Sue Poremba

2015 Governance, Risk Management and Compliance Trends and Predictions Cybersecurity has come to the White House. President Obama apparently plans to present some detailed security-related initiatives during his State of the Union address next week. As a serious State of the Union watcher, I recall cybersecurity being addressed in the past, but it seems like […]

Mobile Security 2015: The Enterprise at Risk I expect that we are going to hear a lot more about mobile payment options this coming year, and I think it is a logical progression in technology. People are using their smartphones for all sorts of transactions now – boarding passes, coupons at the grocery store, and […]

Security Trends 2015: Developments in Exploits and Evasion With retail data breaches, long-hidden vulnerabilities in software being discovered, and the Sony hack’s spotlight on insider threats, the security risks involving social media have taken a backseat. In fact, I can’t remember the last time I thought much about social media-related threats over the past months. […]

Six Data Breach Predictions for 2015 I’m back at my desk after a relaxing holiday vacation. It was a pretty quiet time for cybersecurity, too. The only really disturbing news I saw during my holiday involved a data breach at Chick-fil-A and the new theory that the Sony breach likely wasn’t done by North Korea […]

How to Avoid a Data Breach: Five Tips for Retailers I would be willing to bet that every person who reads this blog has been the victim of social engineering. You might not have realized you were a victim or it might have been a long time ago, but seriously, who among us has not […]

Six Data Breach Predictions for 2015 The Target breach was caused by a third-party vendor whose employees opened a phishing email. A service provider for AT&T was responsible for that company’s data breach revealed this summer. And the massive Home Depot breach happened because the hackers used a third-party vendor’s credentials to get into the […]

Six Data Breach Predictions for 2015 As I’ve mentioned in a previous post, this is the time of the year when security folks like to share their predictions on what may happen next year. Here is a prediction that intrigued me. It comes from Benjamin Caudill, CEO and principal consultant at Rhino Security Labs, who […]

In a November article on ZDNet, Larry Seltzer asked the question, “Why are there more browser vulnerabilities?” Granted, he was looking primarily at the incredibly high number of vulnerabilities found in Microsoft’s Internet Explorer over the past year. According to his report, Firefox is unimportant within the browser landscape, Google’s Chrome vulnerability records are murky, […]

Six Data Breach Predictions for 2015 Almost all businesses need temporary workers at some time or another, but December is an especially popular time to bring in extra help. Of course, if you are hiring temporary employees, you will likely need to set them up with access to your company network, maybe give them an […]

Five Myths Holding Your Security Program Back A recent court decision about the Target breach should have businesses of all sizes taking note. A Minnesota judge found Target negligent in the breach and said it can be held responsible for financial damages. Infosecurity Magazine quoted the judge: “Although the third-party hackers’ activities caused harm, Target […]

How to Avoid a Data Breach: Five Tips for Retailers Is the recent Sony attack unprecedented? I guess it all depends on who you listen to. Network World, for instance, quoted Kevin Mandia, COO of FireEye and formerly CEO of Mandiant: This attack is unprecedented in nature. The malware was undetectable by industry standard antivirus […]

Top Five Cloud Trends Expected in 2015 It’s that time of year—security experts are looking ahead to the coming months and discussing their predictions. I have seen a number of predictions that I believe deserve further discussion, so over the month of December, I’ll be looking at some of those issues more in depth. Today, […]