Purple Perimeter Security

06/18/2025

Great IT includes Cybersecurity.

https://www.linkedin.com/posts/carolannjacobs_ive-a-few-pain-points-that-drive-me-crazy-activity-7341098273153138689-fMPl

hashtag hashtag hashtag hashtag hashtag hashtag hashtag hashtag hashtag hashtag hashtag

Bryan Finster brings up a great point and highlights one of my frustrations with the structure of most and groups. Back in the day, I had to bake my own tools into the dev pipeline because the security tools simply didn’t exist. Today, they do exist and are much better than they...

06/02/2025

Yeah- I said it... most vulnerability management programs are a waste of time and money.

I'm going to say something controversial—though most of our IT partners already know it: 👉 Most Vulnerability Management programs are a waste of time and resources. Cybersecurity’s myopic focus on CVEs and CWEs often ignores the most important business risks. We pour effort into “vulner...

03/24/2025

"In 2023, hackers exposed the personal data of nearly 7 million 23andMe customers over a five-month period, dealing a major blow to the company's reputation and compounding its growth problems. The breach raised alarm among customers concerned about their privacy and how DNA-testing firms handle their data."

Data breaches may contribute to the end of your business.

The ship on your privacy has probably already sailed, but you might want to delete your 23andme profile. The "assets" they are selling more than likely include your test results.

23andMe on Sunday filed for bankruptcy in the U.S. after struggling with weak demand for its ancestry testing kits that once featured in Oprah Winfrey's annual list of favorite things, and following a 2023 data breach that damaged its reputation.

03/21/2025

Business risk is the driver for most organizations. If you're a small or medium sized business and think your size hides you from predators, it doesn't. With today's advanced tools and bots, it is too easy for well funded criminals to find and hack.

03/19/2025

Amazon is making a change to their Alexa devices where they are taking away the option of voice recordings to be stored locally. What this means is that everything you say in front of your smart device will be sent to Amazon. I've been in doctor's offices with Alexa devices in the exam room. This was a practice I objected to before, but now, I would consider this to be an extreme violation of privacy and one that should be disclosed to patients. The better solution is to go old school and use something that isn't voice activated.

03/19/2025

Happy to sponsor this fun event. This should be a lot of fun for the girls and audience alike.

03/19/2025

03/18/2025

One of the issues I have with how many of us in communicate is that we overcomplicate the message. This article is well done in that it communicates what's going on and what action is needed. But I'll do you one better.

1) Turn on 2-Factor or Multi-factor authentication on everything that's important. If you have the choice of using an authenticator app on your smartphone, do that over getting the text or email
2) Use passkeys anywhere you can
3) Get a password manager such as 1Password or BitWarden and put it on all of your devices.

Faced with major ransomware attacks affecting critical industries, cybersecurity officials are asking companies and individuals to step up their safety practices.

02/28/2025

Had an excellent time at the Ski and Snowboard Cybersecurity Conference. Appreciate the warm welcome and the connection.

02/26/2025

I am stoked to be a speaker at the SKI & SNOWBOARD CYBERSECURITY CONFERENCE in Barrie, Ontario tomorrow. We are going to be discussing lessons learned, and hopefully no one will be a lesson learned when we head out to the ski hill. Link below to the announcement.

Side note: Big shout out to Hopi's Life Adventures for getting my skiing in shape enough to where a) other people aren't going to be tortured skiing with me and b) where I don't embarrass myself skiing in "public."

02/17/2025

The state of our Federal Government's Cybersecurity.

"What makes this situation unprecedented isn’t just the scope, but also the method of attack. Foreign adversaries typically spend years attempting to pe*****te government systems such as these, using stealth to avoid being seen and carefully hiding any tells or tracks."

"In this case, external operators with limited experience and minimal oversight are doing their work in plain sight and under massive public scrutiny: gaining the highest levels of administrative access and making changes to the United States’ most sensitive networks, potentially introducing new security vulnerabilities in the process."

"But the most alarming aspect isn’t just the access being granted. It’s the systematic dismantling of security measures that would detect and prevent misuse—including standard incident response protocols, auditing, and change-tracking mechanisms"

Link to the entire article in the comments.

02/06/2025

I about fell over when George Kamide texted me with the news that our talk had been selected for the RSA conference this year. To say that I am thrilled to present and share the stage with George is an understatement.