vartaisec

Full range cyber operators. We protect, secure, train, and mature information networks no matter the size or industry.

[vartaisec @vartaisec]

Time tested game plan for reducing the threat surface of your #network. 1) Remove what you don't need 2) Disable what you don't use 3) Add only what is critical 4) Enable only what is necessary. The power of least function and least privilege.#cybersecurity #tipoftheweek #infosec

[vartaisec @vartaisec]

"Analysis of malicious activity throughout the year published in Skybox Security's #2020 Vulnerability and Threat Trends Report says ransomware has thrived in the first half of the year, with a 72% increase."

#cybersecurity #ransomware #pandemic

https://t.co/mzzRRrHf9R

[vartaisec @vartaisec]

Nearly 300,000 #Instacart accounts were found for sale on the dark web. Account details include customer name, email, last 4 digits of their credit card, and order history.Good #cybersecurity hygiene starts at home.

#cybersecurityawareness #safeonline
https://t.co/d652adQfJk

[vartaisec @vartaisec]

"Our new normal is that organizations can no longer have a standard definition and expectation that a workspace is where application access happens," explains Robert McNutt, CTO at Forescout Technologies.

#newnormal #cybersecurity #remotework

https://t.co/0uwiJw6ybF

[vartaisec @vartaisec]

Great in-depth technical write up on the research that went into discovering the SIGRed vulnerability (CVE-2020-1350)

#cybersecurity #infosec #cyberaware #dnssecurity #windows

https://t.co/7vWakcgm4s

[vartaisec @vartaisec]

New #Android #malware that targets more than 300 different applications including #TikTok, #Facebook, #Twitter, #Instagram, #Netflix, and more.

#cybersecurity #cybersecurityawareness #applicationsecurity #infosec #infosecurity #antivirusandmalware

https://t.co/P45CM0d5go

[vartaisec @vartaisec]

Does your company know what it is exposing to the internet? Many companies do not have an accurate asset inventory of hosts/services/applications. You cannot defend what you do not know exists. Know your boundary better than the attackers do.

#cybersecurity #tipoftheweek

[vartaisec @vartaisec]

Organizations should have a plan for introducing devices back into the corporate network, for example a "#quarantine" #network used to triage devices before they are introduced to the production network.

#networksecurity #backtooffice #remotework

https://t.co/1d1jPxGcYQ

[vartaisec @vartaisec]

Vartai speaks with @ITProTV on defending the cyber gate, growing up with IT, and how we perceive threats in 2020.

We had a great time, thanks and can't wait to do it again!

https://t.co/c5sSW6uxY2

#cyber #cybercrime #redteamsec #cybersecuritytraining

[vartaisec @vartaisec]

We're excited for this live stream tonight by @UndercroftHQ at 5:45PM EST "Hacking HTTP Requests with Postman". Tune in! https://t.co/odkcDZqlJ5 #hacking #PenTest #WebApp #burpsuite

[vartaisec @vartaisec]

First post in our Attack Chain Series: Remote Access Service Compromise Part 1 - RDS. We walk through a real-world attack scenario aimed at initial access via remote access services and bypassing internal protections. https://t.co/YEnYSinhNP #PenTest #ActiveDirectory #remotework

[vartaisec @vartaisec]

Check out the Vartai team's intro guide to building a virtual #activedirectory lab complete with trusts and misconfigurations to practice various attacks. https://t.co/zzYuLlcZ1k #pentest #Learningathome #Training

[vartaisec @vartaisec]

Mitigations include:
-Disabling the Preview Pane and Details Pane in Windows Explorer
-Disabling the WebClient service
-Renaming ATMFD.DLL

https://t.co/5VxB4hAgdG

[vartaisec @vartaisec]

Microsoft released an out-of-band patch for the latest SMBv3 remote code execution vulnerability. CVE-2020-0796 #SMBv3 #SMBGhost https://t.co/BPGWXvc5v7 @GreyNoiseIO is noticing probes for vulnerable devices. https://t.co/ohvb4vxTVv

[vartaisec @vartaisec]

Additional tooling for consideration and proactive identification:
https://t.co/5VDUMKvjqW

[vartaisec @vartaisec]

CVE-2020-0796 is a "wormable" RCE flaw in SMBv3. Not actively exploited yet, but no patch has been released by Microsoft. Take precautions and detect with nmap via (https://t.co/vKk1PGYa0Q), or disable SMBv3 compression as temp. workaround Thx! nikallass & @KevinMarquette

[vartaisec @vartaisec]

https://t.co/3syAdQUwQl

[Kevin Marquette @KevinMarquette]

#Powershell: How to Disable SMBv3 Compression with @KevinMarquette https://t.co/OEVk3amq2q

[vartaisec @vartaisec]

https://t.co/xAa2051jwB

[Mouhamadane @yaaba_]

Microsoft Guidance

CoronaBlue/SMBGhost - Microsoft Releases New Advisory on Worm Exploit That Targets SMBv3

https://t.co/ChvrKkt3dQ

SMBv3 Check Script
CVE-2020-0796 Scan HOST/CIDR with nmap script smb-protocols.nse and grep SMB version 3.11.

https://t.co/YkontidX6t

[vartaisec @vartaisec]

Have you forgotten about VoIP, let us show you a few practical techniques we leverage during VoIP penetration testing.

Check out our latest blog post -->
https://t.co/WwVigp3YjE

#CyberSecurity #Pentesting #Hacking #infosec

[vartaisec @vartaisec]

We enjoyed the @TB_Chamber new member orientation yesterday! The environment was friendly and inviting with some great networking. We're looking forward to future events, and helping the Tampa Bay business #community #volunteering #networking #infosec #tampabaychamber #vartaisec