Kyle David

New Hampshire throws a curveball: Are you ready for the NH Data Privacy Act? The New Hampshire Data Privacy Act (NHDPA) is here, and it brings some unique challenges for businesses across industries. Don't get caught off guard! LightBeam.ai dives deep into the NHDPA in our latest blog post: 👉 Key provisions you need to know 👉 What it means for your data management strategy 👉 Practical steps to ensure compliance Click here to get ahead of the curve: https://bit.ly/4dE3a6o #NHDPA #dataprivacy #compliance #cybersecurity

31

1 Comment

💥 $65M Settlement in Pennsylvania Healthcare Data Breach! 🔴A significant hack exposed the personal and medical data, including nude photos, of 135,000 patients and employees at Lehigh Valley Health Network. This led to a record $65M settlement. 🔴 In your opinion, How can healthcare providers enhance cybersecurity to prevent such breaches? 👉Share your ideas about that, please 💬 🙏 #Cybersecurity #DataBreach #PatientPrivacy #DataProtection #HealthcareSecurity #DigitalSafety #PrivacyMatters

30

1 Comment

Excellent panel discussion. Some highlights: 1. Build human error into your programs - people are going to make mistakes. We must plan with that expectation in mind. 2. Threats come from all over! Elena was on an indian restaurant site which had been compromised and it attempted to install malware on her device but it was blocked 3. AI will shrink the time from vulnerability discovery to a working POC. AI generated code can greatly increase speed. 4. Data stored by third parties should be encrypted so that a compromise of the third party (increasingly common) does not expose your data. #cybersecurity

1

A special legislative committee investigating Suffolk County's 2022 ransomware attack released their findings last week. The report found numerous shortcomings by the New York county's leadership. Among them were: 1. A lack of a CISO and overall coordination and oversight over the cybersecurity of the county. 2. Use of outdated technology, including firewalls. 3. Improperly configured technology, including firewalls. Perhaps most egregious among the findings was that county officials ignored a warning from the FBI months before the attack of suspicious activity detected in their systems. "During the attack, the hackers began encrypting county data and demanded a ransom. The county’s main website was unavailable for five months, 911 operations were temporarily disrupted and residents could not pay traffic tickets." The 2022 cyberattack is estimated to have cost the county $25 million dollars. Ironically, the county failed to update their systems and hire the proper personnel due in part to budget constraints. For more information, I've linked the committee's reports below as well as an article summarizing their findings. #cybersecurity #government #911 #ransomware

1

2 Comments

Email phishing attacks are getting more sophisticated, but protecting your business can be simple. Here are five tips to keep your inbox—and your business—secure: 🖱️ Think Before You Click: If an email looks suspicious, don’t click on any links or download attachments. Take a moment to verify the sender first. 🔐 Enable Multi-Factor Authentication (MFA): Adding an extra layer of security to your accounts makes it harder for hackers to gain access, even if they have your password. 🎓 Educate Your Team: Regular training on how to spot phishing emails can make all the difference. Awareness is your first line of defense. 💪🏼 Use Strong, Unique Passwords: Encourage your team to use complex passwords and update them regularly. Consider a password manager to keep things organized. 💾 Keep Software Updated: Regular updates ensure your security tools are equipped to handle the latest threats. Make it a priority to keep all software current. Taking these simple steps can go a long way in protecting your business from phishing attacks. Take the first step in securing your business today! Follow this link to Book a FREE cybersecurity consultation with us: https://www.oramca.com/ #OramCybersecurityAdvisors #CyberAttack #SlowComputer #CyberSecurity #ComputerBreach #DataBreach

10

1 Comment

“On June 13, 2024, the Rhode Island legislature passed the Rhode Island Data Transparency and Privacy Protection Act (SB 2500 / HB 7787). The act will now move to Governor Daniel McKee for consideration. Assuming the act becomes law, it will go into effect on January 1, 2026.” https://gag.gl/Iw9AP9 Kiteworks helps organizations comply with data privacy regulations like GDPR and CCPA by enabling visibility into where customer data is stored, who has access to it, and what's being done with it. Please visit our website to learn more. #cybersecurity #kiteworks #cyberattack #databreach #dataprotection #datasecurity

2

Bob Zukis, as always, thank you and the Digital Directors Network team for being on top of these breaking (and obvious/inevitable) developments about C-suite responsibility and board oversight of cybersecurity. Senator Wyden's letter to the FTC and SEC underscores these responsibility and oversight failures. To me, some of the most striking comments are: 😷 "I write to request that your agencies investigate UnitedHealth Group’s (UHG) negligent cybersecurity practices, which caused substantial harm to consumers, investors, the health care industry, and U.S. national security." 😷 "This incident and the harm that it caused was, like so many other security breaches, completely preventable and the direct result of corporate negligence." 😷 "The consequences of UHG’s apparent decision to waive its MFA policy for servers running older software are now painfully clear. But UHG’s leadership should have known, long before the incident, that this was a bad idea." 😷 "While UHG has not yet made public the full details of this incident, UHG’s failure to require MFA is unlikely to be the company’s only cybersecurity lapse." 😷 "Such a failure to adopt a resilient technology architecture [cloud] demonstrates a total failure by the company to plan for and mitigate the clear, obvious risk posed by ransomware." 😷 "One likely reason for UHG’s negligence, and the company’s failure to adopt industry-standard cyber defenses, is that the company’s top cybersecurity official appears to be unqualified for the job. Steven Martin, UHG’s chief information security officer (CISO), had not worked in a fulltime cybersecurity role before he was elevated to the top cybersecurity position at UHG in June, 2023, after working in other roles at UHG and Change Healthcare." 😷 "Just as a heart surgeon should not be hired to perform brain surgery, the head of cybersecurity for the largest health care company in the world should not be someone’s first cybersecurity job." 😷 "Due to his apparent lack of prior experience in cybersecurity, it would be unfair to scapegoat Mr. Martin for UHG’s cybersecurity lapses. Instead, UHG’s CEO and the company’s board of directors should be held responsible for elevating someone without the necessary experience to such an important role in the company, as well as for the company’s failure to adopt basic cyber defenses." 😷 "One likely explanation for this board-level oversight failure is that none of the board members have any meaningful cybersecurity expertise." 😷 "The cyberattack against UHG could have been prevented had UHG followed industry best practices."

4

1 Comment

Join our Youtube channel to talk about Pittsburgh Digital Firm LLC products & services. https://lnkd.in/gBkQtMHY We are going to keep updating information about Pittsburgh Digital Firm LLC Research and Development. #pittfirm #blockchain #bitcoin #pittsburgh #research

1

Protect against phishing attacks with best practices from CMIT Boston, Newton, Waltham. Learn more: https://buff.ly/3QzPYWl #PhishingProtection #CyberSecurity #TechSupport #CMITBoston #NewtonWaltham #BostonBusiness #DataProtection #TechSolutions #ManagedIT #BusinessSecurity #ITSupport #CyberAwareness #ITCompliance #ITSecurity #NetworkSecurity #BusinessContinuity #ITManagement #BostonTech #BusinessEfficiency #TechUpgrades

4

I'm attending the 8th Annual Boston Official Cybersecurity Summit, rated Top 5 InfoSec Conference, on Tuesday, October 29! Join me at this educational event to learn from leading industry experts about the latest threat landscape & best practices in combatting #cybercrime and protecting your company. Register today with code CSS24-JOINME to receive Free Admission. #OfficialCybersecuritySummit #CSSBoston #CRAEvents #cybersecurity

4

Governor Josh Shapiro's recent signing of PA Senate Bill 824, which amends the Breach of Personal Information Notification Act, lowers the threshold for mandatory notification to the state attorney general from 1,000 to 500 state residents affected by a data breach. Changing the lower limit by 500 isn't dramatic, but it is a reminder that for local PA governments to meet the requirement, they must have a breach response plan with active data monitoring and ongoing auditing in place. Just as importantly, executive leadership needs to encourage and support a culture where potential breaches are reported immediately (e.g., lost laptop, inadvertently emailed file with PII). My experience is that a HIPAA and/or CJIS committee, if led by top-level executive sponsors, can motivate all stakeholders to invest in routine compliance audits and address cybersecurity and data privacy gaps (on an ongoing basis). The update to the Act is designed to improve the protection of residents' personal information and enhance public trust in the local government's ability to manage data breaches effectively. However, this can only be achieved through organized effort and with leadership from the top of local government. #cybersecurity #dataprivacy #localgov https://lnkd.in/e6bBJKX8

15

🎙️Had a great time on The Jim Arciero Show podcast today, discussing cybersecurity and sharing tips for local businesses and individuals, and my book “Cybersecurity for Main Street: Cyber Fit in 21 Days”. A huge Thank You to Massachusetts state representative Jim Arciero for such an engaging conversation and to Westford Community Access Television for hosting🛡️🔐. Cybersecurity is more important than ever and I’m passionate about helping our community stay safe online. Check out the episode (link below for the podcast) for practical tips on protecting your digital assets, ensuring your online presence is secure. #CybersecurityForMainStreet #podcast #Cybersecurity #LocalBusiness #StaySafeOnline #SecureOurWorld

37

2 Comments

If you're in the CT area, register for the next Cloud Security Alliance Hartford chapter event: Fueling Cloud Governance with NIST 2.0 and Posture Management. great topic and great location to boot! https://lnkd.in/exZDNPN

43

Collect only the data you need to provide the service asked for. I checked in to a hotel yesterday, and was asked if I was staying for business or pleasure. I’ve participated in this exchange before; usually I respond that I’d rather not say. This time I pressed for why they asked (I knew but I wanted to hear it again), and it’s so that they may be able to offer lower rates to local businesses to encourage stays. Their future sales is not part of the service I am “contracting” for (a room and a free breakfast). Any time you are asked for private or confidential information, ask yourself before responding, “how is this relevant to the product I am procuring?” The more you view the world of seemingly innocent transactions through this lens, the more you realize you may be paying more than intended for the product. Stay vigilant.

44

22 Comments

#Cyber Incident Response Planning Tips week 1 is done. In case you missed my first 4 tips for better IRP, here is the recap video. 👉 Comment below on what is holding you back from incident response planning in your organization and I will help you out with the process. 👈

28

4 Comments

Just like a tightrope walker relies on their safety net for peace of mind, your business relies on solid backup and recovery strategies to bounce back from any digital stumble. 🤔 Think about it…One wrong step, and a tightrope walker could be in trouble. But with that safety net in place, they can carry on fearlessly. Similarly, with data backup and recovery systems in place, your business can navigate through any digital challenges confidently. Whether it's accidental deletions, cyber attacks, or system failures, having robust backup and recovery measures ensures that your precious data is always safeguarded. It's not just about bouncing back – it's about maintaining that high-wire performance without missing a beat. Take the first step in securing your business today! Follow this link to Book a FREE cybersecurity consultation with us: https://www.oramca.com/ #OramCybersecurityAdvisors #CyberAttack #SlowComputer #CyberSecurity #ComputerBreach #DataBreach

4

1 Comment