Please ensure Javascript is enabled for purposes of website accessibility

cybersecurity

lame stock photo of a hacker

PSA: Change Your AICPA Password NOW (UPDATE)

Who penetrates networks in the dark with a hood over their head? Silly. h/t @cbriancpa for tweeting this story out Hackers are claiming they gained access to a database with more than 140,000 emails and passwords from the AICPA according to Cybernews, the only outlet reporting on this as yet. We have reached out to […]

Moss Adams 2022 cloud breach

Network Security Experts Found a Way Into Moss Adams’ Cloud Network

We’ve learned this week that benevolent hackers found a vulnerability over at Moss Adams a few months ago and detailed their findings in a blog post on Tuesday. Via VPNOverview: VPNOverview’s security team in April discovered an improperly stored virtual machine (VM) image that belongs to Moss Adams, one of the largest public accounting firms […]

If Your Password Is ‘123456,’ You Are Dumb and Lazy

From ZDNet: After analyzing 275,699,516 passwords leaked during 2020 data breaches, NordPass and partners found that the most common passwords are incredibly easy to guess — and it could take less than a second or two for attackers to break into accounts using these credentials. Only 44% of those recorded were considered “unique.” The password manager solutions […]

Which Data Breach Will Finally Wake Us Up?

The world has finally decided data privacy and security is worth talking about. Congress enjoyed pelting Mark Zuckerberg with questions that made the digital natives point and laugh. We also enjoyed getting this cautionary note from Twitter this week: Hi @MeganLewczyk, When you set a password for your Twitter account, we use technology that masks […]

cybersecurity controllers accounting

How Controllers Can Step Up Their Cybersecurity Game

There’s a good reason why cybersecurity is ranked extremely high on the priority list of Trey White, CPA, and other controllers and chief accounting officers in the healthcare sector. According to a report from the Identity Theft Resource Center and CyberScout, 376 (34.4%) of the 1,093 data breach incidents reported in 2016 occurred in the […]

Is it Bye-Bye-Bye to SOC 2?

I wish…. While the SOC 2 isn’t exactly going away, the AICPA is in the process of giving it a major revamp. Maybe we can call it SOC Version 2.1? And, it’s about time! Back in June, I grappled with the flaws of the current Service Organization Control (SOC) reporting system: Don’t get me wrong. […]