Your Next Move: Systems Administrator
CompTIA on Cybersecurity
MAY 3, 2022
If you are interested in working with the day-to-day operations of computer networks, a career as a systems administrator could be your next move.
System Administration Related Topics 
How a Systems Administrator Role Preps You for a Cybersecurity Career
CompTIA on Cybersecurity
JULY 30, 2021
IT Security Specialist Jason Hernandez believes systems administration is valuable experience for IT pros – especially for those interested in cybersecurity.
Join 10,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Webinars
The Power of Storytelling in Risk Management
ERM Program Fundamentals for Success in the Banking Industry
Trending Sources
Security BSides Dublin 2021 – Jayme Hancock’s ‘Weaponizing Systems Administration: Leveraging IT Skills In Penetration Testing’
Security Boulevard
FEBRUARY 5, 2022
The post Security BSides Dublin 2021 – Jayme Hancock’s ‘Weaponizing Systems Administration: Leveraging IT Skills In Penetration Testing’ appeared first on Security Boulevard.
Security BSides Dublin 2021 – Jayme Hancock’s ‘Weaponizing Systems Administration: Leveraging IT Skills In Penetration Testing’
Security Boulevard
JUNE 13, 2021
The post Security BSides Dublin 2021 – Jayme Hancock’s ‘Weaponizing Systems Administration: Leveraging IT Skills In Penetration Testing’ appeared first on Security Boulevard. Our thanks to Security BSides Dublin for publishing their outstanding videos on the organization's YouTube channel.
A Comparison Guide to Network Administrator vs. Systems Administrator Roles
USD on Cyber Security
NOVEMBER 10, 2020
It’s true that some terminology — for example, the job titles network administrator and systems administrator — are often used interchangeably. The post A Comparison Guide to Network Administrator vs. Systems Administrator Roles appeared first on University of San Diego.
SolarWinds Detected Six Months Earlier
Schneier on Security
MAY 3, 2023
The software, used by system administrators to manage and configure networks, was communicating externally with an unfamiliar system on the internet. The DOJ asked the security firm Mandiant to help determine whether the server had been hacked.
APT28 Employs Windows Update Lures to Trick Ukrainian Targets
Dark Reading
MAY 1, 2023
The phishing emails were sent using names of system administrators and a letter containing instructions to protect against hackers.
Phishing 
99
99 
Android TV box on Amazon came pre-installed with malware
Bleeping Computer
JANUARY 12, 2023
A Canadian system administrator discovered that an Android TV box purchased from Amazon was pre-loaded with persistent, sophisticated malware baked into its firmware. [.].
Malware 117
117 
NSA shares tips on securing Windows devices with PowerShell
Bleeping Computer
JUNE 22, 2022
The National Security Agency (NSA) and cybersecurity partner agencies issued an advisory today recommending system administrators to use PowerShell to prevent and detect malicious activity on Windows machines. [.].
Toyota Global Supply Chain Portal Flaw Put Hacker in the Driver's Seat
Dark Reading
FEBRUARY 8, 2023
The automaker closed a hole that allowed a security researcher to gain system administrator access to more than 14,000 corporate and partner accounts and troves of sensitive data.
Fired admin cripples former employer's network using old credentials
Bleeping Computer
SEPTEMBER 30, 2022
An IT system administrator of a prominent financial company based in Hawaii, U.S., used a pair of credentials that hadn't been invalidated after he was laid off to wreak havoc on his employer. [.].
Why Enterprise Threat Mitigation Requires Automated, Single-Purpose Tools
The Hacker News
MARCH 14, 2022
As much as threat mitigation is to a degree a specialist task involving cybersecurity experts, the day to day of threat mitigation often still comes down to systems administrators. For systems administrators finding the time and resources to mitigate against a growing For these sysadmins it's not an easy task, however.
What is Traffic Light Protocol? Here's how it supports CISOs in sharing threat data
CSO Magazine
FEBRUARY 22, 2023
Traffic Light Protocol (TLP) was created to facilitate greater sharing of potentially sensitive threat information within an organization or business and to enable more effective collaboration among security defenders, system administrators, security managers, and researchers.
CISO 108
108 
Hackers scan for vulnerabilities within 15 minutes of disclosure
Bleeping Computer
JULY 26, 2022
System administrators have even less time to patch disclosed security vulnerabilities than previously thought, as a new report shows threat actors scanning for vulnerable endpoints within 15 minutes of a new CVE being publicly disclosed. [.].
Yandex security team caught admin selling access to users’ inboxes
Security Affairs
FEBRUARY 12, 2021
Russian internet and search company Yandex discloses a data breach, a system administrator was selling access to thousands of user mailboxes. Russian search engine and internet provider Yandex discloses a data breach, the company revealed that one of its system administrators was caught selling access to 4,887 user email accounts.
Data breaches 143
143 
Chinese Hackers Stole an NSA Windows Exploit in 2014
Schneier on Security
MARCH 4, 2021
Here’s the timeline : The timeline basically seems to be, according to Check Point: 2013: NSA’s Equation Group developed a set of exploits including one called EpMe that elevates one’s privileges on a vulnerable Windows system to system-administrator level, granting full control.
Hacking 249
249 
T95 Android TV Box Delivered to Customer with Pre-Installed Malware
Heimadal Security
JANUARY 13, 2023
A system administrator discovered that the Android TV box bought from Amazon had pre-installed malware. According to him, the box was reaching out to a whole list of active malware addresses. Daniel Milisic is the person who found the malware and announced it on GitHub. He also wrote a script and instructions to assist users […].
Malware 90
90 
FBI warns of escalating Pysa ransomware attacks on education orgs
Bleeping Computer
MARCH 16, 2021
The Federal Bureau of Investigation (FBI) Cyber Division has warned system administrators and cybersecurity professionals of increased Pysa ransomware activity targeting educational institutions. [.].
Ransomware 143
143 
New ESXiArgs Ransomware Variant Emerges After CISA Releases Decryptor Tool
The Hacker News
FEBRUARY 11, 2023
The emergence of the new variant was reported by a system administrator on an online forum, where another participant stated that files larger than 128MB
Ransomware 78
78 
PowerShell: An Attacker’s Paradise
Quick Heal Antivirus
JULY 29, 2022
PowerShell was originally intended as a task automation and configuration management program for system administrators. However, it. The post PowerShell: An Attacker’s Paradise appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.
From Identification To Response: 5 Steps To IT Risk Management
SecureBlitz
FEBRUARY 28, 2022
IT risk management plans help administrators and workers identify possible risks that threaten the network and connecting systems. The administrators are responsible for managing the entire network and working with data systems administrators to protect customer and business data.
Risk 125
125 
Kaseya Releases Patches for Flaws Exploited in Widespread Ransomware Attack
The Hacker News
JULY 11, 2021
Florida-based software vendor Kaseya on Sunday rolled out software updates to address critical security vulnerabilities in its Virtual System Administrator (VSA) software that was used as a jumping off point to target as many as 1,500 businesses across the globe as part of a widespread supply-chain ransomware attack.
Ransomware 142
142 
NSA shares guidance on securing voice, video communications
Bleeping Computer
JUNE 17, 2021
The National Security Agency (NSA) has shared mitigations and best practices that systems administrators should follow when securing Unified Communications (UC) and Voice and Video over IP (VVoIP) call-processing systems. [.].
Yandex suffers data breach after sysadmin sold access to user emails
Bleeping Computer
FEBRUARY 12, 2021
Russian internet and search company Yandex announced today that one of its system administrators had enabled unauthorized access to thousands of user mailboxes. [.].
Data breaches 131
131 
Russia-linked APT28 uses fake Windows Update instructions to target Ukraine govt bodies
Security Affairs
APRIL 30, 2023
CERT-UA observed the campaign in April 2023, the malicious e-mails with the subject “Windows Update” were crafted to appear as sent by system administrators of departments of multiple government bodies. Most of the APT28s’ campaigns leveraged spear-phishing and malware-based attacks.
Phishing 90
90 
Yandex Employee Caught Selling Access to Users' Email Inboxes
The Hacker News
FEBRUARY 12, 2021
The employee was one of three system administrators with the necessary access The company blamed the incident on an unnamed employee who had been providing unauthorized access to the users' mailboxes for personal gain.
Data breaches 145
145 
SysAdmin of Billion-Dollar Hacking Group Gets 10-Year Sentence
The Hacker News
APRIL 17, 2021
A high-level manager and systems administrator associated with the FIN7 threat actor has been sentenced to 10 years in prison, the U.S. Department of Justice announced Friday.
Hacking 141
141 
Getting Up and Running with Windows Autopatch
Dark Reading
JULY 12, 2022
This Tech Tip outlines how system administrators can get started with automated continuous patching for their Windows devices and applications.
Here is why you should have Cobalt Strike detection in place
CSO Magazine
NOVEMBER 28, 2022
The abuse by attackers of system administration, forensic, or security tools that are either already installed on systems or can be easily deployed without raising suspicion has become extremely common. Living off the land is a common tactic.
Indicators of Compromise (IoCs) and Their Importance in Cybersecurity
Heimadal Security
MARCH 1, 2022
When a host system or network is compromised, indicators of compromise (IoCs) are used to gather forensic evidence of the intrusion. Informatics security (InfoSec) experts and system administrators may use these traces to identify infiltration attempts and other possible harmful activities. What Are Indicators of Compromise?
Cybersecurity 105
105 
Researcher compromised the Toyota Supplier Management Network
Security Affairs
FEBRUARY 8, 2023
The expert used the JWT to access the GSPIMS portal and after gaining access to the platform he discovered an account with system administrator privileges. made it easy to find accounts that had elevated access to the system. I eventually uncovered a system administrator email and was able to log in to their account.
Google Glitch Left Passwords Unprotected for 14 Years
Adam Levin
MAY 24, 2019
Google has begun contacting system administrators whose organizations would have been affected by the glitch to encourage them to change their passwords. “[E]ven if it’s only internal it still creates a substantial privacy and security concern,” said TrustedSec CEO David Kennedy to Wired Magazine.
Passwords 247
247 
Kaseya Starts Recovery After REvil Attack
Security Boulevard
JULY 6, 2021
Kaseya is now reporting the software-as-a-service (SaaS) instance of its Virtual System Administrator (VSA) platform will be back online sometime between 4:00 p.m. and 7:00 p.m. It expects the on-premises editions of VSA to be patched within 24 hours after that.
Microsoft asks admins to patch PowerShell to fix WDAC bypass
Bleeping Computer
OCTOBER 18, 2021
Microsoft has asked system administrators to patch PowerShell 7 against two vulnerabilities allowing attackers to bypass Windows Defender Application Control (WDAC) enforcements and gain access to plain text credentials. [.].
Black Hat insights: Getting bombarded by multiple ransomware attacks has become commonplace
The Last Watchdog
AUGUST 15, 2022
Major vulnerabilities left unpatched, as well as weakly configured system administration tools are sure to get discovered and manipulated, not just once, but many times over. Configure system administrative tools more wisely. At this point, there’s little mystery about what companies need to do.
Ransomware 184
184 
Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software
Krebs on Security
JULY 8, 2021
The attackers exploited a vulnerability in software from Kaseya , a Miami-based company whose products help system administrators manage large networks remotely. Last week cybercriminals deployed ransomware to 1,500 organizations that provide IT security and technical support to many other companies.
Ransomware 288
288 
Ghost Blogging Platform Hacked To Mine Cryptocurrency
Adam Levin
MAY 5, 2020
. “The mining attempt… quickly overloaded most of our systems which alerted us to the issue immediately,” the company announced May 3, adding that “[t]here is no direct evidence that private customer data, passwords or other information has been compromised. .
Cryptocurrency 162
162 
SolarWinds Detected Six Months Earlier
Security Boulevard
MAY 3, 2023
The software, used by system administrators to manage and configure networks, was communicating externally with an unfamiliar system on the internet. The DOJ asked the security firm Mandiant to help determine whether the server had been hacked.
NSA Urges SysAdmins to Replace Obsolete TLS Protocols
Threatpost
JANUARY 6, 2021
The NSA released new guidance providing system administrators with the tools to update outdated TLS protocols.
What Security Lessons Can Come From the Kaseya Ransomware Attack?
Security Boulevard
JULY 26, 2021
One of the latest examples in this trend is a ransomware attack on Kaseya’s Virtual System Administrator (VSA) solution for remote monitoring and management (RMM). The post What Security Lessons Can Come From the Kaseya Ransomware Attack? appeared first on Security Boulevard.
Ransomware 112
112 
Log4J: What You Need to Know
Adam Levin
DECEMBER 17, 2021
Unfortunately, there isn’t much that can be done by laypersons; the Log4J vulnerability needs to be addressed and patched by server and system administrators. What can the average internet user do? For now, the best advice is to continue to use best practices and good cyber hygiene and hope for the best. .
Cybersecurity 208
208 
DFSCoerce, a new NTLM relay attack, can take control over a Windows domain
Malwarebytes
JUNE 21, 2022
PetitPotam is an example of an NTLM relay attack that prompted Microsoft to send out an advisory for system administrators to stop using the now deprecated Windows NT LAN Manager (NTLM) to thwart an attack. PetitPotam used the Microsoft Encrypting File System Remote Protocol (MS-EFSRPC) protocol to execute an NTLM attack.
Passwords 133
133 
Vidar Malware Pushed Through Sites Impersonating AnyDesk
Heimadal Security
JANUARY 11, 2023
AnyDesk is used by millions of people worldwide for remote connectivity and system administration […]. More than 1,300 domains that impersonate the official AnyDesk site were found to redirect users to a Dropbox folder that pushes information-stealing malware.
Malware 52
52 
Latest on the SVR’s SolarWinds Hack
Schneier on Security
JANUARY 5, 2021
.” The files distributed to victims in October 2019 were signed with a legitimate SolarWinds certificate to make them appear to be authentic code for the company’s Orion Platform software, a tool used by system administrators to monitor and configure servers and other computer hardware on their network.
Hacking 318
318 
Let's personalize your content