Reporting LIVE from the HIMSS 2015 Cybersecurity Command Center
April 30, 2015, Andrew Hicks, Managing Principal, Coalfire
Well, it’s not exactly live anymore but it certainly was worth tweeting live from the brand new Cybersecurity Command Center (CCC) at HIMSS 2015 in Chicago a couple weeks ago given all the excitement. The CCC was the place to be at HIMSS this year with standing room only at the educational sessions. HIMSS staff members were busy adding rows of seating to the session area to fit all the attendees who were clamoring for valuable information delivered by numerous speakers from the FBI to the Secret Service to cyber risk subject matter experts.
Upcoming Podcast: Python security projects
April 28, 2015, Mike Weber, Vice President, Coalfire Labs
Join Coalfire penetration tester Dan McInerney on Thursday April 30th at 6:00pm ET on the Security Weekly Podcast. Read more
Would Coalfire Clients benefit from membership with the PCAOB?
April 28, 2015, Leslie Kaniecki, CPA/CGMA
Coalfire Controls, LLC (Coalfire) is a registered Certified Public Accounting (CPA) firm registered with the American Institute of Certified Public Accountants (AICPA) and the Colorado State Board of Accountancy, as required to issue Service Organization Control (SOC) attestation reports in accordance with AICPA Statements on Standards for Attestations and Engagements (SSAE). However, Coalfire clients or prospects might wonder why Coalfire is not also registered with the Public Company Accounting Oversight Board (PCAOB). It raises the question: would Coalfire’s clients benefit from the firm’s membership with the PCAOB?
PCI DSS version 3.1 released!
April 15, 2015, Matt Getzelman, PCI Practice Director
As expected, a “minor” revision to the PCI DSS 3.0 standard (now version 3.1) was released by the PCI SSC today to address the vulnerabilities exposed by the POODLE and BEAST browser attacks. PCI DSS 3.1 primarily addresses the insecure use of SSL as an encryption protocol within a Cardholder Data Environment (CDE). In response, the SSC has updated PCI DSS requirements 2.2.3, 2.3 and 4.1 to remove any references that cite SSL 3.0 and early versions of TLS 1.0 as examples of strong cryptography.
Where is your social security number today?
April 14, 2015, Leslie Kaniecki, CPA/CGMA
As April 15 approaches, the “water cooler” talk revolves around all types of topics related to the tax season. However, due to the overwhelming number of security breaches reported this past year, several individuals are finding that fraudulent tax filings were created with voluntarily provided personal information. You are able to prevent this.