Malwarebytes

OCTOBER 22, 2021

It’s widely known, and endlessly repeated, that the last, best line of defence against the potentially devastating effects of a ransomware attack is your backups. Ski Kacoroski, System administrator, Northshore School District. Why do backups fail? This is what we learned from Crape: Backups are difficult.

Backups 88

Backups Ransomware System Administration DNS 88

Krebs on Security

JULY 14, 2020

Top of the heap this month in terms of outright scariness is CVE-2020-1350 , which concerns a remotely exploitable bug in more or less all versions of Windows Server that attackers could use to install malicious software simply by sending a specially crafted DNS request. Thankfully, I was able to restore from a recent backup.

DNS 282

DNS Backups System Administration Software 282

eSecurity Planet

MARCH 21, 2022

Inactive Accounts and Default Configurations. Hackers gained initial access by brute-forcing an existing account via “a simple, predictable password” to enroll a new device in the MFA procedures, the agencies said. MFA was automatically disabled because the account was inactive for a long period.

VPN 117

VPN Accountability Authentication Passwords 117

eSecurity Planet

MARCH 25, 2022

A few days later, IT systems started malfunctioning with ransom messages following. The system administrator did not configure standard security controls when installing the server in question. Meanwhile, the suspect server was connected to the CDOT domain with an administrator account and the internet.

VPN 120

VPN Software Authentication Encryption 120