Finding and Mitigating Your Vulnerabilities Through OWASP

by Sarah Harvey / December 15, 2022

What is OWASP? The Open Web Application Security Project, or OWASP, is an open, online community that provides free tools and documentation to anyone interested in improving insecure software and in developing, operating, and maintaining secure software. OWASP is a not-for-profit organization, with no affiliation to any company, making it a popular methodology to rely on. OWASP’s core values are: open, innovation, global, and integrity. OWASP prides itself on being…

Pen Testing After a Significant Change

by Sarah Harvey / December 15, 2022

Penetration testing, or pen testing, is a proactive way that organizations can improve their security hygiene and assure their clients that the products and services they provide are as secure as possible. While many enterprises rely on internal audit teams to test the security of their networks, applications, and devices, undergoing third-party penetration testing is a surefire way to identify overlooked or unknown vulnerabilities, find remediation strategies and guidance, and…

Avoiding a Pen Testing Mishap: What Are You Really Paying For?

by Sarah Harvey / December 15, 2022

Last month, the Iowa Judicial Branch made an investment in their security efforts by partnering with an information security firm to perform penetration testing on their organization. But…it appears they signed up for more than they bargained for. Why? The two ethical hackers working the job were arrested after they successfully gained unauthorized access to a Dallas County courthouse. What went wrong? Why were these ethical hackers arrested? Could this…

Breach Report 2019 – September

by Sarah Harvey / December 15, 2022

Every month there is headline after headline reporting about a new data breach. Whether it’s a ransomware attack, a negligent employee opening a phishing email, or a state-sponsored attack, millions of individuals are impacted by hackers and security incidents on a regular basis. Let’s take a look at some of the top data breaches that occurred during September and the lessons we can learn from them. Foxit Software What Happened?…

4 Ways to Minimize Risk in IoT Devices

by Sarah Harvey / June 14, 2023

Internet of Things (IoT) technology makes daily tasks easier. From smart home devices to entire smart cities, these interconnected devices are changing the way we interact, do business, and live our lives. But with any new technology implementation, there are risks involved, and this especially rings true for IoT. Because the demand for IoT devices is projected to rapidly increase -- Gartner predicts that the number of IoT devices in…