HighSide Blog

Your source for insights on the secure collaboration, data security, compliance and access control markets.

HighSide’s Distributed Private Root of Trust Cryptography Explained Last updated 1/13/21 This is a technical overview of how HighSide's encrypted messaging & file sharing works for those who are interested in specifics. You do not need to read or understand any of this to use HighSide correctly unless you are the admin for your team in which case you might c HighSide Engineering Team

What you need to know about HIPAA; email, collaboration, messaging, and data sharing The need for improved HIPAA compliant technologies is becoming more apparent. The number of data breaches in the healthcare industry has increased steadily for the past four years. From 2015 to 2018 alone, healthcare breaches Cecilia Clark

[3 Minute Video] HighSide CSO dishes on “Dark Halo”, The First Global Microsoft 365 Breach Listen to HighSide CSO Aaron Turner give a 3 minute "deep-dive" on the Dark Halo attack, detailing how adversaries exploited vulnerabilities in Microsoft Teams to gain access to sensitive, proprietary and regulated data. Evan Blair

Why can’t I use SFTP for secure file transfer? With most businesses still adapting to the new normal of remote and decentralized work, we wanted to take a quick look at two of the tools / techniques some businesses have dusted the cobwebs off of to share data with their employees and partners around the world - FTP, SFTP, and FTPS. While these can certainly get the job done, there are some serious security concerns tha Evan Blair

Understanding & Meeting UK MOD’s DEFCON 658 Regulatory Framework Like CMMC in the United States, The UK Ministry of Defence’s (MOD) DEFCON 658 is a cybersecurity regulatory framework that applies to any organisation doing bus Evan Blair

People, Process & Technology: Understanding What CMMC Means For Your Organization In Monty Python and the Holy Grail, Sir Lancelot charges guards at a castle’s gates, but abnormally. There is repeated footage of a distant charging Sir Lancelot alternated in with footage of the peaceful guards. Each time the camera cuts back to Sir Lancelot, he is charging from the same spot, never gaining ground. Then, suddenly, seemingly without ever having approache David Ellis

The State of in-Security in Collaboration & Cloud File Sharing Applications Data security, privacy and access integrity has never been more at risk. In this post we're going to talk about how the communication, file sharing and file storage layers have become a huge security vulnerability for organizations of all sizes, why, and what you can do about it. Brendan Diaz

HighSide CSO Aaron Turner dishes on Zoom and the (in)security of modern business technology on the RSA Conference Podcast TikTok and Huawei are probably two of the most notable Chinese technology companies that are enveloped in policy debates. The US government's most recent actions against TikTok could be an indication of future actions that could be taken against Chinese technology companies. Join us for the important discussion about how geopolitical motivations impact technology regulatio Evan Blair

O365 Security: You Get What You Pay For…. US Treasury & Commerce Hacks Expose Microsoft It was made aware to the public via media reporting that a group of sophisticated attackers had gained unauthorized access to internal US Treasury and Commerce Department systems. Now, we don’t have the full technical details of how these compromi Aaron Turner

COVID-19: How Your Organization Can Stay Compliant & Secure While Working From Home According to the World Health Organization, COVID-19 is now officially a pandemic. The impact of COVID-19 struck close to home for me this week as at least Aaron Turner