Articles By Brian Rutledge
Brian Rutledge
Principal Security Manager
Jun 20
2019
Invisible aka Fileless Malware — Malware of the Month, June 2019
Invisible malware is a type of Fileless malware that comes with zero footprint and is responsible for an increasing number of endpoint or zero-day attacks. It typically resides in memory, comes packaged as firmware or lives in your Basic Input/Output System (BIOS) – thus bypassing anti-virus software. It truly is invisible.
May 23
2019
Cross-Site Scripting (XSS) — Web-based Application Security, Part 3
Cross-site scripting (XSS) is a technique in which malicious scripts are stored on and unknowingly retrieved from trusted websites by unsuspecting victims. Learn how to safeguard against this threat to your sensitive data.
May 14
2019
Emotet: The Banking Trojan — Malware of the Month, May 2019
Emotet — a banking trojan malware program that the Center for Internet Security (CIS) calls one of the “most costly and destructive malware” — is Spanning’s first spotlight in a new series titled “Malware of the Month.” Every month, Spanning will take a closer look at a new or existing malware that is making recent headlines. Emotet gets the honor for May 2019.
May 07
2019
The Year of GDPR
The EU General Data Protection Regulation (GDPR) came into effect on May 25, 2018. With nearly a year under its belt, Spanning takes a look at the major penalties & overall repercussions of GDPR and examines what we can learn from them.
Apr 10
2019
Cross-Site Forgery — Web-based Application Security, Part 2
Cross-site forgery (CSRF) is a malicious technique designed to take advantage of unsuspecting users who are actively logged into web applications. Learn more about this threat to your data and how to safeguard against it.
Mar 25
2019
Unvalidated Redirects — Web-based Application Security, Part 1
Understanding open redirection vulnerabilities is key to detecting them and protecting your organization’s data. Without proper validation, attackers can redirect victims from trusted to malicious sites, or use forwards to access unauthorized pages.
Feb 04
2019
[Infographic] Employees are Cyber Secure in Theory, But Not in Practice
Cybersecurity is a top priority for organizations. All it takes to infect a network or steal valuable data, is one wrong click by an employee. While employees seem to have good knowledge of basic cybersecurity practices, there are considerable security blind spots which leave the employee and organization vulnerable to breaches. Spanning helps to identify red flags and vulnerabilities in security awareness training for employees.
Jan 24
2019
Spear-Phishing: The Smart Malware
“Spear-phishing” is a smart phishing mechanism that is an increasingly popular and virulent malware vector. Understand its devastating effect on organizations worldwide and get pointers to safeguard your organization against it.
Dec 06
2018
Business Continuity and Disaster Recovery: Your Organization’s Safety Plan
From hurricanes, errant employees, malware to even a rodent with an appetite for cables — the likelihood of an organization suffering data loss has never been greater. An organization’s best defense is to plan for business continuity and disaster recovery by using processes that guide organizations to possibly prevent and/or better manage an (unpredictable) disruptive event.
Oct 19
2018
How Are You Celebrating National Security Awareness Month?
This October is the 15th annual National Cybersecurity Awareness Month (NCSAM), an initiative to raise awareness about the importance of cybersecurity that grows stronger by the year in significance and scope. This is no surprise given that breaches and malware attacks are getting more frequent, and they don’t discriminate against industry. A cross-section of companies from government, healthcare, finance and retail to nonprofits, car-sharing, and even the Port of San Diego have faced ransomware attacks.
The Complete SaaS Backup Buyer's Guide
This buyer’s guide aims to inform IT decision-makers and professionals like you about the realities of SaaS data protection, what your responsibilities are with respect to SaaS data and the key things to consider when evaluating a backup solution.
