SOC 2 vs ISO 27001
5th May 2021
SOC 2 and ISO 27001 take two different approaches to the same problem. Both will have you improving your security program, but in different ways. It’s important to understand the differences between the two, even if your ultimate decision might be the result of something else altogether.
-- READ MORE
Prevent Email Spoofing with EmailSpoofTest
29th April 2021
Your email provider runs the equivalent of a border checkpoint. It must do this to filter the real emails from the malicious ones. Every person (message) that wants to enter the country (server) must have its documentation in order. One of the best ways through for a malicious actor? Spoofed documentation (email spoofing). Email spoofing…
-- READ MORE
Slack Shared Channel Metadata Exposure
19th March 2021
Slack sent us a notice on Thursday, March 18, 2021 that due to a software vulnerability it “unintentionally shared Slack Connect metadata” with partners that we share a Slack channel with. The result was a Slack shared channel metadata exposure. Slack is a messaging platform that we use to communicate internally and externally with some…
-- READ MORE