Security Practices
Protecting Your Firm from “Session Hijacking”: Why MFA Alone Won’t Stop Cookie Theft
Article summary: Multi-factor authentication confirms who you are at login. Session hijacking attacks after that point, stealing the cookie that proves login already happened. By the time a session cookie is stolen, MFA is irrelevant. Session hijacking protection requires a different set of controls: shorter session lifetimes, conditional access policies, and monitoring for anomalous session…
Read MoreHow to Secure Connected Office Appliances
Article summary: Connected office appliance security means applying the same basic controls you would to any device: changed default passwords, network isolation, firmware updates, and inclusion in your device inventory. Walk through almost any office today and you’ll find more than computers connected to the network. Smart TVs in conference rooms, security cameras, printers, VoIP…
Read MoreWhen Your Vendor Gets Hacked: Drafting a “Downstream” Incident Response Plan for Small Firms
Article summary: Third-party breaches now account for more than a third of all security incidents, and most small businesses have no vendor breach response plan ready when the notification arrives. Drafting one now, before the call comes, determines how quickly your team can contain the damage, notify the right people, and keep operating. The email…
Read MoreThe Danger of “Snooping” AI Browser Extensions: Vetting Grammarly, Read.ai, and PDF Tools
Article summary: AI browser extensions like Grammarly, Read.ai, and various PDF tools read and process everything visible in the active browser tab, often sending that content to external servers for cloud-based analysis. Most employees install them without IT approval and forget they exist. Vetting these tools before deployment and auditing which ones have active access…
Read MoreIs data security your top priority?
Most businesses believe their data security is under control. But confidence and reality don’t always line up.
As companies grow, systems multiply, cloud apps get added, older platforms stay in place, and access permissions stack up.
And that increases risk…
Securing Wireless Peripherals in Shared Office Spaces
Article summary: Wireless keyboards, mice, and headsets are treated as low-risk office staples. In shared workspaces, they are often left connected, unmonitored, and running firmware that is rarely updated. Wireless peripheral security requires the same attention as any other endpoint: awareness of known attack vectors, consistent firmware hygiene, and a clear policy for who owns…
Read More