Rich E. Davis, JD, CISSP|ITIL

Cybersecurity and IP Protection are my passions.

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

Kudos to the Sophos team for putting together the Kaseya ransomware attack summary below. The article illustrates how the REvil group leveraged a zero-day vulnerability in VSA's Remote Management Monitoring (RMM) software update me…https://t.co/Bwr2UwxD4x https://t.co/j626My4CXi

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

Credentials in code repos are a big "no-no". Organizations should ensure that their SDLC processes adhere to strong governance models predicated on well established and communicated baselines, standards and policies which extend in…https://t.co/qgMZ9YZZ2g https://t.co/OTyHcvLqdc

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

#merckinthenews https://t.co/lgdLYk8wmP

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

A dynamic chart illustrating the evolving popularity of programming languages over time...very cool. https://t.co/T28T1dg4mv

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

Great piece by Steve. Ensuring that contracts have clear delineations of customer/#vendor responsibilities for configuration, with solid SLA's can help mitigate lift and shift (#migration) and ongoing cloud support/maintenance issues. https://t.co/cgrFhB65DI

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

***Database of "breedready" Women Left Unsecured***

A database of fecund women in China was apparently left unsecured and accessible on a server in China. "Victor Gevers, a Dutch internet expert from the non-profit group GDI.Found…https://t.co/GtZgn2gzTG https://t.co/ttL81PJlkB

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

On July 28th, 2018, California governor Jerry Brown signed the California Consumer Privacy Act (CCPA) into law, which some privacy practitioners have characterized as a slightly diluted US analog to the GDPR, but on state level. Nonetheless, in the absenc…https://t.co/dcIUT6YD9z

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

***Critical Infrastructure Protection Controls Litigation***

While the manifestation of cybersecurity risk typically involves regulatory sanctions and fines, it is increasingly triggering litigation that targets officers and direc…https://t.co/nDx5xcxsoe https://t.co/BDdgHSx2ct

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

***US Privacy Watch, Get In The Know***

In 2017, in the backdrop of the FB/Cambridge Analytica data privacy abuses, the House E&C committee charged the #GAO with a feasibility study focused on developing comprehensive US data priv…https://t.co/8J5EEswDkk https://t.co/e7c1Z1ktUx

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

I recommend yoga, tai chi and other excercises. You can also retain mutlidisciplinary SME cyber/data whisperers like me! https://t.co/fp7gxsg80L

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

#cybersecurity #privacyprotection #vulnerability https://t.co/ubosNk9Dv2

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

***The DNI 2019 SSCI Global Threat Assessment Released***

As with the DNI's 2018 report, #cybersecurity threats to geo-economic and political stability are a prominent theme throughout the document.

Some key #cyber related takeaways include the follow…https://t.co/g3CHwESbC2

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

SOPHISTICATED "MAN IN THE MIDDLE" SOCIAL ENGINEERING FRAUD, IT HAPPENS TO THE BEST

I was the "would be victim" of a real estate transaction social engineering attack that could have turned out very badly. The evidence suggests som…https://t.co/cwh2dVPpKb https://t.co/TB3r7Yv93Z

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

****GDPR / DATA PRIVACY LITIGATION UPDATE****
AFTER FACEBOOK NOTORIETY, MAX SCHREMS FILES NEW EU DATA PRIVACY PRIVACY VIOLATION SUITS CLAIMING FINES FOR VIOLATORS SHOULD EXCEED $20bn

Austrian data privacy lawyer and activist Max…https://t.co/Iert3N7n2s https://t.co/hoEjxEzXwL

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

PRIVATE COMPANY VULNERABILITY CONSIDERATIONS DURING THE SHUTDOWN - While researching government contractor liability for cyber breaches during the US Govt. partial shutdown, I came across this piece related to private companies.…https://t.co/lsNbMrJXCP https://t.co/6mtI6MP41S

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

SHUTDOWN CYBER RISK UPDATE: MIT says 45% of employees at the DHS’s Cybersecurity and Infrastructure Security Agency and 85% of staff at NIST have been furloughed resulting in a cessation of "a variety of critical cybersecurity and…https://t.co/pqnUvM6cOB https://t.co/gJo4fN1pIn

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

Does new data privacy legislation preseage a 'shadow economy' of consumer data beyond the control of data owners? Tim Cook raises some interesting points.#datarprivacy https://t.co/VSxDGH8LFl

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

A machine that can apply heuristic techniques to digital behavior and communication variables can not only increase the likelihood of picking a winner at Churchill Downs, it can predict cyber attack targets before they are attacked…https://t.co/nhWdfE6sLo https://t.co/5QeT8FtCD8

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

The embedded article amusingly compares the traditional U.K. and Russian "trash-talking" to the bluster of "two geriatric heavyweights ��� once mighty, but paunchy and arthritic now – poised to fight for a tragically meaningless belt…https://t.co/JzIWqaysUj https://t.co/vx0fQNBY2K

[Rich E. Davis, JD, CISSP|ITIL @RichEDavisIGPRO]

One of the best indicators of present and future behavior is past behavior. If Amazon and Apple could be hoodwinked by such a subtle act of subterfuge, isn't it likely that it has happened before and that millions of devices curren…https://t.co/tZ1Ugu42ho https://t.co/2qITpUjYlX