eSecurity Planet

FEBRUARY 15, 2022

The agencies offered some sound cybersecurity advice for BlackByte that applies pretty generally: Conduct regular backups and store them as air-gapped, password-protected copies offline. Audit user accounts with administrative privileges and configure access controls with least privilege in mind, and use multifactor authentication.

Ransomware 117

Ransomware Encryption Backups Accountability 117

NopSec

MARCH 16, 2020

Once you understand which systems form your telework attack surface ask yourself which vulnerabilities and misconfigurations they have. First of all, ask yourself whether all your remote working systems and related directory services they are tapping into have adequate password length policy, password expiration,and username randomization.

VPN 40

VPN Accountability Risk System Administration 40

eSecurity Planet

SEPTEMBER 10, 2021

What authentication methods does the provider support? The fourth biggest threat to public cloud security identified in CloudPassage’s report is unauthorized access (and growing – 53 percent, up from 42 percent in 2020). What are the results of the provider’s most recent penetration tests? Train your staff.

Penetration Testing 106

Penetration Testing Encryption Risk Technology 106

Security Affairs

JUNE 2, 2020

Researchers disclosed a flaw in VMware Cloud Director platform, tracked as CVE-2020-3956 , that could be abused to takeover corporate servers. The vulnerability could potentially allow an authenticated attacker to gain access to corporate network, access to sensitive data, and control private clouds within an entire infrastructure.

System Administration 88

System Administration Accountability Advertising Authentication 88

Malwarebytes

APRIL 21, 2021

Cybersecurity sleuths Mandiant report that they are tracking “12 malware families associated with the exploitation of Pulse Secure VPN devices” operated by groups using a set of related techniques to bypass both single and multi-factor authentication. CVE-2020-8243 a vulnerability in the Pulse Connect Secure < 9.1R8.2

VPN 74

VPN Authentication Malware System Administration 74

IT Security Guru

APRIL 12, 2022

There are a few notable exploited misconfigurations, from default built-in file sharing, and lack of password enforcement, albeit no password to multi-factor authentication (MFA), to the risks of legacy protocols and OAuth apps, that can bring a little clarity to understanding the complex landscape that is a company’s SaaS security posture.

CISO 102

CISO Passwords Marketing System Administration 102

eSecurity Planet

MARCH 25, 2022

RDP intrusions are typically the result of two attacker methods: brute force authentication attempts or a meddler-in-the-middle (MITM) attack. Remote desktop software’s sensitive influence over other devices means identity and access management (IAM), password security , and multi-factor authentication are critical for risk management.

VPN 111

VPN Software Authentication Encryption 111

CyberSecurity Insiders

SEPTEMBER 21, 2021

Authentication and password management. Passwords are one of the least safe user authentication methods, yet they are also frequently used for web applications for safeguarding online data. Authentication is the procedure of confirming that a person, organization, or site is who they say they are.

Authentication 79

Authentication Passwords Software Accountability 79

eSecurity Planet

DECEMBER 3, 2021

Normally account take overs are due to insecure passwords or recovery options, this is definitely something different. — Dave Kennedy (@HackingDave) July 15, 2020. link] pic.twitter.com/cVIyB44o6q — Eugene Kaspersky (@e_kaspersky) June 22, 2020. — Parisa Tabriz (@laparisa) January 26, 2020. Ingenious!

Accountability 134

Accountability Cybersecurity Penetration Testing InfoSec 134

Malwarebytes

AUGUST 18, 2021

At the WWDC 2020, Apple made a big deal of several new macOS and iOS features that were, in fact, big deals. The major new security features that would debut in macOS 11 were: Pointer Authentication Codes (PAC) , hardware-enforced Call Flow Integrity (CFI), implemented by Apple’s homegrown 64 bit ARM processor, the M1.

Firmware 142

Firmware Architecture Risk Engineering 142

Security Boulevard

JUNE 20, 2022

On December 15, 2020, Microsoft published their new revised version of Securing Privileged Access on Microsoft docs, including the Enterprise Access Model, which encompasses both on-prem, Operational Technology (OT), Azure, and other cloud providers. They recommend tiered administration with dedicated admin accounts.

Accountability 52

Accountability Risk Authentication Passwords 52