-
The Ernst & Young Cyberattack: Why Third-Party Risk Demands Penetration Testing
The Ernst & Young Cyberattack: Why Third-Party Risk Demands Penetration Testing Another major organization has learned a difficult lesson: a company can have strong internal security controls and still become the victim of a breach through a trusted third-party platform. The recent Ernst & Young data breach highlights the risks associated with such third-party vulnerabilities.…
-
CMMC Phase II Requirements Suspended
CMMC Isn’t Dead. But the Rules Just Changed. For years, I’ve been telling business leaders that cybersecurity isn’t optional if you’re doing business with the federal government. In light of the recent CMMC Phase II Requirement Suspended announcement, it’s more important than ever to stay informed. Whether you’re a prime contractor or a subcontractor, protecting…
-
The Breach Era We’re Living in
The Breach Era We’re Living In We no longer live in a time when breaches show up as isolated incidents every few months. Today, organizations face a constant stream of attacks that move faster and reach deeper than most leaders expect. What we are seeing now is systemic, continuous, and scaling at a pace that…
-
The Fortinet Breach: A Wake-Up Call for How Modern Attacks Really Work
The Fortinet Breach: A Wake-Up Call for How Modern Attacks Really Work By Rodney Gullatte Jr. In this article, we take a closer look at the recent Fortinet Breach and its implications. The recent Fortinet breach is more than another cybersecurity headline. It clearly shows that attacker behavior has changed, and many organizations still have…
-
Virta Health Data Breach in Colorado: Why Healthcare Penetration Testing Is More Important Than Ever
Virta Health Data Breach in Colorado: Why Healthcare Penetration Testing Is More Important Than Ever Healthcare data breaches continue to reveal one hard truth: sensitive patient information has real value, and attackers know it. The recent Virta Health data breach reminds healthcare leaders that basic security tools, written policies, and good intentions do not provide…
-
CANVAS CYBERATTACK IS A WARNING TO EVERY COLLEGE AND UNIVERSITY IN AMERICA
The recent cyberattack involving Canvas by Instructure is rapidly becoming one of the most significant education-sector cybersecurity incidents of 2026. In light of this event, it is important to pay attention to any Canvas Cyberattack Warning issued to affected institutions. What began as a breach involving a third-party learning management system has now impacted universities and colleges…
Search
About
Firma IT Solutions helps executives turn cybersecurity uncertainty into confidence. Through expert penetration testing, we uncover hidden vulnerabilities before criminals exploit them, protect critical operations, safeguard customer trust, and provide clear, actionable insight leaders can use to reduce risk, strengthen resilience, and make smarter security decisions before a breach occurs.
