Insights
Briefings for businesses worldwide on phones, networks, security and compliance. Each one covers what changed, what to do, and how to verify it.
-
Keep the Backup Console Off the Internet: Lessons From the AhsayCBS Attacks
Attackers exploited two AhsayCBS flaws to plant web shells and cryptominers. A backup console reachable from the internet is remote access, and it should be treated that way.
-
Automated Code Review Is a Comment, Not a Gate: Questions for Your Web and Portal Vendors
GitHub’s AI Scan for pull requests is now generally available. It helps, but its findings cannot block a merge. Know what that means for the vendors who build your website and customer portal.
-
Allow One Remote Support Tool and Block the Rest
A fake party invitation is installing a legitimate remote support tool on office PCs. The fix is deciding which remote tool your business uses and blocking every other one.
-
Texas Specialty Clinics: Where Patient Data Hides in Phones, Fax and Portals
OB-GYN, pediatric and pain management practices carry risks a generic HIPAA template misses. Start with the systems the front desk uses every day.
-
Banks and Credit Unions: Meeting the Notification Clock When Email and Phones Are Down
Federal rules give banks 36 hours and credit unions 72 hours to notify their regulator. Those clocks keep running during the outage that knocked out your email and phone system.
-
Survey Before We Take Over: How We Onboard a Network and Phone System
We assess a network and phone system before we agree to run it. What that survey covers, including Kari’s Law 911 checks, and what to ask any provider.
-
Law Firms: Client Confidentiality, Wire Fraud and AI Tools
Model Rule 1.6 and ABA Formal Opinion 512 set the bar for protecting client information and using AI. A practical checklist for small firms.
-
Banks and Credit Unions After the FFIEC CAT
The FFIEC Cybersecurity Assessment Tool sunset on August 31, 2025. What replaced it, where institutions get stuck, and how to show examiners evidence.
-
Who Owns Your Technology Decisions? Fractional CISO Versus Fractional CTO
Security leadership and technology direction are different jobs. How a business decides which part-time executive to bring in first.
-
HIPAA Risk Analysis for Small Clinics: Do Not Forget Voice and Fax
OCR keeps citing missing risk analyses. For small clinics, the gap is often the phone system, voicemail, fax and call recordings. A practical scope.