FoxPointe Security Hub

Phish - SpearPhish now VISH! DON’T GET HOOKED Now is the time to reassess your cybersecurity program and your Computer Security Incident Response Program (CSIRP). The alert below from the FBI and CISA details the VISH risk, but it is up to you to get protected! As always – please let us…

As was originally reported by the technology website Ars Technica and by several Albany, NY-based business and news publications such as Times Union, an Albany-based accounting firm recently suffered a ransomware attack most likely from the ransomware ring known as Maze. Maze and other ransomware…

This blog was written and produced by Michael Cross, Security Consultant II at FoxPointe Solutions. Looking to get in touch with Michael? Reach out today: mcross@foxpointesolutions.com. While the majority of America’s attention is undoubtedly currently focused on issues of race and the ongoing…

This blog was written and produced by Alex Santiago, Senior Penetration Tester at FoxPointe Solutions. Looking to get in touch with Alex? Reach out today: asantiago@foxpointesolutions.com. Our globe is linked through a fragile network that deals with healthcare, government, banking, and corporate…

COVID-19 has introduced many challenges to personal and professional lives. While we continue to adapt, we must remember to continue to perform sound security and privacy practices, including when it comes to vendor management. We look to vendors as trusted partners for many aspects of our supply…

This blog was written and produced by Michael Cross, Penetration Tester I at FoxPointe Solutions. Looking to get in touch with Michael? Reach out today: mcross@foxpointesolutions.com. The 2020 Global Security Report, issued by cybersecurity and managed service provider, Trustwave, is an annual…

This blog was written and produced by William Veit, MBA, Senior Security Consultant at FoxPointe Solutions. Looking to get in touch with William? Reach out today: wveit@foxpointesolutions.com. The toll on life in the United States and the world left by COVID-19 has been great. The impact on our…

This blog was written and produced by Courtney Nist, Senior Consultant, and Betul Yilmaz, Security Consultant II at FoxPointe Solutions. Both provide expertise to clients related to SOC 1 & 2 and HITRUST compliance. Looking to get in touch with Courtney or Betul? Reach out today: Courtney Nist,…

This article was written and produced by Brandon Agostinelli, FoxPointe Solutions. Looking to get in touch with Brandon? Reach out today: bagostinelli@foxpointesolutions.com. As part of our everyday lives, both in and out of the workplace, having a heightened awareness for information security is…

In all of my years in information technology and information security, I was trained to reduce the risks of a computer virus. Never in my wildest imagination did I think I would have to deal with risks related to a different type of virus – a biological one. While it may not be apparent at a…

This article was written and produced by Christopher Salone, CCSFP, MBA, FoxPointe Solutions. Looking to get in touch with Christopher? Reach out today: csalone@foxpointesolutions.com. This past December, the Office of the Comptroller of Currency (OCC) released the fall edition of its Semiannual…

This blog was written and produced by Betul Yilmaz CCSFP, FoxPointe Solutions. Looking to get in touch with Betul? Reach out today: byilmaz@foxpointesolutions.com. CrowdStrike, an industry-leading next generation anti-virus software as a service solution provider, recently published a report of its…

Investment risk management is ultimately about protecting and growing your assets over your time horizon. This involves addressing the aspects of your investment program that can be controlled and then minimizing your exposure to what cannot be controlled. Information Technology (IT) risk management…

The healthcare industry is one of the biggest targets of cybersecurity attacks, both domestically and internationally. With the amount of private data that these organizations have, including protected health information (PHI), healthcare organizations should learn from previous attacks and/or…

Two weeks ago, the United States launched an air strike targeted at the Iranian Military and subsequently led to the assassination of the Iranian military leader Qassem Soleimani. In a response from Esmail Ghaani, Soleimani’s replacement as the head of the Iranian Army, promised harsh revenge…

HITRUST puts on regular webinars to help educate individuals on the components, tools, and programs offered by the organization. The webinar I listened to on 12/11 covered HITRUST’s Third Party Risk Management (TPRM) Methodology and below is a quick overview. The TPRM Methodology is a formal…

Last week, the Department of the Treasury Financial Sector Cyber Information Group (CIG) and the Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) released a joint alert focused on notifying financial institutions that an increasing number of cyberattacks utilizing the…

On the heels of New York passing the Stop Hacks and Improve Electronic Data Security (SHIELD) Act in September 2019, the IRS issued a warning to tax preparers and accounting firms to ensure that they appropriately secure their customer data against the “evolving” and…

Recently, HITRUST established a new quality assurance (QA) subcommittee of its Board of Directors and introduced several new assurance advisories. These updates impact Certified Common Security Framework Practitioners (CCSFP), individuals who have completed and maintained training and certification…

In the not so distant past, the threat of a person or people stealing money or assets from your business was limited to a lack of physical security or a malicious employee. Businesses utilized safes, video surveillance systems, internal controls and audits to keep their...