responds, Conti Ransomware Group Data Leaked by Security Researcher

Lawmakers have argued about mandatory cyber incident reporting for years, but it has never gained the traction needed to become widespread law. For those in the banking industry, this is all about to change.

Partnership Delivers Best-in-Class Solutions and Services to Help Companies Stop Breaches and Achieve a Higher Level of Endpoint Protection

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Ukrainian Hacktivists Fight Back Against Russian Aggressors in Cyber Space, F12 Does Not Equal Hacking, Missouri Governor’s Call for Investigation Proves Worthless, and South Korean Researchers Crack Code for Hive Ransomware

As an organization that stores sensitive medical data, MetaOptima is focused on investing in their security posture. Here's how Echelon Risk + Cyber helped ensure they are functioning at their most secure level.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: San Francisco 49ers Hit with Ransomware Attack, As Russia/Ukraine Tensions Mount, So Do Cyber Concerns Globally, No One Cares About Your Wordle Score, Or Your Privacy

QR codes are clever (just ask Coinbase), but they can be security nightmares. Here’s what our CEO, Dan Desko, had to say when he was interviewed about this year’s Super Bowl ad.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Laundering $4.5 Billion of Bitcoin is Apparently Pretty Difficult, Decryptor Released for Several Ransomware Strains, IRS Transitions Away from Plans to use Facial Recognition

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Chinese Surveillance Key Area of Concern as 2022 Olympics Kickoff, Major German Oil Storage Company Hit by BlackCat Ransomware, and Man at Home in Pajamas, Takes Down North Korean Internet

GraphQL is a commonly used query language for manipulating APIs. Properly secured, it is a useful tool for web application development. Configured improperly, it can have devastating results.

Threats are continuously evolving - your pen testing should too. As attackers constantly find new vulnerabilities to exploit, a continuous penetration testing approach persistently emulates threat actor activity within a company’s unique environment, helping them stay secure over time.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Supposed Belarusian “Hacktivists” Disrupt Belarusian Railways with Ransomware, Ukraine Wiper Malware Used Code Repurposed from Another Ransomware, and White House Making Good on Promised Cyber Strategy.

Password Reset features can be dangerous and must be implemented securely. Otherwise, user accounts can be compromised.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Crypto.com Loses $30 Million in Crypto Through Hack, Cyberattack Affects Red Cross Work, Exposes Confidential Data for Vulnerable People, Hackers Got Comfy Inside Ukrainian Systems for Months Before Launching Attacks

Detailed error messages may seem unimportant, but they can be very valuable for attackers. Here's more on why they are important and how you can fix this web app vulnerability.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Russia Pretends to Care About Criminal Cybersecurity Activity for a Day, Ukraine State Websites Hit with Cyber Attack, and EU Police Agency, Europol, Forced to Delete Mass Amounts of Personal Data

Hidden dangers within your web app’s ‘invite’ feature, why it matters, and how you can fix it.

The DoD’s Cybersecurity Maturity Model Certification (CMMC 2.0) framework is changing, but there are many advantages to beginning your compliance journey now rather than later.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Commercial Antivirus Products Now Come with Free Crypto Miners! (Not Kidding), Stalking/Privacy Concerns Abound with Apple AirTag Device, and Russian IT Exec Recently Captured for Insider Trading May Have Deep Kremlin Ties

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Cheers to Y2K22! Should old acquaintance Microsoft Exchange be forgot, and never brought to mind?, Users of Popular Password Manager Targeted in Credential Stuffing Attacks, and Shutterfly Hit with Massive Ransomware Attack

At Echelon, our team takes pride in contributing to and participating in our cybersecurity community. We regularly publish articles on our Intelligence blog to help our clients (and everyone!) stay vigilant. Here are the top 10 articles from 2021.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Log4j Fallout Continues and New Vulnerabilities Uncovered, What Management Should be Asking About Log4j/Log4Shell, Microsoft and Mandiant Observe Exploitation of Log4Shell in the Wild

Websites are like buildings. If your website's foundation is vulnerable to Log4j, check out this overview of the attack, how to test for it, and how to mitigate it.

As 2021 winds down, we take a peek into the future of cybersecurity for 2022. Will our predictions come true?

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Critical Vulnerability in Ubiquitous Java Logging Utility, Log4j, America Runs on D̶u̶n̶k̶i̶n̶ AWS, Emotet Malware Making a Strong Comeback

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Former Ubiquiti Developer Charged by FBI for Extorting His Employer, NSO Group Tools Target U.S. and Other Officials in Uganda, and Hackers Are Spamming Businesses’ Receipt Printers With ‘Antiwork’ Manifestos

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: GoDaddy Announces Security Incident Affecting Managed WordPress Service, Apple Sues NSO Group to Curb the Abuse of State-Sponsored Spyware, Brian Krebs Rings Alarm Bell on Zelle Fraud Scam for a Second Time

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: United States Charges Two Iranians with Attempting to Interfere with 2020 Presidential Election, $500 million in Cyber Spending Inches Closer to Reality as Part of 'Build Back Better' Bill, and Cisa Release Playbook for Incident Response.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Robinhood Announces Data Breach, Millions of Records Involved, FBI Systems Abused in Hoax Email Blast, 50+ Flaws In This Month’s Patch Tuesday from Microsoft.

As technology advances at an unprecedented pace, many businesses are aggressively accelerating adoption to maintain a competitive advantage. But there’s a big risk for those who don’t keep cybersecurity top of mind.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Department of Defense Cybersecurity Framework - CMMC - Gets Major Overhaul, Company Directors and Boards in the Crosshairs Over Cyber Incidents, and Israeli Spyware Producer NSO Group Blacklisted by US Government

The Cybersecurity Maturity Model Certification (CMMC) underwent a huge makeover in the last 48 hours. Here is what you need to know.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Microsoft Sets Sights on Closing the Cybersecurity Skills Gap, PAX Technology Raided by FBI, Key Member of REvil Ransomware Gang Identified.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Ransomware Gang Recruits Tech Talent Through Fake Company, High Profile YouTube Accounts Targets for Hackers, and Maker of Candy Corn Hit by Ransomware

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Clicking the F12 Button Considered ‘Hacking’ Per Missouri Governor, Deep Fakes Gaining Steam in Elaborate Social Engineering Attacks, and Phishers Getting Tricky with Coinbase Fraud

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Facebook, Instagram and WhatsApp Endure Major Outage, Major Telecom Provider Announces Five-Year-Long Security Breach, and Twitch Confirms Massive Breach, Company Data on 4Chan.

In this interview and article from SC Media, Dan Desko and Dahvid Schloss discuss how the Echelon Risk + Cyber team used their cyber skills to help at least 50 Afghan refugees to safety.

In this video discussion with Matt Tolbert, Senior Cybersecurity Examiner for the Federal Reserve Bank of Cleveland, Matt and Dan discuss risks of remote workforces, planning for disruptions, mitigating 3rd party risks, going to the cloud, supply chain threats, and resilience in the future.

Bell and Howell partnered with Echelon Risk + Cyber to test the security of their systems, ensuring that they will continue to be protected from future cyberattacks and avoid any future disruption to their systems.

Our CEO and Founder Dan Desko was recently interviewed for Mission Matters Innovation with Adam Torres. The interview focuses on our core belief that security and privacy are basic human rights. We're built to live that mission every day.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Death of Infant Nicko Silar Blamed on Ransomware, MFA Meets its Match?, and VMware vCenter Server Critical Vulnerability Exploited in the Wild.

Considering a move to the cloud? There's a lot to think about, especially for financial institutions. This article lays out those obstacles and some considerations for overcoming them.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: 2021 Record Year for Zero-Day Exploits, Massive Credential Leakage Occurring Through Microsoft Autodiscover, and FBI Held Back Kaseya Ransomware Decryption Keys for Weeks

Another year, another penetration test? Attackers are evolving, and so should you. Here are four ways to spice up your pen testing routine to be better prepared and reduce your attack surface.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Customer Service Outsourcing Giant TTEC Hit by Ransomware, Apple Releases Patch for Zero-Day, and Another Major Microsoft Vulnerability.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Microsoft Zero Day exploited in the wild, hundreds of public companies in the SEC cyber hot seat for SolarWinds breach, and UN falls victim to major breach.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Cybersecurity awareness during upcoming holidays, Atlassian Confluence security advisory, and WhatsApp privacy breach fines.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Biden gets cyber commits from big tech, MS Power Apps leave data exposed, and CosmosDB vulnerabilities.

Have you solved your badges yet? With another DefCon in the books, here's our take on the best sessions and a close up look at some of the badges.

From a hacker’s perspective, the essence of password security boils down to two things: how guessable is it and how easy is it to crack encrypted passwords. Here are our tips for creating stronger passwords.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: massive insider threat is looming, BlackBerry vulnerabilities, and updates on previous CIW stories.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: data breach at T-Mobile, Apple's privacy nightmare, and Microsoft needs to patch patching.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: Federal agencies failing at cyber, Apple scans your iCloud photos, and a disgruntled ransomware worker acts out.

More people fell victim to phishing than any other form of internet crime in 2020, and this trend is likely to continue. But phishing is not just prevalent - it is evolving. Here are three mitigation strategies for modern phishing techniques, from the perspective of a hacker.

Have you Googled CMMC compliance lately? We want to help clear the air. Avoid the marketing jargon and confusing content with these answers to common questions.

This weekly post shares our intel around some of the major developments on the future of cybersecurity. This week: President Biden's memorandum on Critical Infrastructure Cybersecurity, an FBI official advises against banning ransomware payments, and the search engine for hackable websites returns.

Over the past year and a half, the worldwide workforce underwent a drastic and rapid paradigm shift that has brought with it new opportunities, attack vectors, and methods to test security. When testing security with penetration testing, partner with a firm using the most modern, advanced tactics to test your readiness for tomorrow’s attackers.