New Paper Published – Comments on ODNI Cyber Threat Framework

March 21, 2018

The Office of the Director of National Intelligence (ODNI) recently released a new Cyber Threat Framework.

Our commentary regarding the ODNI’s framework was just published by the Small Wars Journal.  You can download a pdf version from our website.


DHS Alert – Russian Cyber Threats

March 16, 2018

Yesterday the Department of Homeland Security issued an alert entitled, Russian Government Cyber Activity Targeting Energy and Other Critical Infrastructure Sectors.  The alert warns about how the Russians are seeking to interfere with critical U.S. infrastructure using cyber tools.

How bad is the problem?  This is a screen shot reconstruction of Russians gaining unauthorized access to an industrial control system.

Learn more at our new blog.

Why Do People Phish?

March 7, 2018

Why do people phish?  A recent case in Virginia explains one of the primary motivations.

Learn more at our new blog.


FBI Fails To Warn Cyberattack Targets

November 29, 2017

The Associated Press reports that the FBI failed to warn government officials who were being targeted by Russian spearphishing attacks.

Learn more at our new blog.

What’s Worse – Phishing or Malware?

November 15, 2017

data breaches phishing or malware b

New research from Google, U.C. Berkeley and International Computer Science Institute made this stunning finding:

We find victims of phishing are 400x more likely to be successfully hijacked compared to a random Google user. In comparison, this rate falls to 10x for data breach victims and roughly 40x for keylogger victims.

Learn more at our new blog.

Homeland Security Orders Spearphishing Defense

October 19, 2017

On October 16, 2017, the Department of Homeland Security issued Binding Operational Directive BOD-18-01 directing federal agencies to adopt new cybersecurity measures. One of these measures, DMARC, is intended to fight phishing.

It is good to see the government addressing spearphishing.  However, this measure will quickly prove to be ineffective against spearphishing attacks. Why?  Learn why at our new blog.

Check Your Spam?

August 10, 2017

How do you find safe content in your spam folder?  Learn how at our new blog.