The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, RetailFinancial Services, Healthcare, Higher Education, Payments, Government, Restaurants, and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.


  • Please make sure you have offline backups

    June 11, 2014, Adam Sarote, Director, Coalfire

    This ransomware has hit not only personal computers, but also organizations, including a town in New Hampshire. This particular attack was carried out when an employee opened a seemingly legitimate email attachment, once again reminding us of the ever-present danger of social engineering. Read more
  • The Lesson of eBay

    June 02, 2014, Rick Dakin, CEO, Co-founder and Chief Security Strategist

    After every major cyber breach, security professionals are asked about the lessons we can learn from them. While the technical details of the eBay attack aren’t yet public, we can already learn lessons about from company’s public statements and its communications to its customers.

    Read more
  • What are Insurers really covering?

    May 27, 2014, Rick Dakin, CEO, Co-founder and Chief Security Strategist

    Across the country, executives and their boards saw the data breaches that occurred at large, well-run retailers and immediately began asking the right questions about their own systems and protections. The challenge for the insurance industry is that the plan for many of these companies seems to be transferring as much risk as possible to insurers, who may not have a full and complete understanding of what they are covering.

    Read more
  • FedRAMP deadline- Industry and Agency Days

    May 15, 2014, Rob Barnes, Director, Federal Practice

    The FedRAMP PMO sent out a notification that they are holding a FedRAMP Industry Day on June 4, 2014 and an Agency Day on June 10, 2014. Items to discuss include the June 5, 2014 deadline, NIST SP 800-53 rev 4 transitions and the 3PAO privitization progress to name a few. We wanted to republish the notification for those that may not have seen the notification.

    Read more
  • Target Kill Chain Analysis

    May 07, 2014, Rick Dakin, CEO, Co-founder and Chief Security Strategist

    Last week, I talked with Wall Street Journal reporter Ben DiPietro about the persistent communications gap between the data center and the board room when it comes to recognizing and tackling security threats: In almost every breach situation after his company completes a forensic analysis, Mr. Dakin said the chief executive or chief financial officer pulls him aside and says if he had better information earlier he would have made smarter and quicker decisions. “They are intimating that their tech teams are just not talking about cyber risk in terms of business impact.”

    But when he speaks with the IT people, Mr. Dakin said he gets a different story, “that my boss just doesn’t get it and we are stuck here with outdated tools, outdated systems and we are not prepared to defend ourselves.”

    Read more
  • Displaying results 201-205 (of 313)
     |<  <  37 - 38 - 39 - 40 - 41 - 42 - 43 - 44 - 45 - 46  >  >| 

Recent Posts

Post Topics

Archives

Tags