An updated cybersecurity law that the IT organization (along with other college/university departments) will need to continue to integrate into its compliance programs, policies, and controls is the recent changes to New York’s General Business Law 899-aa and 899-bb (aka SHIELD Act). The…

This article was written and produced by Michael Cross, Security Consultant, FoxPointe Solutions. Looking to get in touch with Michael? Reach out today: mcross@foxpointesolutions.com. With many still reeling from the aftermath of the SolarWinds hack, enough dust has settled that we’ve started…

This post originally appeared on Security Magazine. Ensuring the confidentiality, integrity, and availability of information must be at the forefront of any business in today’s environment. While many think they are up to this task, there’s a lot that goes into protecting data.…

The Department of Homeland Security has issued this emergency directive. “DHS DIRECTIVE 21-01 - Treat all hosts monitored by the SolarWinds Orion monitoring software as compromised by threat actors and assume that further persistence mechanisms have been deployed." Click here to visit the…

FoxPointe Solutions has been closely following the major data breach that was recently announced involving Cit0day, as well as the subsequent analyses to accurately identify the true risk levels that could be associated with it. Following the emergence of updated forensic reports, it has been…

Like almost every organization doing business in 2020, HITRUST® has had to adopt some changes due to the COVID-19 Pandemic. As the year progressed and we were able to see the long-term impact that COVID-19 has caused, we began to see changes in guidelines and options for HITRUST-related…

This article was written and produced by Brandon Agostinelli, Security Consultant, FoxPointe Solutions. Looking to get in touch with Brandon? Reach out today: bagostinelli@foxpointesolutions.com. Credible information regarding a well-known Russian cybercriminal organization plotting a mass…

This article was written and produced by William Veit, Senior Security Consultant, FoxPointe Solutions. Looking to get in touch with William? Reach out today: wveit@foxpointesolutions.com. From the nation’s shift to a remotely working culture to the upcoming elections we must maintain our…

This article was written and produced by David Scudo, Security Consultant, FoxPointe Solutions. Looking to get in touch with David? Reach out today: dscudo@foxpointesolutions.com. In 2020, protecting an organization from cyber-attacks means that you need a plan to combat ransomware. Ransomware…

Every October since 2004 marks National Cybersecurity Awareness Month. This month raises awareness about the importance of cybersecurity and how to protect yourself from cybercrime. Below are the top 5 things you can do to safeguard yourself: Do not ignore operating system or security patch update…

Phish - SpearPhish now VISH! DON’T GET HOOKED Now is the time to reassess your cybersecurity program and your Computer Security Incident Response Program (CSIRP). The alert below from the FBI and CISA details the VISH risk, but it is up to you to get protected! As always – please let us…

As was originally reported by the technology website Ars Technica and by several Albany, NY-based business and news publications such as Times Union, an Albany-based accounting firm recently suffered a ransomware attack most likely from the ransomware ring known as Maze. Maze and other ransomware…

This blog was written and produced by Michael Cross, Security Consultant II at FoxPointe Solutions. Looking to get in touch with Michael? Reach out today: mcross@foxpointesolutions.com. While the majority of America’s attention is undoubtedly currently focused on issues of race and the ongoing…

This blog was written and produced by Alex Santiago, Senior Penetration Tester at FoxPointe Solutions. Looking to get in touch with Alex? Reach out today: asantiago@foxpointesolutions.com. Our globe is linked through a fragile network that deals with healthcare, government, banking, and corporate…

COVID-19 has introduced many challenges to personal and professional lives. While we continue to adapt, we must remember to continue to perform sound security and privacy practices, including when it comes to vendor management. We look to vendors as trusted partners for many aspects of our supply…

This blog was written and produced by Michael Cross, Penetration Tester I at FoxPointe Solutions. Looking to get in touch with Michael? Reach out today: mcross@foxpointesolutions.com. The 2020 Global Security Report, issued by cybersecurity and managed service provider, Trustwave, is an annual…

This blog was written and produced by William Veit, MBA, Senior Security Consultant at FoxPointe Solutions. Looking to get in touch with William? Reach out today: wveit@foxpointesolutions.com. The toll on life in the United States and the world left by COVID-19 has been great. The impact on our…

This blog was written and produced by Courtney Nist, Senior Consultant, and Betul Yilmaz, Security Consultant II at FoxPointe Solutions. Both provide expertise to clients related to SOC 1 & 2 and HITRUST compliance. Looking to get in touch with Courtney or Betul? Reach out today: Courtney Nist,…

This blog was written and produced by Betul Yilmaz CCSFP, FoxPointe Solutions. Looking to get in touch with Betul? Reach out today: byilmaz@foxpointesolutions.com. CrowdStrike, an industry-leading next generation anti-virus software as a service solution provider, recently published a report of its…

Investment risk management is ultimately about protecting and growing your assets over your time horizon. This involves addressing the aspects of your investment program that can be controlled and then minimizing your exposure to what cannot be controlled. Information Technology (IT) risk management…