News & Thoughts from the Axenic Team
Dispelling more common myths
Okay, I know I promised to delve into and discuss the requirements defined in 4 Context of the organisation. However, I realised that they are other common myths that I should dispel for those of you that are interested in implementing an Information Security Management System (ISMS) that conforms with ISO/IEC 27001:2013 (ISO 27001).
Reports surfaced on the 12th of April of a botnet that attacks IoT running BusyBox and other Linux-based devices. The bot, which is believed to be active since the 20th of March 2017, exploits hard-coded passwords of devices with published SSH or telnet, as well as attempting to brute-force passwords of devices with non-default credentials. As the name suggest, BrickerBot bricks the devices and leaves them completely useless. This is done by executing a set of commands to delete storage, corrupt routing and others.
When using devices and online services, always use modern, convenient and strong access controls. Fingerprint sensors are brilliant for controlling access to personal devices, a good password manager makes creating and remembering passwords a breeze, and adding multi-factor authentication is the best approach for protecting the accounts you really care about.
Dispelling some common myths.
....to help everyday people be safer online.
Do you want to join the best small team in Wellington? Do you have a great project management or coordination and service delivery background?
Axenic is currently looking for an Engagement Manager to join our growing team. This role will be the project interface between our consulting team and our clients. You will be responsible for managing multiple ongoing projects, ensuring our consultants have everything that they need to be successful and making sure that our clients continue to receive the outstanding service that Axenic is well known for. If this sounds like you, please head over to http://bit.ly/AxenicEM to apply for the role. We look forward to hearing from you.
Terry