My TechDecisions

Zachary Comeau

Fortinet Vulnerability, Fortigate

Critical Vulnerability in Java Logging Library Log4j Is Being Actively Exploited

December 10, 2021 Zachary Comeau Leave a Comment

Security researchers have discovered a new easy-to-exploit zero-day vulnerability in the ubiquitous Java logging library Apache Log4j 2 that could give attackers the ability to execute unauthenticated remote code execution. The U.S. Cybersecurity and Infrastructure Security Agency, along with dozens of cybersecurity providers, have issued alerts and advisories of the vulnerability, CVE-2021-44228, which they warn […]

Read More
IoT Security

Just 42% Of Security Pros Can Detect IoT, OT Vulnerabilities

December 9, 2021 Zachary Comeau Leave a Comment

According to a new Microsoft study in conjunction with the Ponemon Institute, the Internet of Things and new innovations in operational technology is becoming critical for business, but simultaneously increasing an organization’s cyber risk. Researchers surveyed more than 600 IT, cybersecurity and OT security experts across the U.S., and found that many organizations are making […]

Read More
Cloud Mistakes, Gartner

The Benefits of Cloud-based AV Management

December 8, 2021 Zee Hakimoglu Leave a Comment

The events of the last few years have accelerated the business world’s embrace of cloud technologies and services, with tasks such as virtual machines, storage, directories, data bases, email and video conferencing now commonly running on cloud-based platforms that simplify internal IT management. While the platforms for these tasks are largely operated by major third-party […]

Read More
Zoom meeting

Zoom Meetings Are Still Too Long, 2021 Data Shows

December 7, 2021 Zachary Comeau Leave a Comment

As we’re nearly done with year two of remote and hybrid work, videoconferencing and collaboration tools like Zoom are still huge parts of any organization’s IT strategy. Most end users are now used to this not-so-new idea of virtual collaboration, and these cloud-based service providers like Zoom are now gathering loads of data on how […]

Read More
Russia Cyberattack

Here’s What The SolarWinds Hackers Have Been Up To

December 7, 2021 Zachary Comeau Leave a Comment

It has been nearly a year since a coalition of IT and cybersecurity providers discovered a highly sophisticated Russian-aligned hacking campaign that most notably leveraged IT management software from SolarWinds to conduct espionage on U.S. agencies, tech companies and other high-value organizations. The IT industry has learned a lot since then, including the increasing skill […]

Read More
Password Management

More Than 90% Of IT Leaders Reuse Passwords, Survey Shows

December 6, 2021 Zachary Comeau Leave a Comment

Password security and good credential hygiene are some of the most important components of any organization’s cybersecurity posture, but many are still engaging in risky password practices that threaten their organization’s network security. That’s even true for IT, as 92% of IT decision makers reported reusing passwords across multiple sites—even as cyberattacks escalate due to […]

Read More
AWS Training

AWS Announces New Managed WAN Service

December 3, 2021 Zachary Comeau Leave a Comment

Amazon Web Services at re:Invent has announced a new managed wide area network (WAN) service designed for enterprises to build, manage and monitor a unified global network that connects cloud and on-premises environments using via AWS. According to the company, AWS Cloud WAN provides a central dashboard that enterprises can use to connect their on-premises […]

Read More

CrowdStrike, AWS, Presido Launch Ransomware Mitigation Kit

December 1, 2021 Zachary Comeau Leave a Comment

AWS and cybersecurity firms CrowdStrike and Presidio are launching the Ransomware Mitigation Kit, a new platform designed to defend against ransomware and sophisticated cyberattacks through the security capabilities of those companies. Specifically, the Ransomware Mitigation Kit helps organizations identify and protect against cyber threats, detect attacks, respond to breaches and recover all critical data and […]

Read More