November 2021 Phishing Webinar
Last week we held a webinar on phishing and other security topics. This was essentially a refresh of the 2019 webinar we did, with two specific goals in mind:Shorter length - I
An SEC warning about cybersecurity
Eight firms had a bunch of email accounts get hacked because of failures in their cybersecurity programs. According to the SEC, what did they do wrong?
Why all these security things matter
I recently went through a (very minor) situation that reminded me why we go through the trouble of setting up all of these "security things" - things like a password manager, unique passwords
Today is a good day to not be an Exchange administrator
A few years ago, we migrated email from an "on-premises" Exchange server to Microsoft's cloud email service, Exchange Online (part of their Microsoft 365 suite of SaaS applications, formerly called Office 365). In
Maintaining public files with SharePoint
How we use SharePoint Online to maintain public files on our CDN
Some thoughts about the Twitter hack
EDIT 2020-08-03: It looks like the Bitcoin scam was conducted by three younger people (one is a minor) after a long period of reconnaissance and successful social engineering attacks against internal Twitter employees.
Embedded images that appear in Gmail using Microsoft Graph
We just finished dealing with some new regulatory requirements (Regulation Best Interest and Form CRS, if you're curious). Among other things, we now send an automated email (containing a link to Form CRS)
Why we use Microsoft Teams instead of Zoom
When the COVID-19 pandemic hit earlier this year, a huge chunk of the world had to figure out how to work from home - and what software to use for virtual meetings and
Restrictions, cybersecurity, and "the new normal"
I've heard the phrase "new normal" a lot in the last two months. I'm sure you have too. Everyone is trying to figure out what "normal" will look like in the future and
Using Azure and Cloudflare to host our risk questionnaire for $0.01 per month.
When used appropriately, serverless is pretty cool.
Beware of telephone scams (and today is Slam the Scam Day?)
I got an email update from CISA yesterday telling me that apparently today is "Slam the Scam" Day. You can read the update in its entirety here. This is an excerpt:In association
SEM's New Risk Questionnaire
SEM developed a new risk questionnaire - check it out!