One way to reduce risk at your company is to teach IT support that if a user asks to install or update software, the correct answer is to help them perform that action ... the answer is NOT to help the user submit a request for Admin rights.
Friday, January 19, 2018
Infosec quotes - back to security basics
“... Spending more time on maturing and measuring fundamental security controls might have helped prevent many of the breaches ... Equifax was compromised by a Web application vulnerability that had an available patch, which the company failed to employ. Too often companies underestimate basic security measures...”
Infosec quotes - Oracle bitcoin miner
Bitcoin mining attackers are even going after your Oracle Servers. Patching is important!
“... Enterprises that failed to install Oracle's critical WebLogic patch last October could find their PeopleSoft and cloud-based servers churning out cryptocurrency, a new discovery shows...”
Infosec quotes - Cisco ios
PoC for CVE-2017-6736 snmp Cisco IOS remote code execution. Patching is a good idea.
Advisory
https://lnkd.in/eTm-9Dt
PoC
https://lnkd.in/eC5qcXA
Infosec quotes - windows updates register
Per @gossithedog “... Microsoft have added the following text to their KB article to clarify that unless the AV compatibility registry key is set, Windows Update will not delivery January's *or all future* security updates...”
Infosec quotes - phish alert
“... Install a ... Phish Alert button in Outlook, so users can simply click on that, delete the email and forward it to your Incident Response team...”
Infosec quotes - word persistence
“... executes at the next start of the Word application which provides a great method of persistence...”
%APPDATA%\Microsoft\word\startup\
Subscribe to:
Posts (Atom)