Avalon Cybersecurity

June 27, 2024

The CDK Incident and Recommended Actions from Avalon Cyber

Thousands of car dealerships’ operations slowed to a halt last Wednesday as their core dealer management system, CDK, shut down. CDK Global announced that they were investigating a cyber incident and “Out of an abundance of caution and concern for our customers, we have shut down most of our systems and are working diligently to get everything up and running as quickly as possible” according to...
May 28, 2024

Avalon Cyber Security Poll Recap: A Deeper Dive into Insider Threats

Earlier this month, Avalon Cyber posted a poll on LinkedIn asking, “What cybersecurity threat keeps you up at night?” The choices were: external threat (for example, ransomware), internal threat (i.e., IP theft), or the birth of GenAI.
March 26, 2024

Get 24/7/365 Protection with Avalon Cyber's Managed Extended Detection & Response (MXDR) Service

While Avalon Cyber has offered managed detection and response services for years, KnightVision MXDR, our managed extended detection and response service, provides your organization with the highest standard of cybersecurity protection available today.
December 12, 2023

Cyber Insurance Considerations for Small and Medium-Sized Businesses

There are over 33 million small or medium-sized businesses (SMBs) in the U.S. – making up over 99% of all U.S. companies – and recovering from a cyberattack can be costly to these businesses.
November 14, 2023

NYDFS Amendment to Cybersecurity Regulation

Avalon Cyber previously reported on proposed changes that may have a significant impact on the current 23 NYCRR Part 500 – Cybersecurity Requirements for Financial Services Companies (the Cybersecurity Regulation or Part 500) released by the New York State Department of Financial Services (NYSDFS).
April 12, 2023

Governance Considerations in the Age of AI

There has been a lot of talk recently about artificial intelligence (AI), especially around ChatGPT, a chatbot which interacts in a conversational way. As a broad category, AI is the simulation of human processes by machines and computer systems. A few business use cases may include leveraging AI to provide fast and accurate response for customer inquiries, assisting with topic research, or...
March 21, 2023

Does the Silicon Valley Bank Collapse Mean More Cyberattacks?

Will the recent shutdown of the Silicon Valley Bank (SVB) and subsequent financial activity worldwide lead to an increase in cyberattacks? Some experts, including those at Avalon Cyber, think it’s a foregone conclusion.
March 6, 2023

CISO Spotlight: Jeremy Walczak

We created the “CISO Spotlight” series to highlight some of the CISOs we know and admire, to learn more about their challenges, hear what they have to say about the current state of cybersecurity, and more. Read on to see what Jeremy Walczak of GenesisCare has to say.
March 2, 2023

Overview of Proposed NIST Cybersecurity Framework Changes

In January, the National Institute of Standards and Technology (NIST) released a concept paper as they work to draft the Cybersecurity Framework (CSF or Framework) 2.0, an update to the current 1.1 Framework that was last updated in 2018, as well as associated resources such as websites, mappings, and related guidance. The purpose of the CSF is to provide guidance to organizations to better...
January 24, 2023

Be Cyber Ready by Implementing These Key Controls

As the number and severity of cyber threats and attacks continues to rise, it’s more important than ever to make sure your organization is cyber ready. Safeguarding your environment, including the systems and data within, will both reduce risk and promote business operation continuity and security.
January 17, 2023

ChatGPT: The Advent of Synthetic Malware

What, exactly, is ChatGPT?
November 21, 2022

Avalon Welcomes Venkat Rangarajan

Avalon is pleased to announce that Venkat Rangajaran has joined our team as Vice President of Cyber Sales. Venkat has more than 22 years of experience in the cybersecurity industry, working for startups, midsize companies, and mega caps, with an impressive track record of growing and leading top-performing sales teams and winning major contracts with numerous marquee logo clients.
October 14, 2022

A Quick Guide to Creating Complex Passwords

You may think a complex eight-character password composed of numbers, symbols, and upper- and lowercase letters is relatively safe from cybercriminals, right? Nope. It would take an adversary just 31 seconds to crack that password.
October 5, 2022

Introducing Our Cybersecurity Service Plans

Developing – and maturing – a layered, effective cybersecurity program for your organization can be confusing, time-consuming, and stressful. But it doesn’t have to be.
August 3, 2022

Proposed Changes to NYDFS Cybersecurity Requirements

On July 29, 2022, the New York State Department of Financial Services (NYSDFS) released proposed changes that may have a significant impact on the current 23 NYCRR Part 500 – Cybersecurity Requirements for Financial Services Companies (the Cybersecurity Regulation or Part 500). Part 500, a regulation establishing cybersecurity requirements for financial services companies, was declared by the...
April 11, 2022

Cybersecurity Spring Cleaning

The weather is changing, and spring is upon us. Each year around this time, many people tend to do a thorough cleaning of their home and maybe tackle a few home improvement projects before summer arrives. We cannot forget to do the same maintenance and enhancements to our cybersecurity program. To assist you, we created this basic cybersecurity “to-do” list to ensure that you are being proactive...
April 6, 2022

Get Ready for the New 36-Hour Cyber Breach Notification Rule for Financial Institutions

If you’re in the financial sector, no doubt you’ve already heard, and hopefully, are prepared or preparing for, the new federal banking rule regarding cyber breach notifications. This new rule, which took effect April 1, 2022, with full compliance required by May 1, 2022, requires banking organizations and bank service providers to notify banking regulators within 36 hours after a notification...
March 3, 2022

Planning Ahead to Aid in the Prevention of Cyberattacks

Most (not all) cyber-related incidents can be avoided through proper planning and by having the right resources in place. Preparation is what makes all the difference, which entails outlining your risks, implementing safeguards to aid in prevention, and knowing who to bring in and when in the event of a cyber incident. After a cyber incident has occurred, time is of the essence to lessen the...
March 1, 2022

Russian Cyberthreats: Steps to Take to Protect Your Business

In early 2022, the US Cybersecurity and Infrastructure Security Agency (CISA) issued a warning to all businesses and government entities on the risk of Russian cyberattacks affecting US systems and networks. Rob Lee, CEO of Dragos, indicates that his team has “observed threat groups that have been attributed to the Russian government by US government agencies performing reconnaissance against US...
February 16, 2022

Avalon Cyber Welcomes Jill Martucci

The Avalon Cyber team is proud to welcome Jill Martucci as our new Director of Governance Risk and Compliance (GRC) for our security advisory services. Her experience spans many service lines and industries in which she executes programs that ensure the proper functioning of client information technology and information security (IT/IS) controls, with a focus on the following areas:
February 8, 2022

Avalon Cyber Launches Incident Response Retainer Program

If you experience a breach, it’s critical that you quickly find and fill the gaps in your network and identify what data may have been compromised. The Avalon Cyber team has extensive experience in digital forensics and technology crime fighting and provides prompt and comprehensive response to cyberattacks.
January 10, 2022

Cybersecurity Maturity Model Certification (CMMC) Services

If you’re one of the more than 300,000 companies in the defense industrial base’s (DIB) supply chain, you’re probably familiar with the Department of Defense’s (DoD) Cybersecurity Maturity Model Certification (CMMC). If not, here’s a quick definition courtesy of the Office of the Under Secretary of Defense for Acquisition and Sustainment (OUSD(A&S)): “The CMMC is a framework that includes a...
December 16, 2021

The Log4j Vulnerability: Where Do I Start?

If you’ve made it past the title, you already know what we’re talking about, and I hope you don’t stop here because you’re afraid of just another technical brain dump of how bad Log4j (aka Log4shell) actually is. What I think will be more impactful for our readers is to provide you with information on:
December 8, 2021

92 and Loving It!

Getting good grades back in grammar school was pretty exciting, right? You get a high score on your math test and you’re super psyched for the rest of the day. Well, that’s the same feeling the team at Avalon gets when we think about our overall Net Promoter Score (NPS), which is… 92!
December 2, 2021

Lockbit 2.0 Ransomware Infographic

An attacker leveraged a combination of Microsoft Exchange vulnerabilities (ProxyShell), which led to the deployment of Lockbit 2.0 ransomware. Here's what happened:
November 2, 2021

Why You May Need a Microsoft 365 Best Practices Security Assessment

Microsoft 365 (previously Office 365) offers a wealth of tools, including Teams, SharePoint, OneDrive, PowerPoint, Excel, and more, that help your team work and collaborate easily and efficiently from anywhere in the world. And, since the platform is cloud-based, your business has access to all these resources, yet doesn’t have to host the infrastructure.
October 15, 2021

An Overview of Cybersecurity for Financial Institutions: Looking Back and Planning Ahead

Cyber risk, the probability of loss and/or harm to an entity based on technological exposures, is much higher in the financial industry as compared to others, to the extent that even bank ratings can be greatly impacted. This certainly isn’t surprising given the nature of the data this sector manages every day.
October 6, 2021

20 Ways to Block Mobile Attacks

People use their mobile devices for everything these days, including, of course, work. In fact, 60% of an organization’s endpoints are mobile – and unprotected. Since they contain much, if not all, of the same information found on an employee’s corporate laptop or desktop, keeping smart phones, tablets, etc. safe is crucial to the security of your business.
August 9, 2021

Avalon Launches New Phoenix Office

Avalon, a national provider of digital forensics, eDiscovery, cybersecurity, business process outsourcing services, and traditional litigation support services to law firms and corporations, has opened a new office in Phoenix, Arizona. This additional location strengthens Avalon’s national presence and its commitment to assisting the legal and business communities.
July 28, 2021

Avalon Achieves SOC 2 Type 1 Compliance

Avalon is proud to announce that we have successfully completed the SOC 2 Type 1 information security audit as of July 2021. The scope of the audit included our cybersecurity, eDiscovery, and secure print and mail services.

Contact Our Team Now