An EDR solution may not be compatible with the OS, but what compensating controls do you have instead? Creating a risk finding to indicate the host has no control in place is great for documentation, but what controls are being leveraged to secure the endpoint?
https://t.co/tf6awflG45
As a Security Operations professional, what steps are you taking to learn about AI security?
Mastery of Prompt Engineering, MLOps, or Deep Learning doesn't automatically translate to SecOps readiness.
What are you doing to keep pace with threat actors and ensure you have the skills to defend against them?
Who has been eavesdropping on satellites??
Over half of satellites have unencrypted data exposing consumers and potentially military communications!
#starlink#tmobile#att
https://t.co/aaTngKT83t
Sounds like two things were going on; 1) misconfiguration exposing public storage, 2) inadequate password management.
What solutions are there for mitigating #1 and #2?
https://t.co/tyZGDNJc7n
In a city drowning in a digital hum, one man's apathy is shattered by a city-wide cyberattack. Is it better to fix a broken world... or burn it all down?
#comicbooks#cybersecuritytips#technoir#Cyberpunk
https://t.co/c2EhJrWegm
Insider threats are just as dangerous as threat actors from the outside. Potentially even more so.
Security analysts may be the ones to investigate or a dedicated Insider Risk team demonstrating the extensive role offerings in #Cybersecurity
https://t.co/ZVYVdZT8Vm
Vulnerable satellites? Physical access might be difficult for threat actors, but the potential for legacy Operating Systems and networks communicating with old satellites could be exploited.
#safespace#cybercrime
https://t.co/vOaUslUK9n
A critical part of Active Directory security is regularly reviewing your AD admins. The simplest way to do this is to recursively enumerate the membership of the domain Administrators group (that group's members and all member group members). PowerShell code shown below.
Check the AD Admins output for the following:
* Are all the admin accounts associated with people expected?
* Are there service accounts that shouldn't require AD admin rights (VMware, Exchange, LDAP, VPN, Sharepoint, etc.)?
* Are the associated passwords current? Are they as expected with no outliers (all within 2 years but one has a password that's 10 years old)?
* Has the default domain Administrator account logged on recently? Is that expected/known?
* Are all accounts enabled? Disabled accounts should be removed from being an AD Admin.
* Do all accounts require Kerberos preauthentication? They must if they are AD admins.
* Do any use Kerberos DES? If so fix that.
* Are any set to never expire their password? Is that expected? Accounts with this set rarely change their password.
* Are there any passwords in Active Directory user attributes (commonly description notes/info, Exchange custom attributes, etc.)? Practically all of the attributes are visible to users.
PowerShell code (using AD PS modules):
[array]$ADAdminArray = Get-ADGroupMember -Identity 'Administrators' -Recursive
$ADAdminPropertyArray = @()
ForEach($ADAdminArrayItem in $ADAdminArray)
{ [array]$ADAdminPropertyArray += Get-ADUser $ADAdminArrayItem.DistinguishedName -Prop * }
$ADAdminPropertyArray | Sort SamAccountName | Select SamAccountName,PasswordLastSet,LastLogonDate,Enabled,DoesNotRequirePreAuth,UseDESKeyOnly,PasswordNeverExpires | Format-Table -AutoSize
#ActiveDirectorySecurityTip
We've consolidated our services ensuring you have the support you need to launch a career in cyber security.
Find Your Way to Cyber!!
#CareerOpportunity
https://t.co/yH6BNaK1Nb
@TheHumanoidHub Sometimes the Google Home speakers won't stop activating and answering random questions. How is a humanoid robot going to function at home?
Feeling stuck in a job that lacks impact? Cyber security is more than a tech career; it's a mission. Every day, you're on the front lines protecting businesses, hospitals, and people from real-world threats. Ready to do work that matters?
#CareerChange#CyberSecurity
#MeaningfulWork