Latest News

End of January Security Brief with Amy Krohn

Veracity Consulting’s Vice President of Technology, Amy Krohn delivers the following recap of the cybersecurity happenings for the end of January 2018 time period.

Misconfigured Jenkins Servers Leak Sensitive Data

Analysis of Jenkins servers found that many of them leak sensitive information, including ones belonging to high-profile companies. Jenkins is an open source automation server used by some software developers for continuous integration and delivery.  Check in with your development teams to investigate and close this security hole.

The Spectera Diabolical Continues…

Last Wednesday, Intel delivered information on the performance impact of the “Meltdown and Spectre” patches on data centers, and the company told customers that systems with several types of processors may experience more frequent reboots after firmware updates are installed. The company reported seeing performance penalties ranging from 2-14% on these types of systems.

Cisco Patches Flaws in Email Security and a Few Other Products: Cisco has patched several high severity vulnerabilities, including ones that allow privilege escalation and denial-of-service (DoS) attacks, in its Unified Customer Voice Portal (CVP), Email Security, and NX-OS products. Check with your engineers on the status of getting these patches installed.

About Veracity Consulting

Veracity Consulting is a Kansas City-based technology firm with a reputation of implementing and managing IT solutions and business strategies. Our mission is to change the complex world of technology into a more efficient and profitable solution for businesses and communities. We use a collaborative approach with our clients to create and implement viable and relevant solutions. We offer a comprehensive range of commercial and government solutions in the areas of Program Management, Data Management and Analytics, Strategy and Architecture, Managed Infrastructure, and Security.

About Amy Krohn

Amy Krohn has served as a leader in the technology industry for over 20 years.  Her areas of expertise include leading organizations and companies in executive leadership, strategic planning, enterprise architecture, as a mentor, leadership development, organizational change management, delivery management, vendor management, service management, and process improvements.  Amy currently serves as Veracity Consulting’s Vice President of Technology.

Three Ways to Honor Martin Luther King Day in 2018

For many, Martin Luther King Jr. Day is a day off — and sadly, little else.  Aside from the school lessons that paint a picture of Dr. King’s life and activism, many of us are removed from his impact. Martin Luther King Jr. is a historical name we’ve learned to recognize and respect. How can we honor his legacy in ways that make a difference in 2018.

Dr. Martin Luther King Jr. was a racial justice leader and community organizer.  While volunteering has always been the noted effort to recognizing MLK Day, here are a few different and impactful ways to celebrate a movement that has continued to challenge us today.

Recognize privilege: We have heard the phrase “You can’t change what you don’t acknowledge.”  Our identities are complex systems of privileges and repressions (known as intersectionality.) This is a call to acknowledge our privilege and start dismantling it. It’s a difficult undertaking. But if we don’t recognize our privileges, we’re complicit in the systems we’re working against.

Use this as an opportunity to work on your allyship: Attend the SURJ KC Education Core January Meeting at Rockhurst University. And then attend another. If you don’t know what SURJ KC (Showing Up for Racial Justice, Kansas City)  is, they organize people as part of the multi-racial majority, for racial justice. Through personal support, political education, and solidarity action, SURJ KC moves everyone to act as part of a multi­racial majority for justice with passion and accountability. Other local organizations: Resist Hate KC and Big Brothers/Big Sisters Kansas City.

Have important conversations about racial justiceTalking about racial injustice is a very uncomfortable subject and it should be!  But when we are committed to talking about it in a respectful way, it can be done. Listen more; talk less. Respect for multiple perspectives and histories – those that have been lifted and those that have been left behind. Embrace the discomfort of the unknown. This is how you make change happen.

Don’t just celebrate Dr. King, honor the day by being moved to action.

At Veracity, we’re striving to build a better community. Join us as we celebrate 2018 #MLKDAY with community action, volunteering and through our Veracity Give Back program. Veracity champions several charitable causes throughout the year.  To learn more about the causes championed by Veracity Consulting or if you are interesting in learning how your company can start a Give Back program,  contact me.

Spectra and Other News: January 2018 Security Update with Amy Krohn

Veracity Consulting’s Vice President of Technology, Amy Krohn delivers the following recap of the cybersecurity happenings for January 2018 time period.

SPECTRE, WHAT YOU NEED TO KNOW:  Researchers disclosed this week the details of two new attack methods allowing malicious actors to gain access to sensitive information stored in a device’s memory by exploiting security holes in Intel, AMD and ARM processors.

Spectre and Meltdown, have already been addressed by several vendors, including Microsoft, Apple and Google, and Intel and others are also working on rolling out patches.

Billions of PCs, mobile devices and cloud instances are vulnerable to attacks leveraging the Spectre and Meltdown vulnerabilities.  More info here: Spectra

Mentioned A Few Days Ago: Apple is aware of the macOS vulnerability disclosed by a researcher and the company plans on patching it later this month.

A security expert who uses the online moniker Siguza has made public the details for a local privilege escalation vulnerability affecting all versions of the macOS operating system.

The flaw allows a malicious application installed on the targeted system to execute arbitrary code and obtain root privileges.Four of the vulnerabilities addressed with the 2018-01-01 security patch level were rated Critical, all of them remote code execution bugs. The remaining 16 issues resolved in this patch level were High risk elevation of privilege and denial of service vulnerabilities.  If you haven’t updated your apple products, no better time than right now!

Microsoft Patches for CPU Flaws Break Windows, Apps

Users have complained that the updates released by Microsoft last week for the Spectre and Meltdown vulnerabilities cause Windows to break down on some computers with AMD processors

Google patched several Critical and High severity vulnerabilities as part of its Android Security Bulletin for January 2018.

A total of 38 security flaws were resolved in the popular mobile OS this month, 20 as part of the 2018-01-01 security patch level and 18 in the 2018-01-05 security patch level. Five of the bugs were rated Critical and 33 were rated High risk.  Update your Android products today!

About Veracity Consulting

Veracity Consulting is a Kansas City-based technology firm with a reputation of implementing and managing IT solutions and business strategies. Our mission is to change the complex world of technology into a more efficient and profitable solution for businesses and communities. We use a collaborative approach with our clients to create and implement viable and relevant solutions. We offer a comprehensive range of commercial and government solutions in the areas of Program Management, Data Management and Analytics, Strategy and Architecture, Managed Infrastructure, and Security.

About Amy Krohn

Amy Krohn has served as a leader in the technology industry for over 20 years.  Her areas of expertise include leading organizations and companies in executive leadership, strategic planning, enterprise architecture, as a mentor, leadership development, organizational change management, delivery management, vendor management, service management, and process improvements.  Amy currently serves as Veracity Consulting’s Vice President of Technology.

Hot Jobs at Veracity for the Week of Dec 26th!

Take a look at the best jobs we have on offer from across the Veracity Group this week, from Knowledge Management to Business Process Analyst

Working for us isn’t about slaving away from nine to five, it’s about having a passion and commitment!  Join our team and together we’ll change the way the world looks at technology. Find out more and apply now at Veracity careers.

Associate PM/Business Analyst/Project Coordinator

Veracity has a unique opportunity for a Project Coordinator to join them. As our associate PM . you will work on ad hoc projects for the program such as Business Process Mapping, provide analytical support for projects, assist the selected provider with identifying potential business and technology solutions. Keep complex efforts moving forward quickly while exercising an appropriate level of discipline. Interested?  Head over to our online application!

Process Architect with Content Management Experience

We are looking for an exceptionally talented individual to join our team as a Process Architect. The candidate will work with various internal teams including content management, operations and technology. A significant part of the candidate’s responsibility will be to implement content management for the team. The candidate should be able to run multiple projects in parallel, understand stakeholder needs and effectively prioritize projects and tasks while ensuring that we achieve our long-term strategic goals.

Business Process Analyst with Strong Knowledge Management Experience

Knowledge management is the process of creating, curating, sharing, utilizing and managing knowledge across a whole company and even across industries. Should know JIRA and Confluence.  It’s the hottest job out there today! You will be the go-to contact for our business stakeholders across a number of high availability services and applications, in a role that will see you to manage expectations, prioritise requests, and develop your skills in a highly collaborative team environment. Sound good? Apply!

About Amy Riedel

Amy Riedel, Director, Recruiting and Talent Acquisition

Amy Riedel, Director, Recruiting and Talent Acquisition

Amy Riedel has recruited a good number of amazing people to work on accounts with a cornucopia of clients. She is leading Veracity recruiting strategy and acquisition efforts across the United States.  Her team of recruiting ‘sleuths’  search the “ends of the earth,”  looking for the best in Engineering,  Program Management, and System Administration. With offices on the East coast, West coast and in the Midwest, Veracity looks for talent from all over the United States to join their team.

About Veracity Consulting

Veracity Consulting is a Kansas City-based technology firm with a reputation of implementing and managing IT solutions and business strategies. Our mission is to change the complex world of technology into a more efficient and profitable solution for businesses and
communities. We use a collaborative approach with our clients to create and implement viable and relevant solutions.

We offer a comprehensive range of commercial and government solutions in the areas of Program Management, Data Services,
Enterprise Architecture, Managed Infrastructure, Security, and Web Services.

.NET-Based Ransomware Uses Open Source Code

Veracity Consulting’s Vice President of Technology, Amy Krohn delivers the following recap of the cybersecurity happenings for the end of November through early December 2017 time period.

New .NET-Based Ransomware Uses Open Source Code

Two newly discovered .NET-based ransomware families are using open source repositories to encrypt files.two ransomware families have been seen in live attacks carried out via spam emails containing malicious URLs. Both of the new malware families are compiled in Microsoft Intermediate Language (MSIL) and have been packed with the ‘Confuser’ packer.   The malware creates a run key that ensures it is executed each time the user logs into the computer. If removable drives are detected, the threat drops a copy of itself on them, with the name “fatura-vencida.pdf.scr.”   The ransomware changes the victim’s desktop background using image files downloaded from “i[.]imgur.com/NpKQ3KZ.jpg.“Be on the lookout for this one!

Breach at PayPal Subsidiary Affects 1.6 Million Customers

PayPal informed customers on Friday that personal information for 1.6 million individuals may have been obtained by hackers who breached the systems of its subsidiary TIO Networks, one of its subsidiaries.The company is based in Canada and it serves some of the largest telecom and utility network operators in North America.

Chrome to Block Apps from Injecting into Its Processes

Google’s Chrome web browser will soon prevent third-party software from injecting code into its processes.The browser will also guide users into how to update or remove the third-party software responsible for the crash.

We’re Heading into the Holidays!

The increase in transactions during the holiday shopping season naturally comes with an increase in fraud.  Be diligent out there on where you are purchasing and from who.  Don’t fall for the scams.

About Veracity Consulting

Veracity Consulting is a Kansas City-based technology firm with a reputation of implementing and managing IT solutions and business strategies. Our mission is to change the complex world of technology into a more efficient and profitable solution for businesses and communities. We use a collaborative approach with our clients to create and implement viable and relevant solutions. We offer a comprehensive range of commercial and government solutions in the areas of Program Management, Data Management and Analytics, Strategy and Architecture, Managed Infrastructure, and Security.

About Amy Krohn

Amy Krohn has served as a leader in the technology industry for over 20 years.  Her areas of expertise include leading organizations and companies in executive leadership, strategic planning, enterprise architecture, as a mentor, leadership development, organizational change management, delivery management, vendor management, service management, and process improvements.  Amy currently serves as Veracity Consulting’s Vice President of Technology.

November Security Update with Amy Krohn

Veracity Consulting’s Vice President of Technology, Amy Krohn delivers the following recap of the cybersecurity happenings for the end of October through early November 2017 time period.

Massive Hack Hidden by UBER from Consumers

Uber said Tuesday that hackers accessed the personal data of 57 million of its users in a breach that had been covered up by the company for more than a year.

Stolen information included the names, email addresses and mobile phone numbers of customers around the world, while the names and driver’s license numbers of roughly 600,000 of its drivers in the United States were accessed.

macOS Malware Spread By Looking like Symantec Blog

A new variant of the macOS-targeting malware is spreading through a blog that looks like the legitimate security company Symantec. The blog,  symantecblog[dot]com, is a very good imitation of the real Symantec blog, and even has the same content from the original.  If you aren’t sure then don’t download from the site.

Symantec Patches Vulnerability in Management Console

Symantec has released an update to address a directory traversal vulnerability in the Symantec Management Console.  Talk to your security administrators about getting this updated if your company uses Symantec.

Microsoft Manually Patched Office Component

Microsoft engineers appear to have manually patched a 17 year-old vulnerability in Office, instead of altering the source code of the vulnerable component, ACROS Security researchers say.  The vulnerability was addressed with a fixed release on November 14 as part of Microsoft’s “Patch Tuesday” security updates.  If you haven’t done this update, do it now.

About Veracity Consulting

Veracity Consulting is a Kansas City-based technology firm with a reputation of implementing and managing IT solutions and business strategies. Our mission is to change the complex world of technology into a more efficient and profitable solution for businesses and communities. We use a collaborative approach with our clients to create and implement viable and relevant solutions. We offer a comprehensive range of commercial and government solutions in the areas of Program Management, Data Management and Analytics, Strategy and Architecture, Managed Infrastructure, and Security.

About Amy Krohn

Amy Krohn has served as a leader in the technology industry for over 20 years.  Her areas of expertise include leading organizations and companies in executive leadership, strategic planning, enterprise architecture, as a mentor, leadership development, organizational change management, delivery management, vendor management, service management, and process improvements.  Amy currently serves as Veracity Consulting’s Vice President of Technology.

HOT JOBS for the Week of Nov 12th.

Take a look at the best jobs we have on offer from across the Veracity this week, from UX Developer to Process Lead..

Working for us isn’t about slaving away from nine to five, it’s about having a passion and commitment!  Join our team and together we’ll change the way the world looks at technology. Find out more and apply now at Veracity careers.

UX/UI Developer

Veracity has a unique opportunity for an UX/UI Developer whose responsibilities will include collaborating with product management and engineering to define and implement innovative solutions for the product direction, visuals and experience.

Process Lead

This position will support the development of business processes related to creating, curating, sharing, utilizing and managing knowledge across a whole company and even across industries.  You will be the go-to contact for our business stakeholders across a number of high availability services and applications, in a role that will see you to manage expectations, prioritise requests, and develop your skills in a highly collaborative team environment. Sound good? Apply!

Security Analyst

This position serving as the key IT security analyst addressing current and future security requirements. Provides security monitoring, vulnerability assessment, and analysis into potential security related events and incidents.

About Amy Riedel

Amy Riedel, Director, Recruiting and Talent Acquisition

Amy Riedel, Director, Recruiting and Talent Acquisition

Amy Riedel has recruited a good number of amazing people to work on accounts with a cornucopia of clients. She is leading Veracity recruiting strategy and acquisition efforts across the United States.  Her team of recruiting ‘sleuths’  search the “ends of the earth,”  looking for the best in Engineering,  Program Management, and System Administration. With offices on the East coast, West coast and in the Midwest, Veracity looks for talent from all over the United States to join their team.

About Veracity Consulting

Veracity Consulting is a Kansas City-based technology firm with a reputation of implementing and managing IT solutions and business strategies. Our mission is to change the complex world of technology into a more efficient and profitable solution for businesses and
communities. We use a collaborative approach with our clients to create and implement viable and relevant solutions.

We offer a comprehensive range of commercial and government solutions in the areas of Program Management, Data Services,
Enterprise Architecture, Managed Infrastructure, Security, and Web Services.

With So Many Disasters.. Make Your Donation Count!

First, hurricane Harvey. Then Irma and Maria. Somewhere in there was hurricane Jose. We have floods, earthquakes and California is burning.  Seems like the world is falling apart and that can make everyone feel helpless. In one month, our continent was hammered by five natural disasters. Millions are without power and drinkable water.  There is so much need, sometimes it’s easier to say ” it’s all too much.” Afterall, how do you know that your donations are actually getting there? How can you decide on what and how much? Here are a few tips to help you decipher it all:

Donate with Your Values in Mind

When considering how to give, it’s helpful to start by asking what motivates you.  Animal lovers may want to give to a shelter. Others may want their money directed to certain groups of people, like children, or causes, like clean water.  Remember, it’s your money or time so think with your head while you give your heart.  There is no right or wrong here.

Selecting an Organization to Support

Groups like GuideStar and Charity Navigator can help you choose a legitimate organization.  Wise Giving Alliance and Charity Watch are also helpful.  But some of the best ways to get to know a charity is to ask questions, especially with how much experience it has in disaster relief.  You would be surprised how many organizations have too much overhead for the necessary funds to funnel to where they need to go during a disaster.

Give Cash

It seems impersonal, but money is often the most useful form of donation. Again, think about the time and effort it takes to transport hard goods.  Money is a fast and easy way to get what’s needed to those that need it the most.

Keep Giving if You Can

Large donations come in the right after disasters, but recovery takes a while.  Try doing an automatic monthly donation to the charity and follow up with how they are spending it with the disaster efforts.  A small donation like $10 dollars a month can add up for a charity.

Still confused? Here are a few suggestions to get you started.

Resources for Aid to Puerto Rico

Resources for Aid to Houston

Resources for Aid to California 

Resources for Aid to Florida

Choose kindness and giving and great things will happen!

At Veracity, we’re striving to build a better community. Veracity champions several charitable causes throughout the year.  To learn more about the causes championed by Veracity Consulting, check our website or contact me about how your company can start a Give Back Program!

May Your Days Be Filled with Kindness,

Hill

Here are the hottest jobs for the week ending 9/15

Take a look at the best jobs we have on offer from across the Veracity Group this week, from Project Management to Accounting and Payroll Coordinator…

Working for us isn’t about slaving away from nine to five, it’s about having a passion and commitment!  Join our team and together we’ll change the way the world looks at technology. Find out more and apply now at Veracity careers.

Accounting and Payroll Coordinator

Veracity has a unique opportunity for an Accounting and Payroll Coordinator to join them on their journey.  What’s amazing about this position is your opportunity to be exposed and working directly with a Senior member of the Veracity team. Interested?  Check out our posting . or just head over to our online application!

Project Manager for our El Dorado Hills, CA Location!

We’re looking for a skilled PM with five to seven years of Project Management experience.   If you have experience with COBOL, Linux, and knowledge of Savvy, you’re our person! This position is in our sunny El Dorado California location, so grab your sunglasses. Sound good? Apply!

About Amy Riedel

Amy Riedel, Director, Recruiting and Talent Acquisition

Amy Riedel, Director, Recruiting and Talent Acquisition

Amy Riedel has recruited a good number of amazing people to work on accounts with a cornucopia of clients. She is leading Veracity recruiting strategy and acquisition efforts across the United States.  Her team of recruiting ‘sleuths’  search the “ends of the earth,”  looking for the best in Engineering,  Program Management, and System Administration. With offices on the East coast, West coast and in the Midwest, Veracity looks for talent from all over the United States to join their team.

About Veracity Consulting

Veracity Consulting is a Kansas City-based technology firm with a reputation of implementing and managing IT solutions and business strategies. Our mission is to change the complex world of technology into a more efficient and profitable solution for businesses and
communities. We use a collaborative approach with our clients to create and implement viable and relevant solutions.

We offer a comprehensive range of commercial and government solutions in the areas of Program Management, Data Services,
Enterprise Architecture, Managed Infrastructure, Security, and Web Services.

Equifax Hack: What to do now?

Veracity Consulting’s Vice President of Technology, Amy Krohn delivers the following recommendations for you regarding the Equifax cybersecurity breach.

Equifax is one of the three major consumer credit reporting agencies that together, give you your credit score. Equifax said on Thursday that hackers had gained access to company data that potentially compromised sensitive information for 143 million American consumers, including Social Security numbers and driver’s license numbers. For example, the entire U.S. population in July 2016 was roughly 323 million, according to Census Bureau data. There are  more than 249 million people over age 18 — i.e., those most likely to have a credit file.Equifax’s security lapse could be the largest theft involving Social Security numbers, one of the most common methods used to confirm a person’s identity in the U.S.

What can you do to help yourself during this time?

  1. Assume you are affected. Check your existing credit accounts for suspicious transactions and look out for new accounts in your name.
  2. If you use Equifax, change your account information NOW.
  3. Watch out for phishing attacks.
  4. Equifax has established a website, equifaxsecurity2017.com, so you can check to see if your personal information may have been stolen.  If the verification comes back, you will be offered to enroll in their “TrustedPremier” program.  This is Equifax’s credit monitoring service.  Consumers can also call 866-447-7559 for more information, if they are uneasy about giving this information to Equifax over the web. Experian is also offering free credit monitoring to all U.S. consumers for a year.

It’s difficult to tell consumers to check their credit reports since Equifax was one of the three credit reporting agencies breached.  Normally, during a major breach such as this, a consumer would order their reports from each agency to review activity. Since Equifax is one of these three, it’s understandable that your confidence is shaken, but you will need to be diligent in reviewing your files.  Equifax discovered the hack July 29, but waited until Thursday to warn consumers. If you are unease going this route, then consider purchasing a 3rd party agency for identity theft like Lifelock, IdentityGuard, or Credit Sesame.

About Veracity Consulting

Veracity Consulting is a Kansas City-based technology firm with a reputation of implementing and managing IT solutions and business strategies. Our mission is to change the complex world of technology into a more efficient and profitable solution for businesses and communities. We use a collaborative approach with our clients to create and implement viable and relevant solutions. We offer a comprehensive range of commercial and government solutions in the areas of Program Management, Data Management and Analytics, Strategy and Architecture, Managed Infrastructure, and Security.

About Amy Krohn

Amy Krohn has served as a leader in the technology industry for over 20 years.  Her areas of expertise include leading organizations and companies in executive leadership, strategic planning, enterprise architecture, as a mentor, leadership development, organizational change management, delivery management, vendor management, service management, and process improvements.  Amy currently serves as Veracity Consulting’s Vice President of Technology.