.

sales@trestlenetworks.com

A Post About Modems. Is This 1995?

Check out Panasonic's CES announcement about their upcoming satellite modem refresh of United and Southest flights, delivering 20x faster speeds. For us frequent flyers, slow and spotty in-flight Internet access is a business productivity killer, though I miss the days when flying forced me offline for a few hours. How about you?

At Trestle Networks, we professionally design, deploy and 24x7-monitor high-performance networks to meet the diverse needs of our Managed Security and Managed WiFi (powered by Mojo Networks) customers. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts.

Screen-Shot-2017-10-03-at-4.44.43-PM.png

How To Hack a Vacuum Cleaner

You thought aluminum foil-based hacks were just in the movies? Think again, my friend. 

Check out this article and accompanying videos on how researchers hijacked a Xiaomi Mi Robot vacuum cleaner. On the good side, the security risk is super low, since this required accessing the internals of this IoT device (which BTW runs on Ubuntu and sends megs of data to the cloud every day). But how secure are your key devices from curious hands

At Trestle Networks, we work closely with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to tightly secure and 24x7-monitor access to critical systems, essential for PCI DSS v3.2 compliance. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts.

Xiaomi-Mi-Robot-Vacuum-Teardown-bottom-cover.jpg

The "Chipocalypse" is Here.

Sorry if you're on the hook for Friday night and weekend patches of your Spectre and Meltdown-impacted systems, from desktops to AWS instances. For everybody else, curl up by a warm fire, drink lots of strong coffee and read the deep-dive papers and analysis of each vulnerability.

At Trestle Networks, we work hand-in-hand with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to perform timely software updates in response to security vulnerabilities, including Spectre and Meltdown. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive our daily posts.

1515032396230-4233673443_35845c6074_b.jpeg

Do 21 Year Olds Manage Your IT Infrastructure?

I hope not, but it seems that way at FOREVER 21. Read all about their latest credit card data breach. If you shopped there in 2017, closely monitor your statements and credit reports. The details aren't revealed, but this looks like sloppy security practices, leading to malware installation on their POS devices and exposure of all customer data (via disabled encryption features).

Their press release says "...it appears that only certain point of sale devices in some FOREVER 21 stores were affected." Oh, only SOME devices affected, from April to November. What a relief :). Read it here.

At Trestle Networks, we work closely with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to professionally secure and 24x7 monitor key infrastructure, ensuring PCI DSS 3.2 compliance. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts. 

dims.jpeg

"Billions and Billions", To Quote Carl Sagan

Check out this article on Amazon Prime's massive amount of shipments during 2017. Amazon keeps secret the total number of Prime members, but third-party estimates say ~90 million in the US alone (yes, including me). Does this include virtual "shipments" of downloaded products (books, apps, etc)? Either way, Amazon's software and hardware infrastructure scale is amazing to behold.

At Trestle Networks, our we deliver scalable network designs to our Managed Security and Managed WiFi (powered by Mojo Networks) customers, ready to handle planned growth and unexpected usage spikes. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive our daily posts.

amazon-prime-boxes.jpg

Apple Finally Responds

Have you read Apple's posted message or their iPhone battery fiasco? They'll be offering $29 parts/labor battery swap and adding richer iOS tools for users to determine battery health. Apple should've erred on the side of informing customers and letting them decide (when necessary) between a new phone and new battery. Why didn't that happen? BTW, I've tested several 3rd party tools this week to assess my own 6s... still has some life left. 

At Trestle Networks, we keep our our Managed Security and Managed WiFi (powered by Mojo Networks) customers fully informed of detected performance issues and response options that fit their budgets and needs. No games. No deception. Just good business. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts.

unnamed-3.jpg

The Third Phase of Security Incident Response

Be honest. How solid is your company's security incident response? ancestry.com went into full lockdown today in response to a leak at its community-driven site RootsWeb. 300,000 (or more?) passwords, email addresses and user names. As of this post, they're still offline. Why the long downtime? Maybe their SOC personnel are all on holiday...

The company states credit card data wasn't exposed, but the above data is bad enough for accessing other sites with reused credentials and multi-factor authentication disabled.

At Trestle Networks, we work closely with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to secure all credentials, require multi-factor authentication and tightly restrict role-based access -- especially for PCI DSS 3.2 compliance. Don't be a victim. Contact me to learn more and sign up for trestleNEWS to receive these daily posts.

Screen Shot 2017-12-28 at 9.03.42 AM.png

The Rick Astley Vulnerability

Creaking doors. Breaking glass. Rick Astley. You deserve those jarring sounds for allowing inbound Internet access to a WiFi-connected speaker. As insane as it sounds, Trend Micro ID'd up to 5,000 Sonos devices and 500 Bose devices wide open to the big, bad world. Please, be mindful of home network security. A poorly secured home network is a sweet way to access many corporate networks!


At Trestle Networks, we work closely with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to tightly secure firewall policies and segregate devices by network function, for 100% PCI DSS 3.2 compliance. Don't be sloppy with your security. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts.

rick-astley-fafdb413-f264-4d61-8671-6c93bda94591.jpg

The Best Way To Protect Your Packages?

Peace on Earth, but no goodwill toward those stealing Amazon boxes off your doorstep. Check out this story and the cheesy demonstration videos. To be fair, the headline is a little misleading -- the shotgun shells are blanks. That said, I can't recommend this defense method (borderline illegal).

At Trestle Networks, we 24x7 monitor and defend our Managed Security and Managed WiFi customers from malicious activity (excluding package stealers) using non-explosive methods, including @Mojo Networks patented WIPS. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts.

youtube_p1fB-EWE1Zk.jpg

Apple's Awful Move

What's your view of this story? It's getting attention but less than it deserves. Little debate about the facts of Apple's actions. At a minimum, it was a hugely awful customer relations move. The plaintiffs state that Apple Stores simply recommended purchasing a new phone. But why not inform customers of their options, including replacement of the aging battery for 1/10th the cost of a new iPhone? Ah, yes, the question answers itself. 

At Trestle Networks, we provide our Managed Security and Managed WiFi (powered by Mojo Networks) customers multiple pricing options to best fit their budget, performance and security needs. No games. No deception. Just good business. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts.

iphone.jpg

Mojo and Alexa, A Perfect Marriage

Can't wait to try this nifty code from Mojo Networks on the Trestle lab's new Amazon Echo (2nd Generation). Seriously, how cool is hands-free network diagnostics?

At Trestle Networks, our Managed WiFi customers access the industry's best analytics, @Mojo Networks, Cognitive WiFi, including real-time packet captures and app latency. Don't be blind to your network's health. Contact us to learn more and subscribe to trestleNEWS at www.trestlenetworks.com.

The 2018 Cyber Security Crystal Ball

Are these 7 cyber security predictions for 2018 no-brainers? I also predict multi-factor authentication use will not only accelerate --- popular SaaS apps will start mandating users enable it. Go ahead and make yourself a New Years resolution to enable MFA on Google G Suite, etc...

At Trestle Networks, we work closely with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to secure all credentials, require multi-factor authentication and tightly restrict role-based access -- especially for PCI DSS 3.2 compliance. Don't be a victim. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts.

predictions-crystalball-100538849-large.jpg

Let's Call This A Super-Ultra-Mega-Breach

Check out the latest one that likely exposed personal info of pretty much everybody (in the US). Sloppy security practices are temptingly easy, from SMBs with weak Internet-facing security to wide-open AWS S3 buckets storing data of credit agencies and the Census Bureau. 

At Trestle Networks, we work closely with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to tightly secure firewall policies, authentication methods and role-based access, especially for PCI DSS 3.2 compliance. Don't be a victim. Contact us to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts.

lock_image.jpg

What's "Hijacked" In Dutch?

Thanks to hijacked DNS records, this Netherlands security firm had their domain's HTTPS traffic captured by a bad actor, for five hours! How'd this happen? An elaborate, new attack vector? Nope, just stolen login credentials.

At Trestle Networks, we work closely with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to secure all credentials, require multi-factor authentication and tightly restrict role-based access -- especially for PCI DSS 3.2 compliance. Don't be a victim. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts.

encryption.jpg

Gifts For Geeks

With seven days until Christmas and Hanukkah more than half done, need a smart gift for your favorite geek? Go with the "Password Notebook" plus invisible ink. Got to store those passwords somewhere...

At Trestle Networks, we work closely with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to secure all credentials (not in a notebook) and tightly restrict role-based access, especially for PCI DSS 3.2 compliance. Don't be a breach victim. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts. 

03-logbook.jpeg

Minecraft and Mirai

Did you know the world's worst DDoS attack (and its variants) was about the "Minecraft economy"? OK, that's just part of the story, so read this amazing article on Mirai and the college kids to blame. Their plan was crushing competing Minecraft servers and their attack surface IoT devices (so much poor security).

At Trestle Networks, we work hand-in-hand with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to secure key systems against security vulnerabilities. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these quick daily posts.

Minecraft_3.jpg

Knocking On The Door

How secure are your keyless door locks (aka badge readers)? Yes, not glamorous, but this vulnerability found by Dell's SecureWorks is a great reminder to not cut corners on LAN segregation of critical devices. I've seen many corporate environments where these devices simply reside on the corporate user LAN (not to mention have wide open Internet access and DHCP-assigned IPs).

At Trestle Networks, we work closely with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to tightly segregate and closely monitor connectivity to key systems. Be cyber smart. Contact me to learn more and sign up for trestleNEWS at www.trestlenetworks.com to receive these daily posts. 

Image courtesy of Shutterstock

Image courtesy of Shutterstock

Matching The Wrong Malware

Imagine if the detection rate by your anti-malware tools was only 10%? Early reports say the flu vaccine doesn't match this year's strain. Wash your hands often at those holiday parties...

At Trestle Networks, we work hand-in-hand with our Managed Security and Managed WiFi (powered by Mojo Networks) customers to secure their entire network and address well-known and Zero Day security vulnerabilities, including this fall's WPA2 KRACK. Contact me to learn more and sign up for trestleNEWS to receive these daily posts. 

062515_flu_BODY.jpg

Trestle Networks is an Equal Opportunity Employer. Trestle Networks ensures nondiscrimination in all programs and activities in accordance with all applicable Federal, State and local laws. Trademark 2013 - 2024 Trestle Networks, LLC and its licensors. All rights reserved.