We all make the same mistakes. We all introduce the same vulnerabilities. When we see multiple issues, similar issues, from multiple vendors it is a good time to check for those same issues in our own environment. Today’s example: Google making GSuite passwords available in cleartext.
Watch more videos on my YouTube channel.
A vulnerability in WhatsApp allows attackers to take over phones with the app. Sure, we can only run trusted software on our trusted devices. But what happens when that software gets compromised?
http://bit.ly/2JkbLRa
Watch more videos on my YouTube channel.
Criminals are taking advantage of an unpatched vulnerability in SharePoint. This brings up the topic of what’s more secure: in the Cloud or on-premise IT?
http://bit.ly/2WCuU3K
Watch more videos on my YouTube channel.
Watching the Kentucky Derby and thinking about horse racing as a metaphor for organizational IT security. Also, Continuous Monitoring should have been the winning horse’s name.
Watch more videos on my YouTube channel.
TheLadders setup all user data in an AWS ElasticSearch database. Then, made sure there was no password required. Whoops. This exposed some 13 million people’s data, and has me thinking about the risk of unused Web services.
Watch more videos on my YouTube channel.
Time is a signal of trust. New? We can trust it a lot. Been going for some time? Anything could have happened, so we trust less. Right then. How to use this in security?
Watch more videos on my YouTube channel.