Knowledge from our cybersecurity and risk management experts

Where the Holes Aren't

Posted by ProCircular Team on Jul 16, 2019 11:19:00 AM

Let’s just say there’s a lot to learn from history without quoting Sun Tzu… again. Especially in information and cybersecurity. While much of the birth of cyber realm revolves around the military - many of the members of our community are current or former members of various armed forces - many of us still refer to the military influence of old when working through our business planning and various actions revolving around cybersecurity. A great example is the common use or reference to Boyd’s OODA (Observe–Orient–Decide–Act) loop flow chart in both attack and defensive security applications. In sticking to a military theme, I want to touch on a story from World War II and its applicability in today’s modern cybersecurity world.

0 Comments Click here to read/write comments

Topics: Cybersecurity, Network Security, Information Security, Penetration Testing

Incident Response Planning 101

Posted by Brandon Blankenship on Jun 27, 2019 4:42:15 PM

Cybersecurity breaches are becoming more and more prevalent. In fact, it’s been estimated that there were almost 5 billion records breached in 2018. Many organizations spend thousands of dollars on security breach prevention tools, but won’t take the time to create a formal process of identifying, responding to, and communicating an incident.

0 Comments Click here to read/write comments

Topics: Cybersecurity, Data Breach, Data Security, Incident Response, security incident handling, security incident response

The Importance of Password Entropy

Posted by ProCircular Team on May 30, 2019 12:12:30 PM

If you’re reading this, it’s very likely that you know how to use the internet. It’s also likely you’ve made an account on the internet somewhere. When you created your last account, what kind of requirements were you forced to use? For a number of web services, these requirements still follow the 2003 NIST SP 800-63 Appendix A standards that recommend an 8-character minimum, containing one uppercase, one lowercase, one digit, and one special character (Ex: Procircular1!).

0 Comments Click here to read/write comments

Topics: Cybersecurity, Data Protection, Personal Privacy, hacking, NIST, Passwords

Network Segmentation and Why It Matters

Posted by ProCircular Team on May 20, 2019 11:37:00 AM

Let’s take a look at an often under-utilized aspect of network topology in the small to medium business realm: that’s right, a networking article. But before you run off, what if I told you you could increase performance and lower your production down time with equipment you (might) already have!?

0 Comments Click here to read/write comments

Topics: Cybersecurity, Network Security, consumer security, Data Security, Data Protection, security incident handling, cybersecurity plan

LLMNR & NBT-NS Spoofing

Posted by ProCircular Team on Apr 30, 2019 2:09:00 PM

During a penetration test, we’ve found that a common (and easy) way to gather credentials and gain an initial foothold on the client’s network is to perform a Man-in-the-Middle poisoning attack abusing LLMNR & NBT-NS. Depending on how active users are on the network, this attack can give an adversary valuable information almost immediately. Fortunately, with a little knowledge, this attack can be easily remediated.

What is LLMNR & NBT-NS?

0 Comments Click here to read/write comments

Topics: Cybersecurity, Network Security, Information Security, hacking

Educating your business on the importance of cybersecurity

Where the Holes Aren't

Incident Response Planning 101

The Importance of Password Entropy

Network Segmentation and Why It Matters

LLMNR & NBT-NS Spoofing

ProCircular is a Full-Service Information Security Firm

Recent Posts

Posts by Topic

Subscribe to Email Updates