Tag Archives: supply chain attack

Increased Ransomware Threat in Wake of Russia Invasion of Ukraine — Shawn Tuma Discusses

With the Russian invasion of Ukraine well underway, cyber warfare and increased ransomware activity are imminent. Shawn Tuma was a guest on KNX News to discuss the implications for Americans from the government level down to the mom and pop businesses. Listen to the interview HERE. A senior FBI official has asked businesses and local …

Continue reading “Increased Ransomware Threat in Wake of Russia Invasion of Ukraine — Shawn Tuma Discusses”

StopRansomware.gov – the U.S. Government’s One-Stop Resource for Ransomware

The U.S. Government has launched a new resource to help combat the ransomware pandemic. Below is the relevant information it has shared: The U.S. Government launched a new website to help public and private organizations defend against the rise in ransomware cases. StopRansomware.gov is a whole-of-government approach that gives one central location for ransomware resources …

Continue reading “StopRansomware.gov – the U.S. Government’s One-Stop Resource for Ransomware”

Shawn Tuma Discusses The Rise of Cybersecurity Problems on KLIF Morning News

I was a guest on KLIF’s Morning News to discuss the rise of cybersecurity problems. Here is a direct link to the audio.

Shawn Tuma Discusses Kaseya Ransomware Attack

I was a guest on CW33’s Morning After to discuss the recent Kaseya ransomware attack. https://cw33.com/morning-after/ransomware-attacks-on-the-rise/

Ransomware Attacks! The 5 Best Practices the White House Urges all Businesses to Take to Mitigate Them

The threat of ransomware attacks against all American businesses is so great that on June 2, 2021, the White House issued a memo to all corporate executives and business leaders with the subject “What We Urge You To Do To Protect Against The Threat of Ransomware.” This is the first time such a memo has ever been …

Continue reading “Ransomware Attacks! The 5 Best Practices the White House Urges all Businesses to Take to Mitigate Them”

We need more humility in cybersecurity

We need more humility in cybersecurity. Let me explain … I was scrolling through LinkedIn and came across a comment on a post about FireEye from my friend Raf Los that reminded me of this issue and a webinar I did with SecureWorld several months back. In the webinar, I was asked what is the …

Continue reading “We need more humility in cybersecurity”

The Art of Cybersecurity: How Sun Tzu Masterminded the FireEye / US Agencies / SolarWinds Cyberattacks

Sun Tzu taught that, when it comes to the art of cybersecurity, you must be wary of your business partners and other third parties. Why?Unless you are living under a rock, you should have heard that FireEye–perhaps the preeminent cybersecurity firm on the face of the planet–was the victim of a successful cyberattack. So were …

Continue reading “The Art of Cybersecurity: How Sun Tzu Masterminded the FireEye / US Agencies / SolarWinds Cyberattacks”

5 Key Things In-House Counsel Can Do to Help Their Businesses’ Cybersecurity

Cybersecurity is a team sport and many people within a business must work together to help effectively manage their businesses’ cyber risk. In-house counsel plays a critical role in this process. A recent Law360 article (subscription required) identified the following key things they can do: Develop, implement, and table-top test an incident response plan Advise …

Continue reading “5 Key Things In-House Counsel Can Do to Help Their Businesses’ Cybersecurity”

Facebook Suspends 200 Apps for Data Privacy Concerns — What Does This Really Mean?

Facebook suspended 200 apps due to data privacy concerns, which it revealed earlier this week. Shawn Tuma explains some of the key points about this in the following television and radio interviews: CW33 Morning Dose talks to cybersecurity lawyer, Shawn Tuma, about Facebook suspending 200 apps https://youtu.be/KW9iMg7EcOs Facebook suspends 200 apps following Cambridge Analytica revelations, what …

Continue reading “Facebook Suspends 200 Apps for Data Privacy Concerns — What Does This Really Mean?”

Hacked F-35 Fighter Info from Australian Contractor Exemplifies Third-Party Risk in Cybersecurity

See: China hacked a Navy contractor and secured a trove of highly sensitive data on submarine warfare Third-party risk (or nth-party risk) is a hot topic in cybersecurity. While it can mean many things, at its core third-party risk describes a situation in which an organization that does a good job of protecting its own …

Continue reading “Hacked F-35 Fighter Info from Australian Contractor Exemplifies Third-Party Risk in Cybersecurity”