Security & Privacy Archives

The Safest Open Port Is the One You Don’t Need

Leave a Comment / IBM Power, IT, Security & Privacy, Technology, Uncategorized / Kelly J. Rose / August 13, 2026 / AS400, attack surface reduction, exit nodes, FIDO2 SSH, IBM i remote access, identity-based networking, MagicDNS, managed IT, mesh VPN, Microsoft Entra ID, network segmentation, Pangolin, secure remote access, split DNS, SSH security, subnet routers, Tailscale, WireGuard, YubiKey

We started using Tailscale because SSH access had become annoying. PANDAROSE operates systems across several cloud providers, internal networks, development environments, and client infrastructure. Our old approach relied on public IP allowlists, SSH tunnels, traditional VPNs, and enough firewall rules that changing Internet providers could become a small administrative event. The setup was reasonably secure. […]

The Safest Open Port Is the One You Don’t Need Read More »

Microsoft Is Retiring Native SMS MFA. Honestly, Good.

Leave a Comment / IT, Microsoft 365, Security & Privacy, Technology / Kelly J. Rose / August 4, 2026 / Conditional Access, FIDO2, identity security, Microsoft 365, Microsoft Authenticator, Microsoft Entra, passkeys, phishing-resistant MFA, SMS MFA retirement, Temporary Access Pass, Windows Hello for Business, YubiKey

Microsoft has finally placed an expiry date on the six-digit security code everyone understands and attackers understand even better. Starting September 1, 2026, Microsoft Entra ID will automatically enable passkeys for users who are still enabled for SMS or voice authentication. Those users will begin receiving prompts to register a passkey. On February 1, 2027,

Microsoft Is Retiring Native SMS MFA. Honestly, Good. Read More »

It Wasn’t Production Until It Was

Leave a Comment / IT, PandaCloud, Security & Privacy, Technology / Kelly J. Rose / July 27, 2026 / backup and disaster recovery, backup testing, business continuity, data recovery, development environment, disaster recovery planning, Edmonton, Git, infrastructure drift, managed IT, PandaCloud, production environment, server failure, source control, UPS failure, website hosting

There is a running joke that doctors make terrible patients, mechanics drive the worst cars, and contractors live for years with unfinished work in their own houses. IT companies have their own version of this. We spend our days providing managed IT support and telling clients to replace aging equipment, verify backups, test restores, monitor

It Wasn’t Production Until It Was Read More »

The AI Did Not Go Rogue. OpenAI Gave It a Job and Lost Control of the Test.

Leave a Comment / AI, IT, Security & Privacy, Technology, Uncategorized / Kelly J. Rose / July 22, 2026 / agentic AI, AI cybersecurity, AI risk, AI security, autonomous agents, cyber defence, cyber security, ExploitGym, GPT-5.6 Sol, Hugging Face, incident response, managed IT, network segmentation, open-weight models, OpenAI, zero-day vulnerabilities

OpenAI would very much like us to understand that its newest models are terrifyingly capable. Its account of the recent Hugging Face security incident uses phrases such as “unprecedented cyber incident,” “state-of-the-art cyber capabilities,” and “advanced models can discover and exploit novel attack paths.” After explaining how an internal evaluation escaped containment and compromised another

The AI Did Not Go Rogue. OpenAI Gave It a Job and Lost Control of the Test. Read More »

Protect Your Business from Offline Phishing Scams: What You Need to Know

Leave a Comment / Security & Privacy / Kelly J. Rose / September 11, 2024

Phishing scams are evolving, and scammers are now moving into the real world. By using fake QR codes, parking tickets, and counterfeit restaurant flyers, they’re tricking people into handing over sensitive information. For businesses, this new wave of phishing requires vigilance both online and offline. What Is Offline Phishing? Offline phishing involves real-world tactics, such

Protect Your Business from Offline Phishing Scams: What You Need to Know Read More »

Things I Won’t Work With: Bad Password Hashing Algorithms

1 Comment / Security & Privacy / Kelly J. Rose / August 21, 2024

In the realm of cybersecurity, few things send a shiver down my spine quite like encountering bad password hashing algorithms. We’re living in an era where data breaches are so common they hardly make headlines anymore, yet some developers are still stuck using hashing algorithms that should have been retired years ago. It’s like watching

Things I Won’t Work With: Bad Password Hashing Algorithms Read More »

5 Reasons Your Brain Needs a Social Media Detox

Leave a Comment / Blogging, Marketing, Productivity, Security & Privacy, Self-Improvement, Social Media / Panda Rose / March 2, 2024 / business, Edmonton, Small Business, Social Media, Technology, Wellness, yeg, yegbiz

Social media nowadays is more than just a social network. It is used as a tool for businesses and a way to communicate with others. Although sometimes, we can get too caught up in the scrolling world that we don’t realize how it could be affecting our well being, relationships and even work. As a

5 Reasons Your Brain Needs a Social Media Detox Read More »

Who is Panda Rose?

Leave a Comment / Digital Marketing, Marketing, Mobile Apps, PandaCloud, Productivity, Programming, Security & Privacy, SEO, Social Media, Software Development, Technology, Web Development / Panda Rose / April 9, 2019 / blog, blogging, cto, Edmonton, SEO, Social Media, spruce grove, st albert, stony plain, Technology, yeg, yegbiz

Not sure what Panda Rose does or who we are? Don’t worry, we’ll tell you! Panda Rose Consulting Studios Ltd. is a company based around technology. Very vague I know, let me explain. We take care all things technology so you don’t have to. We offer social media management, SEO services, Google ads, website development,

Who is Panda Rose? Read More »