Avalon Cybersecurity

November 21, 2022

Avalon Welcomes Venkat Rangarajan

Avalon is pleased to announce that Venkat Rangajaran has joined our team as Vice President of Cyber Sales. Venkat has more than 22 years of experience in the cybersecurity industry, working for startups, midsize companies, and mega caps, with an impressive track record of growing and leading top-performing sales teams and winning major contracts with numerous marquee logo clients.
October 14, 2022

A Quick Guide to Creating Complex Passwords

  You may think a complex eight-character password composed of numbers, symbols, and upper- and lowercase letters is relatively safe from cybercriminals, right? Nope. It would take an adversary just 31 seconds to crack that password. 
October 5, 2022

Introducing Our Cybersecurity Service Plans

Developing – and maturing – a layered, effective cybersecurity program for your organization can be confusing, time-consuming, and stressful. But it doesn’t have to be.
August 3, 2022

Proposed Changes to NYDFS Cybersecurity Requirements

On July 29, 2022, the New York State Department of Financial Services (NYSDFS) released proposed changes that may have a significant impact on the current 23 NYCRR Part 500 – Cybersecurity Requirements for Financial Services Companies (the Cybersecurity Regulation or Part 500). Part 500, a regulation establishing cybersecurity requirements for financial services companies, was declared by the...
April 11, 2022

Cybersecurity Spring Cleaning

The weather is changing, and spring is upon us. Each year around this time, many people tend to do a thorough cleaning of their home and maybe tackle a few home improvement projects before summer arrives. We cannot forget to do the same maintenance and enhancements to our cybersecurity program. To assist you, we created this basic cybersecurity “to-do” list to ensure that you are being proactive...
April 6, 2022

Get Ready for the New 36-Hour Cyber Breach Notification Rule for Financial Institutions

If you’re in the financial sector, no doubt you’ve already heard, and hopefully, are prepared or preparing for, the new federal banking rule regarding cyber breach notifications. This new rule, which took effect April 1, 2022, with full compliance required by May 1, 2022, requires banking organizations and bank service providers to notify banking regulators within 36 hours after a notification...
March 3, 2022

Planning Ahead to Aid in the Prevention of Cyberattacks

Most (not all) cyber-related incidents can be avoided through proper planning and by having the right resources in place. Preparation is what makes all the difference, which entails outlining your risks, implementing safeguards to aid in prevention, and knowing who to bring in and when in the event of a cyber incident. After a cyber incident has occurred, time is of the essence to lessen the...
March 1, 2022

Russian Cyberthreats: Steps to Take to Protect Your Business

In early 2022, the US Cybersecurity and Infrastructure Security Agency (CISA) issued a warning to all businesses and government entities on the risk of Russian cyberattacks affecting US systems and networks. Rob Lee, CEO of Dragos, indicates that his team has “observed threat groups that have been attributed to the Russian government by US government agencies performing reconnaissance against US...
February 16, 2022

Avalon Cyber Welcomes Jill Martucci

The Avalon Cyber team is proud to welcome Jill Martucci as our new Director of Governance Risk and Compliance (GRC) for our security advisory services. Her experience spans many service lines and industries in which she executes programs that ensure the proper functioning of client information technology and information security (IT/IS) controls, with a focus on the following areas:
February 8, 2022

Avalon Cyber Launches Incident Response Retainer Program

If you experience a breach, it’s critical that you quickly find and fill the gaps in your network and identify what data may have been compromised. The Avalon Cyber team has extensive experience in digital forensics and technology crime fighting and provides prompt and comprehensive response to cyberattacks.
January 10, 2022

Cybersecurity Maturity Model Certification (CMMC) Services

If you’re one of the more than 300,000 companies in the defense industrial base’s (DIB) supply chain, you’re probably familiar with the Department of Defense’s (DoD) Cybersecurity Maturity Model Certification (CMMC). If not, here’s a quick definition courtesy of the Office of the Under Secretary of Defense for Acquisition and Sustainment (OUSD(A&S)): “The CMMC is a framework that includes a...
December 16, 2021

The Log4j Vulnerability: Where Do I Start?

If you’ve made it past the title, you already know what we’re talking about, and I hope you don’t stop here because you’re afraid of just another technical brain dump of how bad Log4j (aka Log4shell) actually is. What I think will be more impactful for our readers is to provide you with information on:
December 8, 2021

92 and Loving It!

Getting good grades back in grammar school was pretty exciting, right? You get a high score on your math test and you’re super psyched for the rest of the day. Well, that’s the same feeling the team at Avalon gets when we think about our overall Net Promoter Score (NPS), which is… 92!
December 2, 2021

Lockbit 2.0 Ransomware Infographic

An attacker leveraged a combination of Microsoft Exchange vulnerabilities (ProxyShell), which led to the deployment of Lockbit 2.0 ransomware. Here's what happened:
November 2, 2021

Why You May Need a Microsoft 365 Best Practices Security Assessment

Microsoft 365 (previously Office 365) offers a wealth of tools, including Teams, SharePoint, OneDrive, PowerPoint, Excel, and more, that help your team work and collaborate easily and efficiently from anywhere in the world. And, since the platform is cloud-based, your business has access to all these resources, yet doesn’t have to host the infrastructure.
October 15, 2021

An Overview of Cybersecurity for Financial Institutions: Looking Back and Planning Ahead

Cyber risk, the probability of loss and/or harm to an entity based on technological exposures, is much higher in the financial industry as compared to others, to the extent that even bank ratings can be greatly impacted. This certainly isn’t surprising given the nature of the data this sector manages every day.
October 6, 2021

20 Ways to Block Mobile Attacks

People use their mobile devices for everything these days, including, of course, work. In fact, 60% of an organization’s endpoints are mobile – and unprotected. Since they contain much, if not all, of the same information found on an employee’s corporate laptop or desktop, keeping smart phones, tablets, etc. safe is crucial to the security of your business.
August 9, 2021

Avalon Launches New Phoenix Office

Avalon, a national provider of digital forensics, eDiscovery, cybersecurity, business process outsourcing services, and traditional litigation support services to law firms and corporations, has opened a new office in Phoenix, Arizona. This additional location strengthens Avalon’s national presence and its commitment to assisting the legal and business communities.
July 28, 2021

Avalon Achieves SOC 2 Type 1 Compliance

Avalon is proud to announce that we have successfully completed the SOC 2 Type 1 information security audit as of July 2021. The scope of the audit included our cybersecurity, eDiscovery, and secure print and mail services.
May 7, 2021

Phishing Red Flags

During our most recent webinar, “Into the Dark Web with David Maimon,” (which you can watch at the link) an attendee asked: Is there a list of common email subject lines that are red flags?
March 23, 2021

Avalon Cyber Adds Data Breach Notification to Its List of Services

If you experience a data breach, you probably know that you need to alert your customers as quickly as possible to comply with state and national regulations. But did you know that Avalon Cyber can assist with this? 
February 9, 2021

Vulnerability Assessment vs. Penetration Test: What They Are and Why You Need Both

So here's the main difference between vulnerability assessments and penetration tests, put as simply and briefly as possible:
January 8, 2021

Avalon Buffalo is on the Move!

UPDATE: The move-in date for Avalon Buffalo has changed. Until further notice, it’ll be business as usual  at 741 Main St,. Buffalo, NY 14203. Stay tuned for more details! In the meantime, if you have any questions, feel free to call us at 716.995.7777.
November 18, 2020

Avalon Cyber Partners with KnowBe4

Phishing attacks continue to be one of the biggest cyberthreats faced by businesses around the world – and the COVID-19 pandemic and ensuing chaos have only made the situation more dire. In March 2020, phishing attacks related to coronavirus went up 667% from the previous month. 51% of companies experienced more phishing attacks due to employees working remotely. Even the SANS Institute – a U.S....
November 10, 2020

Exciting Changes at Avalon Cyber

Avalon has been on a consistent growth trajectory for many years, expanding our geographic reach and our suite of services to meet the everchanging needs of our clients. To this end, we recently made some exciting changes within the Avalon Cyber division, including creating new positions for current team members and bringing a new hire aboard. This alignment will better position each of our...
September 28, 2020

Expert Opinion: Brandy Griffin on the Business Email Compromise (BEC)

In this blog, Brandy Griffin, Cyber Service Delivery Manager for Avalon Cyber, discusses the business email compromise (BEC), what you can do to help prevent one from affecting your organization, and how to respond if a BEC occurs.
April 10, 2020

Citrix Vulnerability Could Allow Attacker to Perform Arbitrary Code Execution

In this challenging time, and with many companies moving to remote workforces, we would like to share some important information concerning a vulnerability in Citrix, as many companies utilize this tool to allow their remote workforce to connect to corporate networks and resources.
April 10, 2020

Introducing KnightVision CAM

Just because you don’t have the budget of a Forbes 500 business, doesn’t mean you should go without a world-class cybersecurity program. That’s why the engineers at Avalon Cyber developed KnightVision CAM, our customizable, scalable – and affordable – solution to two major cybersecurity challenges: regulatory compliance and incident response.  
March 18, 2020

The Coronavirus's Impact on Cybersecurity

We’re hearing a lot about protecting ourselves during the COVID-19 pandemic. Unfortunately, cybercriminals are using the opportunity to create sophisticated social engineering campaigns and scaling up criminal activity, which means we need to work even harder to protect our online assets too.
February 27, 2020

Ransomware: Pay or Nay?

Ransomware, malicious software that holds your data hostage in exchange for money, is, in a word, terrifying. A bad actor infiltrates your system via a phishing email, for example, encrypts your files, and your business, now crippled, comes to a standstill. The cybercriminal then demands payment, typically in Bitcoin because it’s anonymous and can’t be traced, leaving you in a...
Content not found