Infosec quotes - SCCm admin

@enigma0x3 says 

“... you can cause SCCM to send you the NTLMv2 hash of the domain service account used to install the SCCM agent. SCCM requires that this account have local admin on all endpoints it manages...”

https://twitter.com/enigma0x3/status/961394841581178881 

Infosec quotes - Russia defense

“... The Russian operation was part of a cyberespionage campaign to steal secrets from across the U.S. defense industry...”

https://apnews.com/cc616fa229da4d59b230d88cd52dda51 

Infosec quotes - rackspace phishing

Watch for phishing emails spoofing Rackspace 

https://twitter.com/malware_traffic/status/961047680876273669 

Infosec quotes - Microsoft compliance manager

@curi0usjack says  “... One of my favorite tools of all time: Microsoft Security Compliance Manager. MS's hardened security GPOs by OS/role. Need a secure GPO fast? This is the tool you need. Also free...”

https://technet.microsoft.com/en-us/solutionaccelerators/cc835245.aspx

Infosec quotes - video credit card skimmer install

Video of attacker installing Credit card slimmer at Aldi grocery store 

https://krebsonsecurity.com/2018/02/would-you-have-spotted-this-skimmer/ 

Infosec quotes - w2 phishing scams

Don't fall for this

“... email scheme pretends to be from company executives and requests personal information about employees, and uses the cover of tax season and W-2 filings to deceive people into sharing personal data...”

https://www.databreaches.net/pittsburgh-employees-notified-after-their-w-2-data-stolen-in-phishing-scheme/

Infosec quotes - amazon s3 bucket exposed

Dejavu 

- unsecured S3 bucket 

- password hashes

- critical internal files 

- production database backup

- poor Incident response

https://threatpost.com/leaky-amazon-s3-bucket-exposes-personal-data-of-12000-social-media-influencers/129810/