Did you think it would never happen? Microsoft and Linux are increasing in their ties to each other. So as we protect systems in our networks, we are increasingly incorporating Linux systems for various reasons, Web servers, specific SQL server database needs or other reasons (file sharing or other support systems). A potential threat vector … Read more
So we all must have an Incidence response plan, which is only used after a computer security problem: Detect problem Investigate problem What type of the threat to the business? Does it rise to level of “Breach”? With significant legal disclosure requirements Did the attackers steal information/data? We know practice makes perfect, but how … Read more
So the Defense (also known as Blue team) has been inundated with spam, the goal of the spam(for the hackers) is for an unsuspecting user to give up their credentials(username and password). Hackers are always trying to get your usernames and passwords. Opening a word document? What if it included a small file that is … Read more
An interesting video from RSA Conference 2018: “There’s no such Thing as a Cyber-risk” So if you look at possible risk domains Computer Security (or Cybersecurity is not on there. Operations: errors – fraud – talent – employee engagement – safety Service Availability: capacity, resiliency, data integrity, intentional disruption Product delivery: pre-executions – release executions … Read more
We say things like: DO NOT CLICK ON Phishing emails!! But then Equifax creates www.experianidentityservice.co.uk ??? or creditexpert.co.uk/login/login Bsides in London earlier this year had a presentation by Meadow Ellis (@notameadow). Meadow makes a good point, as we as Cybersecurity professionals ask users to be careful what you click, and then somebody in the company … Read more
