All Posts

CMMC Final Rule Announced

Oct 11, 2024

The Department of Defense unveiled the final rule for Cybersecurity Maturity Model Certification (CMMC) 2.0, marking a pivotal moment for defense contractors.... Read More

Password Guidance Shifts Toward Simplicity

Oct 11, 2024

The National Institute of Standards and Technology (NIST) has recently updated its password security guidelines, marking a significant departure from traditional practices.... Read More

Risk Assessment Could Have Prevented Marriott Fine

Oct 10, 2024

The Marriott hotel chain cyber breach could have been prevented with a simple cybersecurity risk assessment (CSRA).... Read More

2025 Global Digital Trust Insights

Oct 8, 2024

The 2025 Global Digital Trust Insights report, titled "Bridging the Gaps to Cyber Resilience: The C-suite Playbook," highlights the pivotal role executives play in enhancing cyber resilience.... Read More

Start Your AI Journey, or Get Left Behind

Oct 7, 2024

Download the e-book from Microsoft to learn how AI is transforming how organizations function, innovate, and compete. This is the first in a series of blog posts regarding artificial intelligence.... Read More

How Criminals Attack & SIEM Defends

Oct 6, 2024

Imagine your computer and all the devices you use are like a house. Just like you lock your doors and windows to keep burglars out, we use special tools to protect computers from villains who want to steal information or cause trouble. One of these tools is called MITRE ATT&CK, and another powerful tool we use is SIEM.... Read More

How to Manage Sensitive Info in Manufacturing

Sept 17, 2024

In manufacturing, securing sensitive information is paramount. This encompasses confidential data, intellectual property, trade secrets, and security configurations. Effective protection of this information is crucial to mitigate cyber threats and ensure organizational integrity.... Read More

Advisory on Iran Cyber Actors Enabling Ransomware

Aug 28, 2024

This advisory highlights the activities of cyber actors, identified in the private sector as Pioneer Kitten, UNC757, Parisite, Rubidium, and Lemon Sandstorm, who are targeting and exploiting organizations across various sectors in the United States and abroad..... Read More

Telecommuting Cybersecurity: Protect Your Data Effectively

Aug 23, 2024

The shift to remote work has fundamentally transformed the modern workplace, eliminating the need for rigid office schedules and commutes. However, this flexibility introduces new challenges, particularly in cybersecurity. Remote work environments can expose your organization’s data and systems to vulnerabilities.... Read More

Phishing 2.0: How AI Makes Cyber Attacks Smarter, More Dangerous

Aug 16, 2024

Phishing has always posed a significant threat, but with the advent of artificial intelligence (AI), it has become even more dangerous. Welcome to Phishing 2.0: smarter, more convincing, and harder to detect.... Read More

STACK Cybersecurity Earns SOC 2 Type 2 Cert

Aug 15, 2024

Our SOC 2 Type 2 certification demonstrates we have robust controls in place to safeguard your data. This enhances trust and credibility, reassuring you that your information is in safe hands.... Read More

AM Data Service is now STACK Cybersecurity

May 1, 2024

Historically, managed service providers (MSPs) have operated on a flat-rate basis, offering unlimited support for a consistent monthly fee. The infrastructure MSPs manage ranges from computers to firewalls, routers, switches, active directories, email, and other network devices. This is done from a centralized software or technology stack to monitor and troubleshoot remotely. In short, MSPs serve as the IT department for many companies. STACK Cybersecurity chose to challenge this traditional model, arguing that... Read More

QR Code Phishing (Quishing) on the Rise

Mar 5, 2024

QR codes are ubiquitous nowadays, directing users to URLs with a simple tap. However, just like every coin has two sides, these Quick Response codes are also being exploited for nefarious purposes. In fact, a U.S.-based energy firm encountered nearly 29% of more than 1,000 malicious emails containing QR codes in May 2023. Adversaries are increasingly using QR codes in their phishing strategies to: Acquire credentials and personal details, trick victims into paying off hackers, install malware, gain remote access to devices.... Read More

Data Breach Aftermath: A Lingering Shadow

Mar 4, 2024

In our digital era, data serves as the lifeblood of businesses. It powers operations, informs decision-making, and shapes customer interactions. However, lurking beneath this data-centric landscape lies a sinister underbelly: the persistent menace of data breaches. These breaches have consequences that stretch far beyond the immediate aftermath, often haunting businesses for years to come. Surprisingly, only 51% of the total data breach costs materialize within the first year of an incident.... Read More