The Laconic Times https://laconictimes.com/ 2026-11-01T20:57:11.369099-08:00 How to Set Up S3 Object Lock for Backups https://laconictimes.com/how-to-set-up-s3-object-lock-for-backups/ 2026-11-01T20:57:11.369099-08:00 2026-11-01T20:57:11.369099-08:00 Declan Mercer When you finish this, your backup bucket will be write-once-read-many WORM: each backup file can be read but can't be deleted or overwritten until its... Budgeting for Hardware Security Keys at Your Company https://laconictimes.com/budgeting-for-hardware-security-keys-at-your-company/ 2026-10-25T20:52:11.294109-07:00 2026-10-25T20:52:11.294109-07:00 Yusuf Adeyemi What will hardware security keys cost per employee? In 2026 retail listings, a FIDO-only key started around $29. A multi-protocol key ran about $55 to $99.... When an Employee Loses Their Security Key https://laconictimes.com/when-an-employee-loses-their-security-key/ 2026-10-18T20:17:45.954684-07:00 2026-10-18T20:17:45.954684-07:00 Yusuf Adeyemi When an employee loses a security key, they switch to their backup key, you remove the lost key from every account it was registered to, and you issue a new... How Many Security Keys to Buy Per Employee https://laconictimes.com/how-many-security-keys-to-buy-per-employee/ 2026-10-11T19:14:04.687623-07:00 2026-10-11T19:14:04.687623-07:00 Lena Sokolova Buy two keys for every person who will use one. The first is the primary, which they carry. The second is a backup, registered to the same accounts and... Adding FIDO2 Security Keys to Microsoft Entra ID https://laconictimes.com/adding-fido2-security-keys-to-microsoft-entra-id/ 2026-10-08T18:19:08.628381-07:00 2026-10-08T18:19:08.628381-07:00 Lena Sokolova When you finish, your Microsoft Entra ID tenant will accept only the hardware key models you approve, only for the group you choose, and it will require one... Security Keys vs Authenticator Apps for Business MFA https://laconictimes.com/security-keys-vs-authenticator-apps-for-business-mfa/ 2026-10-05T17:20:18.195914-07:00 2026-10-05T17:20:18.195914-07:00 Yusuf Adeyemi Keep the authenticator app for most staff, and put hardware security keys on administrators and other privileged accounts first. The whole difference comes... The Authentication Standards CISA Calls Phishing Resistant https://laconictimes.com/the-authentication-standards-cisa-calls-phishing-resistant/ 2026-10-02T16:50:20.044420-07:00 2026-10-02T16:50:20.044420-07:00 Yusuf Adeyemi CISA counts exactly two kinds of authentication as phishing resistant. The first is FIDO/WebAuthn, the standard behind security keys and passkeys. The... What NIS2 Requires for Multi-Factor Authentication https://laconictimes.com/what-nis2-requires-for-multi-factor-authentication/ 2026-09-29T14:13:48.786038-07:00 2026-09-29T14:13:48.786038-07:00 Yusuf Adeyemi Does NIS2 actually make multi-factor authentication mandatory, or does "where appropriate" leave you room to skip it? It makes it mandatory for the accounts... Choosing and Deploying Hardware Security Keys for Business https://laconictimes.com/choosing-and-deploying-hardware-security-keys-for-business/ 2026-09-26T11:27:14.620790-07:00 2026-10-25T20:52:49.491786-07:00 Declan Mercer Hardware security keys for business are small USB or NFC devices that sign employees in with FIDO2/WebAuthn. For the accounts that can do the most damage,... How to Detect a Clop Windchill Compromise https://laconictimes.com/how-to-detect-a-clop-windchill-compromise/ 2026-09-23T11:16:39.958021-07:00 2026-09-23T11:16:39.958021-07:00 Declan Mercer How do you tell whether Clop got into your PTC Windchill or FlexPLM server? Look for a small JSP file with a hexadecimal name sitting in the... How to keep your self-funded health plan off OCR's HIPAA enforcement list https://laconictimes.com/how-to-keep-your-self-funded-health-plan-off-ocrs-hipaa-enforcement-list/ 2026-09-18T19:13:25.152741-07:00 2026-09-18T19:13:25.152741-07:00 Lena Sokolova Yes, HIPAA applies to a self-funded health plan, and in 2026 the HHS Office for Civil Rights started collecting money to prove it. In April, a Connecticut... The Thomson Reuters C-Track breach shows why vendor backups are a blind spot https://laconictimes.com/the-thomson-reuters-c-track-breach-shows-why-vendor-backups-are-a-blind-spot/ 2026-09-18T19:13:25.148762-07:00 2026-09-18T19:13:25.148762-07:00 Lena Sokolova The data that leaked in the Thomson Reuters C-Track breach was not sitting in the live court case management system. It was sitting in backup copies that... What the CMMC Phase 2 suspension actually changes for your DoD contracts https://laconictimes.com/what-the-cmmc-phase-2-suspension-actually-changes-for-your-dod-contracts/ 2026-09-18T19:13:25.137605-07:00 2026-09-18T19:13:25.137605-07:00 Lena Sokolova The Pentagon suspended CMMC Phase 2 on July 13, 2026, and on September 3 it made that suspension binding. Neither action removed a single security...