Infosec quotes - ROR

“... new metric: reduction of risk (ROR). This addresses the true function of incident response and security tools...”

https://securityintelligence.com/the-enterprise-imperative-five-tips-for-improving-incident-response/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed:+SecurityIntelligence+(Security+Intelligence)&?cm_mmc=OSocial_VoiceStorm-_-IBM+Security+Generic-_-WW_WW-_-135731_LinkedIn

Infosec quotes - lock down Powershell

Good reason your IT Team should lock down and harden Powershell such as enabling logging, restricting it’s internet access, preventing who can use it, etc.  

“...A user receives a typical spam email ... clicks the link ... website then loads Flash which opens Windows PowerShell in memory ... PowerShell downloads and executes a script ... PowerShell locates and sends the user’s data to the attacker...”

https://www.peerlyst.com/posts/fileless-malware-the-undetectable-threat-targeting-your-users-emma-woods?utm_source=LinkedIn&utm_medium=Application_Share&utm_content=peerlyst_post&utm_campaign=peerlyst_shared_post

Infosec quotes - encrypt thumb drive

Good example of why you should encrypt laptop hard drives and thumb drives, no exceptions!

“... A non-encrypted Penn Medicine laptop with personal information of about 1,000 patients was stolen on Nov. 30...”

http://www.thedp.com/article/2018/01/penn-medicine-laptop-stolen-upenn-penn-philadelphia

Infosec quotes - network segmentation

Companies that don’t have the basics in place like network segmentation and patching should make those their top priority.

“... Kitchen said a problem for many companies is that their internal networks are not properly segmented, and lack firewalls, software updates and other precautions to safeguard computers ...”

https://articles-mlive-com.cdn.ampproject.org/c/s/articles.mlive.com/news/kalamazoo/index.ssf/2018/01/phishing_scam_targets_bronson.amp

Infosec quotes - cloud storage

Cloud file storage puts companies at risk.

“... former EHC physician ... uploaded PHI to a University of Arizona College of Medicine Microsoft Office 365 OneDrive account...”

https://itsecuritycentral.teramind.co/2018/01/05/emory-healthcare-reports-data-breach-when-phi-goes-astray/

Infosec quotes - Powershell meltdown

Microsoft released a PowerShell Script to verify if systems are protected from Spectre/Meltdown.

https://support.microsoft.com/en-hk/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in

Infosec quotes - nutanix cve

@ secguru_otx says “... Nutanix has also released update packages to address CVE-2017-5715, 5753 and 5754. My advice is to update your Hypervisors and your Nutanix appliances as soon as possible...”

https://twitter.com/secguru_otx/status/949186379027755008