Stark Technology

Managed IT, networks, cybersecurity and Nexus for businesses. Call [phone]

[Stark Technology @StarkTechEG]

03:14. A server disk crosses 92% and nobody is awake. With Stark Managed IT, someone is watching: monitoring, patching, backups and a real service desk.

Call [phone]
https://t.co/0cO6C1GKXn
#ManagedIT #ITSupport #MSP

[Stark Technology @StarkTechEG]

@HPE_Networking With NAC the hard part is usually the unmanaged devices: printers, cameras, badge readers. Run it in monitor mode for a few weeks, profile everything that connects, put those devices in their own VLANs, then switch on enforcement.

[Stark Technology @StarkTechEG]

@kaspersky For CVE-2023-24932 the update alone isn't enough: the KB5025885 mitigations (new boot manager + DBX revocation) must be applied manually. Check Secure Boot is on with Confirm-SecureBootUEFI, and pilot first: old recovery media won't boot after the revocation.

[Stark Technology @StarkTechEG]

@InfosecurityMag A low-risk way in: start agents on read-only triage (enrich each alert with asset owner, recent sign-ins and open vulns) and keep containment actions behind a human approval until you have measured their accuracy for a few weeks.

[Stark Technology @StarkTechEG]

Ransomware goes after your backups too. An immutable copy can't be changed or deleted, even by an admin. And we test the restore.

Call [phone]
https://t.co/WpY5zBwiyr
#Ransomware #Backup

[Stark Technology @StarkTechEG]

Who is in today? Nexus People reads your ZKTeco and Hikvision terminals and the exports from their software. People in the field check in from the Nexus phone app,…

Full episode: https://t.co/8sEitH3MTk
#NexusPeople #HRSoftware

[Stark Technology @StarkTechEG]

@FortiGuardLabs If you self-host Jira, Confluence or Bitbucket Data Center, check your version against the advisory today and keep it behind VPN or an IP allow-list until patched. Then search the access logs for unusual file-path requests since disclosure.

[Stark Technology @StarkTechEG]

@Fortinet @NVIDIAAI Before an agent goes live, write down every system and API it can call and what it is allowed to change. Give it its own identity with only those permissions, and log each tool call so you can replay what it did.

[Stark Technology @StarkTechEG]

@Veeam Practical start: tag every database and storage bucket with an owner and a data classification. Then "public link on a bucket tagged confidential" is an alert someone acts on, while the same finding on a test bucket can wait.

[Stark Technology @StarkTechEG]

A wrong default gateway breaks everything beyond your own network. A duplicate IP sends frames to whichever device answered ARP last. When a device comes and goes, look…

Full episode: https://t.co/8HRNQJQjaP
#Networking #ARP

[Stark Technology @StarkTechEG]

Don't chmod 666 docker.sock: every account on the machine gets Docker. Use the docker group.

Full episode: https://t.co/NxrGuLP7Ks
#Docker #Linux #shorts

[Stark Technology @StarkTechEG]

The server is gone. How long until you are back? A DR plan answers that before the day you need it, and it is tested.

Call [phone]
https://t.co/szWYaDvTOt
#DisasterRecovery #BusinessContinuity

[Stark Technology @StarkTechEG]

The annual review should not be a surprise. Nexus People: KPI scorecards, manager reviews and learning plans, all year.

Call [phone]
https://t.co/Si6GGdJdRw
#Nexus #PerformanceManagement

[Stark Technology @StarkTechEG]

Your laptops leave the office every evening. Endpoint protection, disk encryption and updates managed centrally, wherever they are.

Call [phone]
https://t.co/cnpOIZKcqn
#CyberSecurity #EndpointSecurity #ManagedIT

[Stark Technology @StarkTechEG]

Is she on leave, or just late? Nexus People: leave approved by the manager then HR, against each balance, and shown on the attendance day.

Call [phone]
https://t.co/Si6GGdJdRw
#Nexus #LeaveManagement #HRSoftware

[Stark Technology @StarkTechEG]

@InfosecurityMag @Fortinet A practical start on excess permissions: export role assignments from each cloud tenant and from on-prem AD, then flag admin accounts with no sign-in in 90 days. It is usually a short list and an easy first win.

[Stark Technology @StarkTechEG]

@Fortinet Useful to know the date ahead. Before the window: back up the config, check the supported upgrade path from your current FortiOS build, and on HA pairs confirm both units show in sync before and after the upgrade.

[Stark Technology @StarkTechEG]

@kaspersky @61ack1ynx Quick first step: list every host running PHP and its version (php -v, or the X-Powered-By header on public sites). Patch the internet-facing ones first, and set expose_php = Off so the version isn't advertised.

[Stark Technology @StarkTechEG]

Requests by phone, WhatsApp and the corridor get forgotten. Every request: a reference, an owner and a priority.

Call [phone]
https://t.co/P4pzIe1bog
#ITSupport #ServiceDesk

[Stark Technology @StarkTechEG]

How far does your NDA travel before it is signed? In Nexus People the NDA, the contract, the house rules and the custody receipt are generated from the employee's…

Full episode: https://t.co/8sEitH4kIS
#NexusPeople #HRSoftware

[Stark Technology @StarkTechEG]

@Fortinet When recon-to-impact shrinks, a patch SLA alone isn't enough. Keep a live list of internet-facing assets with versions, so a new CVE maps to exposed hosts in minutes, and pre-approve containment steps the SOC can run without waiting for a change window.