Infosec quotes - security before go live

Make sure you consider security at all stages of a project or system change so that’s its setup secure from the get-go. If you don’t consider security until after go-live, then it's too late.

“...Alteryx said in its response that it has ‘secured the bucket, removed the file’...”

#infosec

https://wccftech-com.cdn.ampproject.org/c/s/wccftech.com/massive-data-leak-affects-american-households/amp/

Infosec quotes - trickbot LAPS

GPO administrators better have moved to LAPS and removed the passwords from sysvol by now.

@gossithedog says “... This strikes me as important development in Trickbot...SYSVOL allows scheduled tasks to be pushed out to all workstations, and you can pull admin creds out of the XML files....This looks like further lateral movement development happening...”

https://mobile.twitter.com/gossithedog/status/943810360183844866

Infosec quotes - emotet vs AV

"...Emotet Banking Trojan Outsmarts 75% of All Antivirus Software..."

https://themerkle-com.cdn.ampproject.org/c/s/themerkle.com/emotet-banking-trojan-outsmarts-75-of-all-antivirus-software/amp/

Infosec quotes - grouppolicy passwords

@pyrotek3 says “Credentials in Group Policy Preferences are not securely stored. Please don't do this.”

https://adsecurity.org/?p=2288

Infosec quotes - cpu spikes

Wondering why your web server CPU spikes when you have no traffic? Are you fully patched?

One possibility for the spikes could be a bitcoin miner! Attackers want to hack your website, not just to steal your data or host malware , but also now to hide a bitcoin miner on your server.

https://community.rsa.com/community/products/netwitness/blog/2017/12/21/zealot-campaign-for-monero-mining

Infosec quotes - admin internet access

Don’t give your administrative account internet access. It's a great way to do something by mistake and grant an attacker admin rights inside your company. Use your non-privileged account for accessing the Internet.

Infosec quotes - what you can handle

... You are in a remarkably better position saying "I can only handle these security tasks right now" than you are saying "don't worry, we've got all this covered”...

#infosec

https://www.linkedin.com/feed/update/urn:li:activity:6349709488974548992