Blog

CCPA Update: 4 Things to Know About the AG’s Proposed Regulations

October 31, 2019/0 Comments/in Blog /by Ashlyn Burgett

On October 10, 2019, the California Attorney General released the much-anticipated California Consumer Privacy Act (CCPA) proposed regulations – providing some clarity to the strict data privacy law. The proposed regulations were divided into four key areas: notices to consumers, consumer requests, verification requirements, and special considerations for minors. What do you need to know […]

Consequences of XSS Attacks at Healthcare Organizations

Dangers of XSS Attacks at Healthcare Organizations

October 30, 2019/0 Comments/in Blog /by Jenna Kersten

In October 2019, Citizen Times reported that Mission Health, North Carolina’s sixth-largest health system and HCA Healthcare’s North Carolina Division, had disclosed a data breach caused by a cross-site scripting (XSS) attack. This attack, which injected malicious scripts into Mission Health’s e-commerce web application, wasn’t found for three years. Fortunately, the e-commerce site didn’t impact […]

HITRUST Update: HITRUST CSF® v9.3 Release

October 29, 2019/0 Comments/in Blog /by Sarah Harvey

HITRUST®, a the leader in information security and privacy risk management and compliance programs, has announced a much-anticipated update to the HITRUST CSF in an effort to remain one of the leading data protection standards. HITRUST CSF v9.3 adds new privacy and security standards and updates six others existing within the certifiable framework. These changes […]

Best Practices for Privilege Management in AWS

October 25, 2019/0 Comments/in Blog /by Jenna Kersten

Could what happened at Capital One happen at your organization? That depends on your commitment to cloud security. This breach could happen to any organization that’s not educated on AWS vulnerabilities and best practices. We’ve talked about how security misconfigurations played a role in Capital One’s breach, but now let’s discuss how privilege management contributed […]

Stages of Penetration Testing According to PTES

October 24, 2019/0 Comments/in Blog, Uncategorized /by Sarah Harvey

What is PTES? The Penetration Testing Execution Standard, or PTES, is a standard that was developed and continues to be enhanced by a group of information security experts from various industries. PTES provides a minimum baseline for what is required of a penetration test, expanding from initial communication between client and tester to what a […]