ISO/IEC 17025:2017 vs. 2005 – What Changed and Why It Matters

ISO/IEC 17025 are the general requirements for the competence of testing and calibration laboratories and is the main standard used by testing and calibration laboratories. The most recent version is from the year 2017. The previous version was dated 2005. This blog post discusses the changes.

When ISO/IEC 17025 was revised in 2017, it did more than shuffle clause numbers. It modernized how laboratories demonstrate competence, moving from a prescriptive, document‑heavy model to a flexible, risk‑based approach that fits today’s testing and calibration environment (17025Store, 2020; PJLA, 2018; EPPO, 2020; Advisera, 2019).

From Procedures to Performance

The 2005 edition told laboratories in detail how to run their management system: have a Quality Manual, specific documented procedures, and clearly prescribed controls (Advisera, 2019; 17025Store, 2020).

The 2017 edition keeps the what (reliable, technically valid results) but gives more freedom on the how, emphasizing performance and outcomes over rigid formats (Advisera, 2019; 17025Store, 2020; PJLA, 2019).

In practice, this means a lab can design processes that fit its size, technology, and risk profile, as long as it can show consistent, technically valid results and compliance with the requirements (Advisera, 2019; 17025Store, 2020).

The result is intended to be less box‑ticking and more focused on whether the system actually works in daily operations (Advisera, 2019; PJLA, 2019).

New Structure, Same Core Purpose

ISO/IEC 17025:2005 organized requirements into two big blocks: management (Clause 4) and technical (Clause 5) (17025Store, 2020; PJLA, 2018; PJLA, 2019).

The 2017 edition adopts a structure that mirrors modern ISO standards, especially ISO 9001:2015, and spreads requirements across five main sections (Clauses 4–8) (17025Store, 2020; PJLA, 2018; PJLA, 2019).

These sections cover general requirements, structural requirements, resource requirements, process requirements, and management system requirements (17025Store, 2020; PJLA, 2018).

This process‑oriented layout intends to make it easier to integrate ISO/IEC 17025 with an existing quality management system and to see how responsibilities, resources, and processes connect to final test and calibration results (17025Store, 2020; PJLA, 2019).

Management System: Less Paper, More Options

Under the past 2005 version, a formal Quality Manual and a defined set of documented procedures were explicitly required, even for small laboratories (Advisera, 2019; 17025Store, 2020).

The 2017 standard removes the explicit Quality Manual requirement and treats documentation more broadly as “documented information,” allowing labs to use digital tools, integrated systems, or lean documentation as appropriate (Advisera, 2019; 17025Store, 2020; PJLA, 2019).

A key innovation is the introduction of “Option A” and “Option B” for the management system (17025Store, 2020).

Option A means following the management system requirements directly from ISO/IEC 17025, while Option B lets labs leverage an existing ISO 9001‑compliant system (or equivalent) to meet those requirements, reducing duplication for organizations already certified to ISO 9001 (17025Store, 2020; PJLA, 2019).

Risk‑Based Thinking

The 2017 revision brings risk‑based thinking into the heart of the standard, reflecting broader ISO strategy and industry practice (17025Store, 2020; PJLA, 2018; PJLA, 2019).

Where the 2005 version mentioned risk only indirectly, the 2017 standard refers to it repeatedly and introduces a dedicated clause on actions to address risks and opportunities (17025Store, 2020; PJLA, 2018; PJLA, 2019).

Instead of prescribing preventive action as a separate concept, risk‑based thinking pushes labs to identify where things could go wrong, prioritize what matters most, and design controls that are proportionate to the impact (17025Store, 2020; PJLA, 2019).

For a lab, this might mean focusing more effort on high‑risk methods, complex measurements, or critical customers, rather than applying the same level of bureaucracy to everything (17025Store, 2020; PJLA, 2019).

Impartiality, Confidentiality, and Modern IT

The 2017 edition strengthens requirements for impartiality and confidentiality, giving them clear, standalone visibility early in the standard (17025Store, 2020; PJLA, 2018).

In the 2005 version, these topics were present but woven into general management and organizational requirements, making them less prominent (17025Store, 2020; PJLA, 2018).

The revision also acknowledges the reality of modern laboratories: computer systems, electronic records, and electronic reports are now addressed (PJLA, 2018; PJLA, 2019). This covers how labs manage data integrity, control access, and ensure reliable electronic outputs—areas that were much less explicit in 2005 but are critical now for both technical validity and trust (PJLA, 2018; PJLA, 2019).

Scope and Process Requirements

Another important shift is in how the scope and core processes are framed.

The 2017 version clearly states that it applies not only to testing and calibration, but also to sampling associated with those activities, reflecting the real workflow many labs follow (PJLA, 2018; PJLA, 2019).

Process‑related requirements—such as method selection and validation, sampling, handling of items, evaluating measurement uncertainty, ensuring validity of results, reporting, complaints, and nonconforming work—are grouped together in a “Process requirements” clause (17025Store, 2020; PJLA, 2018).

This helps laboratories think holistically about the life cycle of a sample or item—from request to report—and align controls along that chain instead of treating them as isolated requirements (17025Store, 2020; PJLA, 2019).

Automated License Plate Readers: Public Safety Improvement or Privacy Invasion?

Automated license plate reader (ALPR) cameras offer investigative benefits but also raise concerns about privacy, data governance, and civil liberties in the United States (Electronic Frontier Foundation [EFF], 2025; Flock Safety, 2026a; Malwarebytes Labs, 2025).

What ALPR Cameras Are and How They Work

Flock Safety sells fixed, networked automated license plate reader (ALPR) systems that capture plate numbers and detailed vehicle characteristics, plus the date, time, and location of each observation (Flock Safety, 2026b; Malwarebytes Labs, 2025). These cameras are typically solar‑powered, LTE‑connected, and designed to be deployed quickly without relying on local Wi‑Fi or wired power (Flock Safety, 2026a). Flock emphasizes that its ALPRs do not perform facial recognition, do not store biometrics, and are designed to collect vehicle‑level—not person‑level—data, although that vehicle data can still be used to track individuals’ movements (Flock Safety, 2026b; Malwarebytes Labs, 2025).

Potential Benefits for Public Safety

Supporters argue that Flock cameras give law enforcement and communities actionable evidence by turning drive‑by images into searchable data, including full or partial plates, make, model, and color, which can be queried in seconds instead of scrubbing hours of video (Flock Safety, 2026a, 2026b). Agencies can receive real‑time alerts when a plate associated with stolen vehicles, Amber Alerts, or other “hot lists” is detected, enabling officers to intervene more quickly than traditional methods (Flock Safety, 2026a, 2026b). A large multi‑agency study reported that, on average, adding one Flock LPR camera per sworn officer was associated with a roughly 9.1% increase in crime clearance rates, and that Flock technology played a role in solving about 10% of reported crimes across participating agencies (Police1, 2024; “New Study Finds that Flock Safety,” 2024). Flock and some police departments highlight case examples in which plate hits helped identify suspect vehicles in hit‑and‑run crashes, retail theft, and other investigations that might otherwise have gone cold (Town of Windsor, 2025; Yahoo Finance, 2024).

Accuracy, Data Retention, and System Design

Flock markets its LPRs as purpose‑built for capturing plates and vehicle details in various lighting and weather conditions, with the goal of producing clearer, more searchable evidence than generic CCTV cameras (Flock Safety, 2026a). The company’s standard configuration keeps plate and vehicle data for 30 days before automatic deletion, unless it is preserved as part of an ongoing investigation, which it frames as a privacy‑protective retention limit (Malwarebytes Labs, 2025; Flock Safety, 2026b). However, civil liberties groups point out that even a 30‑day rolling log of vehicles’ movements can reveal sensitive patterns—such as visits to clinics, places of worship, protests, or political meetings—when aggregated over time (EFF, 2025; Business & Human Rights Resource Centre, 2026). Critics also warn that any system that automatically compares plates against hot lists can generate false positives, and that the scale and automation of ALPR networks magnify the consequences of those errors, especially for already over‑policed communities (EFF, 2025; Malwarebytes Labs, 2025).

Privacy, Civil Liberties, and Abuse Concerns

Civil liberties advocates argue that Flock’s growing nationwide network effectively creates a form of mass location tracking, often without meaningful public debate or robust local safeguards (ACLU, 2025; EFF, 2025). Investigations by EFF and journalists documented uses of Flock data to track protesters, target marginalized groups such as Romani communities, and monitor people seeking reproductive health care, raising serious First Amendment and human rights concerns (EFF, 2025; Business & Human Rights Resource Centre, 2026). Documents obtained through public records requests show that U.S. Immigration and Customs Enforcement (ICE) has accessed Flock data indirectly through local law enforcement, despite Flock not having a direct contract with ICE, undermining claims of tight local control over access (Security Systems News, 2025). Critics contend that Flock’s business model—selling interconnected surveillance infrastructure to both public and private clients such as HOAs, schools, and businesses—creates systemic risks that cannot be fully mitigated with settings like shorter retention windows or geofencing alone (ACLU, 2025; Business & Human Rights Resource Centre, 2026; EFF, 2025).

Legal, Policy, and Governance Considerations

Flock argues that its systems are designed with the Fourth Amendment in mind and that plate scans are objective vehicle observations traditionally considered less protected than invasive personal searches (Flock Safety, 2026b). Nonetheless, as ALPR deployments expand, courts and policymakers are grappling with whether pervasive, long‑term location tracking by these systems should trigger stronger constitutional protections than isolated traffic reads (ACLU, 2025; EFF, 2025). Cities and states adopting Flock cameras have experimented with policy safeguards such as strict limits on retention and sharing, explicit bans on certain uses (like tracking lawful protests), mandatory audits, and public reporting requirements, but enforcement of these rules can be uneven and often trails rapid deployment (ACLU, 2025; Security Systems News, 2025). Debates in major jurisdictions, including Los Angeles and others, illustrate a broader tension: communities seek tools to address crime and improve clearance rates, yet many residents worry about entrenching a privately operated surveillance network that could outlast current leadership and be repurposed in harmful ways (Los Angeles Times, 2026; ACLU, 2025).

Handle the Toughest Management Challenges First - Eat the Frog in the Digital Forensics Lab

Eating the frog in a lab leadership environment means tackling the most critical, uncomfortable work early so you and your team can focus on high‑value work instead of being blocked or distracted.

This is partly about personal productivity and partly about modeling priorities, and having discipline under pressure.

Core idea: what “Eat the Frog” means.

The “eat the frog” method says you identify your single most important, often uncomfortable task and do it first—before easier work. In leadership terms, the “frog” is usually the high‑impact activity, decision or action you’re most tempted to delay.

Leadership frogs in a forensics lab.

In a digital forensics lab, typical leadership “frogs” may include having difficult performance conversations, reallocating casework to fix backlogs, pushing back on unrealistic turnaround expectations, and making budget, policy or tooling decisions that may be seen as unfavorable to some. These are often avoided because they may create friction with staff, examiners, investigators, or upper management.

Modeling priorities and professional culture.

Leaders who tackle these difficult priorities first signal that uncomfortable, high‑impact work is valued more than staying “busy” with lower‑stakes tasks. This may help build a culture where staff prioritize tasks that affect administrative efficiency, evidence integrity, accreditation, and case outcomes.

Throughput, case management, and backlogs.

The method maps cleanly onto case triage and backlog management: you deliberately identify the most consequential constraints on lab performance and address them early in your day or week. In practice, that might mean starting with a backlog triage meeting, rebalancing assignments, or resolving a recurring workflow bottleneck before you address other tasks.

Risk, accreditation, and uncomfortable oversight.

Many “frogs” for forensic leaders sit around quality assurance and accreditation: enforcing peer review, correcting substandard reports, mandating refreshed standard operating procedures, or pausing certain tools until validation is complete. These actions can be unpopular in the short term but directly protect accreditation status, evidentiary reliability, and the lab’s reputation under Daubert and Frye challenges.

Staff development and difficult conversations.

From a people‑leadership standpoint, the “frog” is sometimes the candid coaching conversation you’ve been postponing, or the decision to invest time mentoring a struggling examiner rather than doing your own hands‑on case work. Addressing those early improves morale and clarity because expectations, feedback, and development plans become routine instead of reactive responses after an error or complaint.

Limits and adaptations in high‑tempo environments.

Pure “eat the frog” may be too rigid in environments where priorities change hourly with search warrants, major incidents, or court deadlines. In a digital forensics lab, you likely need a hybrid: protect a daily early‑day block for your leadership “frog,” but leave capacity to pivot when emergent incidents or legal demands arise.

Team‑level visibility and shared frogs

You can extend the concept from personal practice to team operations by making the day’s “frog” explicit—for example, agreeing that the first 90 minutes are focused on clearing a critical backlog category or finalizing reports for upcoming court dates. This kind of prioritization helps your staff to understand trade‑offs and aligns their effort with the lab’s strategic and legal obligations, not just individual preferences or interesting cases.

Think about your current role: What is your biggest frog?

IoT: Neurological Threats & Directed Pulse RF Energy: Havana Syndrome, IoT Implant Safety, & Health Implications

Dr. Frank Kardasz, Edited by Ava Gozo.

Frank Kardasz is a post-secondary instructor who lectures on various topics including digital forensics and cybersecurity. 

Havana Syndrome is a neurological phenomenon first identified in 2016 among U.S. diplomatic staff posted in Havana, Cuba, resulting in a range of symptoms including headaches, dizziness, tinnitus, nausea, and cognitive difficulties. The exact causes remain debated, but leading theories include exposure to directed, pulsed radio frequency (RF) energy, though psychological factors and other medical explanations have also been considered.[1][2][3][4]

Definition & Core Symptoms

Havana Syndrome is defined as a collection of neurosensory and neuropsychological symptoms following an exposure, often reported as auditory or sensory phenomena of unclear origin. Affected individuals have described sudden onset of these symptoms accompanied by noise, pressure sensations, and in severe cases, persistent cognitive and vestibular dysfunction.[2][3]

Likely Causes & Scientific Debate

The most widely-discussed suspected cause is exposure to directed pulsed RF energy, as indicated by both medical investigations and expert panels. Other hypotheses involve psychological stress reactions, chemical exposures, or infectious diseases. Recent research suggests overlap with mild traumatic brain injury mechanisms, pointing toward neuro-inflammation and dysregulation of neurotransmission in affected individuals. Despite extensive investigation, clear evidence for a weaponized RF device or a unique biological agent remains unconfirmed.[5][4][6][1][2]

Implications for RF-Emitting IoT Devices in Humans 

• The Havana Syndrome controversy prompted scrutiny of radio frequency emitting devices, especially as they relate to Internet of Things (IoT) devices attached to, or implanted in, humans.[4][1][5]
• There is heightened concern about the safety of wearable health monitors, smart implants, and other RF-enabled IoT devices that use similar frequencies as those suspected in the Havana events.[1][4] 
• Regulatory bodies may push for more rigorous electromagnetic safety standards, shielding, and long-term neuropsychological impact studies as IoT implants and wearables proliferate.[4][1] 
• Future legal and ethical debates may center on risk mitigation for accidental exposures and the potential for malicious use of RF transmission near vulnerable populations.[5][1]

Future Considerations

As RF-transmitting IoT devices become more common for healthcare, security, and convenience, the lessons from Havana Syndrome will likely drive stricter testing and continuous health monitoring protocols for implantable and wearable electronics. The debates around invisible or subclinical effects from RF exposure may also increase public demand for transparency in device safety, professional oversight, and empirical research on neurological impacts in sensitive groups.[1][5][4]

In summary, Havana Syndrome highlights both scientific uncertainty and the urgent need to assess health impacts of RF technologies, especially when they are designed for continuous use within or on the human body.[3][6][2][5][4][1]

Leadership Case Study: Hiring and Selection Processes are Imperfect - Predator Anthony Bunten, a.k.a. Sean Englbrecht

By Dr. Frank Kardasz  |  Editor Ava Gozo

Another Day in the ICAC Office...

Several years ago I was assigned as Task Force Commander for the Arizona Internet Crimes Against Children (ICAC) Task Force while employed as a Sergeant with the Phoenix Police Department Organized Crime Bureau.

We had openings in our ICAC unit for undercover investigators -- duties to include reactive and proactive undercover investigations involving CSAM; and also covertly posing in various personas for the purpose of catching the online predators who seek contact sex with minors facilitated through Internet chat and social networking sites.

I advertised the openings in the weekly Phoenix PD newsletter that was subsequently distributed to our 2,500 in-service sworn employees, and I received about fifteen applications.

I culled through the applications and chose the top five to invite into an interview process based on their seniority, experience and (lack of) disciplinary history; because that was the department and union-approved method of initial selection and de-selection.

Among the applicants not chosen was a sworn and certified patrol officer named Anthony Bunten.  

Prior to initial certification as an Arizona Police Officer he had passed the perfunctory pre-hire testing to include psych exam, polygraph, physical exam and police academy.

Phoenix PD is a big agency, in the fifth largest city in the US, and I had no prior knowledge of Bunten. According to his file he was a four-year patrol officer with some excessive force discipline history and no investigative experience. His application was immediately rejected as not-eligible. 

Through our approved interview process for a position with our ICAC unit we later selected a couple of qualified candidates for the job - not Bunten

A Few Months Later

Fast forward to September 2002...

The Phoenix evening news' lead story reported that the Glendale Police Department had arrested Phoenix Police Officer Anthony Bunten.  WTF!

Glendale Police reported that Bunten, age 34, identifying himself as "Tony," contacted a 13-year-old  boy on an Internet chat room, then arranged for a meeting at the boy's home in Glendale AZ. The boy's parents were away, but his 10-year-old brother walked in while the boy was having sex with Bunten.

The ten-year-old later reported the incident to his parents. The parents reported to Glendale PD. Glendale investigators subsequently identified Bunten.

Just after his arrest, Anthony Bunten strategically changed his name to Sean Englbrecht. That change then made it more difficult for a subsequent public records search to find him; and consequently his later sentencing was not reported in the media

Bunten was indicted on two counts of sexual conduct with a minor and one count of sexual exploitation of a minor-typically resulting in a maximum sentence of over 50 years prison.

Predator's Background

In his four-year career with Phoenix police, Bunten was disciplined three times, including an excessive-force incident where he pushed a drunken trespasser with his baton and challenged him to a fight. He received the maximum punishment short of termination, a 240-hour suspension. "The squad as a whole knows that Officer Bunten is 'high-strung,' " a fellow officer noted in a report. The other two discipline reports involved late paperwork. 

Nothing in Bunten's personnel file mentioned anything related to sexual misconduct. And Bunten passed a psychological examination and polygraph specifically addressing criminal sexual activity when he was hired.

Plea Deal

Subsequent to plea negotiations, the reduced charge against Bunten/Englbrecht was one count of attempt sexual conduct with a minor. The plea deals like this that get offenders off with lighter sentences are often negotiated in part to keep the victim from having to testify at trial and to otherwise push through the unending series of cases awaiting adjudication in a very busy court system.

His certification as an Arizona Peace officer was revoked. 

Predator Imprisoned

In 2003, Bunten-turned-Englbrecht was sentenced to 12 years prison.

His Arizona Department of Corrections web page shows that while incarcerated his work assignments included Carpentry, Conflict Resolution, Substance Abuse Brief Intervention, and Cultural Diversity.
He has a tattoo of a machine gun on his right bicep with "Dominate  Eliminate  Control"

Today

Anthony Bunten a.k.a. Sean Englbrecht was released in 2013 and is presently registered as a Level 1 sex offender residing in Phoenix.

Postscript

Postscript

The arrest of a law enforcement officer anywhere is a stain on all of us everywhere.  In the Phoenix PD, the Bunten story was disturbing news. I am grateful to the Glendale PD for capturing this predator and also grateful to the brave family who reported him. 

In initially hiring rookie Bunten, Phoenix PD appears to have performed the due diligence that their processes required. In retrospect, they probably regretted not terminating him after his use of force violation.  

Personally, I felt like our AZ ICAC unit was fortunate to have luckily de-selected the four-year veteran Bunten early in our process. Had we brought in a predator to a unit whose job it is to catch predators, it would have made this bad situation even worse.

Cybersecurity: Your PII At-Risk

---

Hostile Acts in the Data Spheres: The Battles for Your PII

By Dr. Frank Kardasz, MPA, Ed.D.
Editor: Ava Gozo
December 24, 2021 (revised September 17, 2025)

---

The relentless barrage of cybercrimes—data breaches, doxing, deepfakes, identity thefts, intrusions, and malware—constitutes a continual assault on efforts to preserve personal information, freedom, and finances. Leak-prone storage, widespread surveillance (both lawful and unlawful), and ineffective regulations further these risks. As the populace succumbs to the rise of relentless data collection, the monetization, politicization, and weaponization of information is an alarming and wicked menace. This article discusses some core issues and concludes with resources for defense and prevention.

---

Some Terms of (the Dark) Art

For newcomers to the world of data compromise and cyber misdeeds, here are definitions for four key terms: 

💥 Personally Identifiable Information (PII) 💥

Personally Identifiable Information (PII) is data that, alone or in combination with other information, can identify an individual (Investopedia, 2021). Examples include date and place of birth, social security number, addresses, account information, maiden names, pet names, schools attended, and graduation dates. PII is often at risk through accidental or intentional leaks. Many people do not realize how vulnerable their PII really is (PYMNTS, 2018).

💥 Phishing 💥

Phishing is an exploit where perpetrators impersonate reputable businesses or people to acquire sensitive information, such as credit card numbers and passwords (Techopedia, 2021). Tactics are often disguised as friendly social media questions, gradually harvesting personal details.

💥 Doxing 💥

Doxing involves retrieving, hacking, and publishing private information such as names, addresses, and phone numbers. Motivations vary; coercion is a common one (Techopedia, 2021). Attackers may threaten to publish doxed information unless a ransom is paid.

💥 Deepfakes 💥

Deepfakes, or synthetic content, use AI and advanced imaging to falsify video and audio, making people appear to say or do things they never did (Techopedia, 2021). Celebrity and political deepfakes are common, but any publicly available image could be targeted.

---

Some Users Place Themselves at Risk

In the pursuit of fame, fortune, or recognition, some individuals—both young and old—overexpose personal and familial details on social media while striving to become "influencers." This makes them vulnerable to tailored exploits by data harvesters. Cases of sextortion and other social harms are an increasing concern across the United States.

Depending on geopolitics, exposing personal data and wealth online can have serious repercussions. For example, in China, flaunting wealth online can lead to government censorship (Wang, 2021).

---

Unwitting Victims

Not all victims are careless. Often, PII is compromised simply by being in the wrong place at the wrong time and then exploited for malicious acts.

Cybersecurity: 50 Tips for Personal & Business Protection

Cybersecurity is no longer optional—it’s essential. Cyber threats such as phishing, ransomware, andidentity theft continue to rise, impacting both individuals and businesses. Implementing solid cybersecurity practices can strengthen your online safety and protect sensitive data.

This guide provides 50 cybersecurity tips to improve your security posture, covering personal safety, workplace security, data protection, and more.

---

General Cybersecurity Tips

Understand Cybersecurity Risks: Anyone can be a target of a cyberattack, not just large organizations.

• Use Strong, Unique Passwords: Create complex passwords and avoid reusing them. 
• Enable Two-Factor Authentication (2FA): Adds an extra login barrier against credential theft. 
• Keep Software Updated: Updates fix vulnerabilities and prevent malware infections. 
• Back Up Data Regularly: Use encrypted cloud storage or external drives. 
• Avoid Public Wi-Fi for Banking or Work: Use a VPN for secure browsing. 
• Beware of Phishing Emails: Always double-check the sender before clicking links.
• Secure Your Home Wi-Fi: Change default router credentials and use WPA3 encryption.
• Use Antivirus/Anti-Malware Software: Select reputable security solutions.
• Check Privacy Settings: Manage what information you share on social media.

 

---

Device Security

• Lock devices with strong PINs or biometrics.
• Avoid public charging stations—carry your own cables and adapters.
• Use a standard user account instead of an admin account for daily tasks.
• Encrypt sensitive files to prevent unauthorized access.
• Regularly patch IoT devices and change default credentials.

---

Email and Internet Use

• Double-check sender information to avoid email spoofing. 
• Never click on unknown links. 
• Use secure, up-to-date browsers. 
• Clear cache and cookies frequently. 
• Download apps only from trusted marketplaces.

 

---

Workplace Cybersecurity

• Train employees on phishing awareness and password hygiene. 
• Use multi-factor authentication (MFA) for company logins.
• Establish and update written security policies.
• Perform regular penetration testing and security audits.
• Rely on encrypted communication tools for business.

 

---

Data Protection

• Enforce "minimum necessary" access to internal files.
• Monitor data transfers to detect shadow IT usage. 
• Apply data loss prevention (DLP) tools.
• Encrypt and secure cloud-stored files.
• Update written policies to reflect new threat landscapes.

 

---

Incident Response

• Develop a written incident response plan.
• Train with simulated breach scenarios.
• Encourage instant reporting of suspicious behaviors.
• Contain attacks quickly to minimize damage.
• Keep clients, regulators, and partners informed in case of breaches.

---

Physical Cybersecurity

• Secure physical access controls in workspaces.
• Install CCTV and remote monitoring for critical areas.
• Shred sensitive records before disposal.
• Deploy badge-based entry systems.
• Implement MDM (mobile device management) for company smartphones.

 

---

Advanced Cybersecurity Measures 

• Shift toward a Zero Trust Architecture.
• Deploy EDR (Endpoint Detection and Response) tools.
• Use network segmentation to isolate sensitive systems.
• Integrate threat intelligence feeds. 
• Partner with peer organizations to share best practices.

 

---

Personal Cybersecurity Practices

• Disconnect when devices are not in use. 
• Use trusted password managers like 1Password or Bitwarden. 
• Be skeptical of free services that seem too good to be true. 
• Check your online banking and email account history regularly. 
• Research tools and apps before installation.

 

---

Why Cybersecurity Best Practices Matter

Implementing even a few of these cybersecurity tips can drastically reduce exposure to digital threats. From password safety to incident response readiness, both individuals and organizations must take proactive steps to minimize risk.

For additional resources, also read:

• How to Protect Against Phishing Attacks 
• Securing IoT Devices at Home and Work 
• Top Cybersecurity Tools for Small Businesses

 

---

References

• 52 Cybersecurity Tips – Driz Group
• Best Cybersecurity Practices – Sprinto
• Cybersecurity for Employees – Nulab
• Expert Security Tips – Heimdal Security
• Cyber Security Practices – Ekran System

---

Please buy a coffee at the link below for our excellent editor Ava Gozo 

 

 

 

 

 

 

 

Cybersecurity: SIM Card Swapping: How to Prevent Account Takeover Fraud

---

SIM card swapping fraud can happen to anyone. If criminals succeed, they can steal a phone number, take over accounts, and access bank or cryptocurrency funds. Most people know to be cautious about phishing emails, but SIM swapping scams often go unnoticed and can be devastating?

---

What Is SIM Card Swapping?

Your phone number is stored on a small SIM chip in your device. If a criminal convinces your provider to move your number to a SIM card they control, they gain access to your calls and texts. This matters because:

• Many companies send login codes and password resets by text.
• Scammers intercept those codes and can break into important accounts.
• Victims face stolen money, identity theft, and recovery headaches.

---

How SIM Card Swapping Happens

• Fraudsters first gather details about a victim—address, date of birth, account numbers:
• They call the mobile carrier, pretending to be the victim.
• The victim’s phone stops working, and the scammer now controls the number.
• They claim the phone is lost or broken, requesting a new SIM card.
• The carrier activates that SIM, transferring the victim’s number.
• SIM card swapping can occur with both physical SIM cards and eSIMs, as the underlying attack involves transferring a phone number or carrier profile rather than the physical card itself. 

---

Signs Your SIM Card Was Swapped

Watch for these red flags:

• Phone suddenly has no service for calls or texts.
• Family or friends say somebody else answered, or call attempts fail.
• Alerts from bank, email, or other accounts about requested password changes

If any occur, contact your carrier immediately.

---

How to Protect Yourself

Defend against SIM swap fraud with these best practices:

• Add a PIN or password to your mobile account: This makes impersonation harder for attackers.
• Use app-based login codes (Google Authenticator, Authy) instead of SMS: These cannot be intercepted by SIM swapping.
• Keep personal info private: The less a criminal knows, the harder their attack.
• Monitor your accounts: Enable alerts for suspicious logins or money movements.

---

Set Up Extra SIM Protection with Your Carrier

Major carriers provide additional security—see their pages to set up SIM locks, account PINs, and fraud alerts:

• Google Fi: Enable SIM Number Lock
• AT&T: Add a wireless passcode
• Verizon: Set an account PIN
• T-Mobile: Enable account security PIN/Passcode

Be sure to visit your carrier's support pages for step-by-step instructions.

---

Final Takeaway

SIM card swapping isn’t about hacking a phone—it’s social engineering aimed at telecom providers. A few minutes setting up SIM locking and carrier PINs can prevent account takeover and protect identity. Think of SIM protection as adding a deadbolt before trouble happens—most criminals move on if it looks too difficult.

Take time today to secure your SIM and implement strong account protection. It could save stress, money, and time. 

References

1. https://www.kaspersky.com/resource-center/threats/sim-swapping
2. https://www.trumarkonline.org/blog/sim-swapping-and-port-out-fraud/
3. https://www.mcafee.com/blogs/mobile-security/what-is-sim-swapping/
4. https://www.itgovernance.eu/blog/en/scammers-are-using-seo-to-strengthen-phishing-attacks
5. https://www.verizon.com/about/account-security/sim-swapping
6. https://www.thomsonreuters.com/en-us/posts/corporates/sim-swap-fraud/

 ___________________________________________

Please buy a coffee at the link below for our excellent editor Ava Gozo 

AI: Understanding False-Positive Hallucinations in AI Research: Implications for Academic Integrity

Generative artificial intelligence tools have revolutionized academic research, offering valuable support while introducing new challenges. Among the most pressing is the phenomenon of false-positive hallucinations. This article analyzes the nature, prevalence, and impact of hallucinations in AI-assisted academic work—and shares practical strategies for educators and students to address them.

What Are False-Positive Hallucinations in AI Research?

AI hallucinations occur when large language models confidently produce content that appears factual and authoritative, but is actually incorrect or fabricated. In academic contexts, false-positive hallucinations refer to AI-generated information that is presented as legitimate scholarly content, despite being entirely invented.

• Hallucinations may be categorized by degree and type—such as acronym ambiguity, numeric errors, or fabricated references.
• Unlike deliberate human misinformation, these errors result from underlying probabilistic processes in AI models.

The most alarming academic hallucinations involve fake citations and references. AI can generate plausible author names, credible article titles, and authentic-looking journal details that do not exist in reality.

Common Types of Academic Hallucinations

• Reference Fabrication: AI creates non-existent sources and citations.
• Fact Fabrication: AI invents false statistics or study outcomes.
• Expert Fabrication: AI attributes quotes or opinions to fictional or unrelated authorities.
• Methodological Fabrication: AI describes studies or experiments that never occurred.

How Prevalent Are AI Hallucinations in Academia?

False-positive hallucinations are a widespread issue across academic domains. Studies found that up to 69% of medical references generated by ChatGPT are fabricated, with many appearing professionally formatted. Leading legal AI tools also show hallucination rates between 17% and 33%, despite claims of being hallucination-free. Preliminary reviews reveal frequent generation of convincing—but entirely fictional—peer-reviewed sources.[2][3]

Notable Real-World Examples

Medical Research

ChatGPT has generated plausible journal article citations—complete with real researcher names—that simply do not exist. Such hallucinations pose a risk to medical decision-making if accepted as valid sources.

Legal Research

AI-powered legal research tools have created citations to fabricated court cases. These hallucinations often blend seamlessly with factual content, making them hard for experts and instructors to identify.

Academic Writing

AI has also invented fake conferences, institutions, and journal articles formatted with realistic details, misleading users and undermining academic credibility.

Should Students Be Required to Provide URLs for Sources?

Arguments in Favor

• Direct URLs help verify the existence of sources.
• Reduce risk of accepting hallucinated material.
• Streamline instructors’ source checking.
• Encourage lifelong habits of verification.

Arguments Against

• Print and paywalled sources may not have URLs.
• Could bias research toward online materials.
• Increases the work required for students and instructors.
• URL availability does not guarantee accuracy.

Balanced Solution

Require URLs, DOIs, or ISBNs for major claims where available—but teach broader verification and critical thinking alongside transparency about AI involvement.

Practical Strategies for Students

1. Verify Every Citation

• Check references using library databases or search engines.
• Cross-check key facts with multiple reliable sources.
• Highlight statistical claims and ensure their credibility.
• Use in-text citations linked to a comprehensive References section.

2. Use AI as a Supplement

• Leverage AI for vocabulary and brainstorming, not complete research generation.
• Critically review and refine AI suggestions.

3. Develop Critical Evaluation Skills

• Question unlikely or overly perfect findings.
• Probe for unsourced assumptions.
• Ensure internal consistency across arguments and data.

4. Transparently Declare AI Use

• State which parts of the work were assisted by AI.
• Describe how references and facts were verified.

5. Combine Multiple Tools and Approaches

• Compare outputs between different AI tools.
• Use specialized hallucination detectors when available.
• Seek human feedback from peers or instructors.

Conclusion: Balancing Integrity and Innovation

AI hallucinations present a significant challenge to academic integrity, threatening the reliability of research across fields. Rather than prohibiting AI, institutions should cultivate policies emphasizing transparency, verification, and critical skill-building. By combining the strengths of AI with rigorous human oversight, academia can continue to innovate—without sacrificing honesty and credibility. 

Cybersecurity: Securing Your Network: The TP-Link Controversy & Router Safety Tips

TP-Link, a major Chinese router manufacturer, is under investigation by U.S. authorities over national security concerns. A possible ban on its products in the U.S. is being considered, raising questions about cybersecurity, market dominance, and router safety for both home and business users.

Key Points of the TP-Link Investigation

• Market Dominance: TP-Link controls about 65% of the U.S. market for home and small business routers .

• Government Usage: TP-Link routers are deployed across federal agencies, including the Department of Defense and NASA .

• Cybersecurity Concerns: Reports suggest Chinese hackers have compromised thousands of TP-Link routers to launch attacks on Western organizations .

• Pricing Strategy: The DOJ is examining whether TP-Link’s below-market pricing strategy violates antitrust laws .

Potential Implications of a TP-Link Ban

If a ban on TP-Link devices is implemented, the U.S. router market could face major disruptions. A policy shift may happen as early as next year under the new administration . Such a move would leave millions of U.S. households and businesses searching for alternative router solutions.

Security Risks and Vulnerabilities in TP-Link Routers

• Hacking Reports: Microsoft confirmed that a Chinese hacking group used compromised TP-Link routers in attacks on North American and European organizations .

• CISA Alerts: The U.S. Cybersecurity and Infrastructure Security Agency identified vulnerabilities in TP-Link devices that could allow remote code execution .

• Persistent Flaws: Researchers note that TP-Link routers often ship with unpatched security flaws, drawing criticism over poor vendor response .

How to Check if Your Router is Compromised

With router-based cyberattacks becoming more common, it’s important to detect signs of compromise early. Look out for:

• Unexplained slow internet speeds

• Difficulty logging into your router’s admin settings

• Browser redirects to strange websites

• Suspicious network activity during unusual hours

• Unknown devices connected to your network

• Unfamiliar software appearing on connected devices

Steps to Check Your Router

1. Log into your router’s admin panel and review logs for suspicious activity .

2. Check the device list for unknown or unauthorized entries .

3. Verify DNS settings to ensure they haven’t been changed .

If you suspect a compromise:

• Change the administrator password immediately.

• Update your router’s firmware to the latest version.

• Consider performing a factory reset for a clean start .

Final Takeaway: Protecting Your Network

The TP-Link controversy adds to growing concerns about router security and foreign-manufactured hardware. Regardless of brand, users should take proactive cybersecurity measures, keep firmware updated, and regularly monitor their networks for suspicious behavior.

Staying informed ensures that both home networks and businesses remain protected against evolving cyber threats.

---

References

Slashdot – U.S. Weighs Banning TP-Link Routers
Reuters – U.S. Considers Ban on TP-Link
NordVPN – Router Malware
Business Insider – TP-Link Pricing Debate
Ars Technica – U.S. Weighs Ban Over Security Concerns
Netgear Community – Has My Router Been Hacked?
Asia Financial – TP-Link Ban Report
CBS News – TP-Link Router Ban Considered
Keeper Security – Signs of Hacked Router
BleepingComputer – U.S. Considers Ban on TP-Link

_________________________

Please buy a coffee at the link below for our excellent editor Ava Gozo 

 

 

 

 

 

 

 

Technology: What Is the Tech Stack?

A Tech Stack is the collection of technologies that powers modern websites, applications, and digital businesses. Whether developing software, launching SaaS, or deploying cloud solutions, understanding tech stacks is important for building technology platforms. In this blogpost, learn about tech stack layers, vendor examples, and why choosing the right stack matters for businesses.

Ethics: Moral Ambivalence - Former CIA Agent Discusses Providing CSAM as a "Specialized Gift" to Foreign Targets

Andrew Bustamante states that he and his wife are former CIA agents. He has posted many videos and been interviewed widely on YouTube where he describes his exploits and explains some CIA operations.

In the following excerpt from a video (https://www.youtube.com/watch?v=LkOwKkivJ1E) he describes how the CIA would facilitate CSAM as a "specialized gift" to foreign targets who wanted it.

Leadership: The Dark Side of Leadership and Accountability: The Ethics of Plausible Deniability

Plausible Deniability

Plausible deniability is the capacity of an individual—often a senior official or leader—to credibly deny knowledge of or responsibility for illicit or unethical actions carried out by subordinates or associates, due to a lack of direct evidence linking them to those actions. The denial remains "plausible" because the circumstances or absence of proof prevent conclusive attribution, even if the individual was involved or willfully ignorant. This practice often involves deliberately structuring relationships and communications to ensure deniability, enabling those in authority to escape blame or legal consequences if activities are exposed.

Examples

Creating plausible deniability in the context of information technology and digital forensics may involve technical mechanisms or strategies that enable a person to credibly deny knowledge of, or control over, certain data or actions. Examples include:

• Deniable Encrypted File Systems: Software such as VeraCrypt enables users to create hidden encrypted volumes within other encrypted containers. If compelled to reveal a password, a user can provide access to the “outer” volume while denying the existence of the “hidden” one. The existence of the hidden volume typically cannot be proven through standard forensic methods if configured correctly.
• Hidden Operating Systems: VeraCrypt also supports the creation of a hidden OS within an encrypted partition. If a device is seized, the user can provide credentials for the decoy OS while maintaining plausible deniability about the hidden OS. Forensic detection becomes difficult if the hidden OS leaves no traces outside its partition.
• Deniable Communication Protocols: Messaging solutions like Signal employ deniable authentication. Even if a transcript of communications is captured, it may be difficult for a third party to decrypt and prove who authored or participated in a conversation.
• Anonymous Accounts: The creation and use of anonymous online accounts and pseudonymous email addresses allow users to plausibly deny authorship or control of content, as nothing is directly tied to their real identity if all technical precautions are maintained.
• Obfuscation and Metadata Removal: Removing or falsifying metadata from documents, images, or other digital evidence can make attribution of authorship or origin difficult, supporting plausible deniability for content creators or transmitters.

These methods can be used to protect privacy and sensitive data, but they can also be abused to frustrate investigations and provide cover for illicit activity.

Challenging and Disproving Denials

Plausible deniability can be legally challenged or disproved in some situations, particularly when there is sufficient evidence to show that a person in authority did, in fact, have knowledge of or involvement in the questionable actions. Common scenarios in which plausible deniability fails or is overcome in court include:

• Direct or Circumstantial Evidence: If investigators or prosecutors uncover direct evidence (such as emails, messages, recorded conversations, or documents) tying the individual to the actions, deniability collapses. Even strong circumstantial evidence can establish knowledge or intent, undermining plausible deniability.
• Command Responsibility Doctrine: In military, law enforcement, or organizational contexts, leaders can be held legally responsible for the actions of subordinates if they knew or should have known about illegal acts and failed to prevent or punish them. Plausible deniability is not a defense if it can be shown that an official intentionally remained ignorant or deliberately failed to supervise.
• Willful Blindness: Courts may challenge claims of plausible deniability if they find that a person “deliberately avoided” acquiring knowledge, a doctrine known as willful blindness. A person cannot escape liability simply by intentionally avoiding learning about potentially illegal activities.
• Patterns of Conduct: Repeated patterns of behavior, communication, or organizational structure can indicate a deliberate attempt to insulate higher-ups from information while still enabling or authorizing misconduct.
• Pleading Standards in Civil Cases: Under modern pleading standards (see Twombly, Iqbal), allegations must be plausible, not just possible. If a plaintiff presents enough factual content to allow an inference that the defendant was aware or involved, plausible deniability can be challenged at the motion to dismiss stage.
• Legal Precedents: In cases such as Ashcroft v. Iqbal, the U.S. Supreme Court addressed whether defendants could be held liable if they were aware of subordinates’ actions, even if they denied direct involvement. The courts look for factual allegations that make liability plausible, not just possible.

Ashcroft v. Iqbal

In Ashcroft v. Iqbal (2009), the U.S. Supreme Court addressed what makes government officials’ liability claims “plausible” rather than merely possible. Javaid Iqbal alleged that officials, including former Attorney General Ashcroft and FBI Director Mueller, discriminated against him after 9/11. Iqbal lost at the Supreme Court. The Court held that Iqbal’s complaint did not contain enough specific factual content to plausibly suggest that Ashcroft and Mueller personally adopted discriminatory detention policies after 9/11. The Court found that Iqbal’s claims were based mostly on general accusations and lacked specific factual content tying Ashcroft and Mueller to unconstitutional conduct. The Court ruled that plausible deniability could hold if a complaint alleges only that high-level officials “knew of, condoned, and willfully and maliciously agreed to subject” someone to abuse “as a matter of policy.” The complaint must contain enough factual content to plausibly suggest a direct link, not just a possible inference, to overcome denials and survive a motion to dismiss. Plausible deniability is therefore protected unless the assertions are substantiated by facts allowing a reasonable inference of personal responsibility.

Summary

In summary, plausible deniability is not absolute—legal systems have developed doctrines and standards (such as command responsibility, willful blindness, and specific pleading requirements) to pierce denials when sufficient evidence exists that a person knew of or participated in the conduct in question.

Associated Resources

• Studies discussing paradoxical leadership behavior, which often touches on the dark side of leadership and accountability, appear in peer-reviewed leadership and organizational psychology publications. See: Lee, A., Lyubovnikova, J., Zheng, Y., & Li, Z. F. (2023). Paradoxical leadership: A meta-analytical review. Frontiers in Organizational Psychology, 1, 1229543. https://doi.org/10.3389/forgp.2023.1229543

• The doctrine of “command responsibility” is an important subject in legal scholarship, especially in international law and military law reviews. See: Chantal Meloni, Command Responsibility: Mode of Liability for the Crimes of Subordinates or Separate Offence of the Superior?, Journal of International Criminal Justice, Volume 5, Issue 3, July 2007, Pages 619–637, https://doi.org/10.1093/jicj/mqm029

• Scholarly discussions of deniable communication and the ethics of denial in both legal and interpersonal contexts are found in: Bonalumi, F., Bumin, F. B., Scott-Phillips, T., & Heintz, C. (2023). Communication and deniability: Moral and epistemic reactions to denials. Frontiers in Psychology, Volume 13-2022. https://www.frontiersin.org/journals/psychology/articles/10.3389/fpsyg.2022.1073213

• Foundational legal analysis for willful blindness and command responsibility can be found in discussions of U.S. v. Jewell, Ashcroft v. Iqbal, and Twombly v. Bell Atlantic Corp. See legal journals and Supreme Court case analyses for detailed precedent.

______________________________________