Andrew Hernandez

4 min read

MFA Prompt Bombing: When Multi-Factor Authentication Becomes a Nuisance — and a Risk

Multi-factor authentication (MFA) is widely considered one of the best affordable controls for preventing account takeover. But like every security control, MFA isn’t foolproof — and attackers are creative. One emergent tactic to watch for is MFA...

Read More

2 min read

Cracking Codes and Crushing Rocks: What Geology Can Teach Us About Cryptography

At first glance, geology and cryptography may seem worlds apart—one is the study of rocks, layers, and the passage of deep time; the other, the...

Read More

2 min read

From Compliance to Confidence

Building a Risk-Based Information Security Program for Community Banks For many community banks, passing a regulatory exam can feel like a victory...

Read More

5 min read

AI Model Risk Management in Financial Institutions

Today we’ll discuss our newest and perhaps most ubiquitous buzzword: AI (Artificial Intelligence). Identifying and mitigating risks of AI are...

Read More

2 min read

Network Segmentation:  How Much Is Enough?

Network segmentation is one of those terms that gets thrown around a lot, like the principle of least privilege and role-based access, as if it was...

Read More