63 articles · Security & Resilience · page 4 of 4
Articles
Week of 20 April 2020
Zoom 5.0 fixed the vendor layer; configuration and records stayed yours
Zoom 5.0, released in April 2020, fixed real problems in its own product. For banks, hospitals and agencies, the bigger risks lived in two places no vendor could fix for them: how the tool was set up, and what its meetings left behind.
Week of 10 February 2020
What the Equifax indictment changed for banks, and what it did not
In 2020, the US charged four Chinese military officers over the Equifax breach. Knowing who did it settled an old question. For banks, it changed little that matters day to day: the data stays exposed, the door was ordinary, and the blame stays home.
Week of 13 January 2020
Why a Windows crypto patch was an asset inventory test
CISA gave agencies ten business days to fix a flaw in how Windows checks digital identities, on the very day Windows 7 support ended. Installing the fix was easy. Knowing which systems needed it, who owned them and how to prove it was hard.