Tag

phishing prevention

Targeted advice on identifying and stopping phishing attacks before they cause damage. Topics include recognizing social engineering tactics, deploying email filtering tools, conducting phishing simulations, and training employees to report suspicious messages promptly.

posts

CISA cybersecurity guidelines

CISA Cybersecurity Guidelines: What Actually Matters

In January 2024, CISA itself disclosed that a threat actor had exploited vulnerabilities in Ivanti products to breach two of its own systems. Let that sink in. The federal agency responsible for setting cybersecurity standards for the entire nation got hit. If that doesn't convince you that simply

Carl B. Johnson Sep 14, 2019 7 min read
cyber security

Cyber Security in 2026: What Actually Works Now

In March 2024, Change Healthcare suffered a ransomware attack that disrupted insurance claims processing for nearly every hospital and pharmacy in the United States. The root cause? Stolen credentials on a system without multi-factor authentication. One overlooked gap in cyber security brought a $32 billion company to its knees and

Carl B. Johnson Feb 25, 2019 6 min read
computer security

Computer Security in 2026: What Actually Works Now

The Breach That Changed How I Think About Computer Security In early 2024, Change Healthcare — one of the largest health payment processors in the United States — got hit with a ransomware attack that disrupted pharmacy operations, delayed patient care, and exposed the protected health information of roughly 100 million individuals.

Carl B. Johnson Feb 25, 2019 7 min read