Josh A retweeted
I'm so tired of quarterly password resets. Can we all tell PCI fuck off and accept NIST's policy already and/or move to webauthn so we can just be done with this?
Jake is a great mentor and has some keen insights.
Keep your head up and don't be afraid of failing. As long as you can learn something from the process you are coming out ahead. If you avoid failure you will have a hard time growing.
Finally got a set of my own! Thanks @BHinfoSecurity!
blackhillsinfosec.com/projec…
#CyberSecurity #security #training #cardgames
The @SANSInstitute Cloud Security Solutions Forum is underway. It is not too late to join this FREE resource: There are 7 speaker presentations and a panel discussion.
sans.org/webcasts/cloud-secu…
#CyberSecurity #cloudsecurity #Security #Training
This one hurts. I know we joked about @CentOS going away with @IBM's acquisition but...
Official notice:
blog.centos.org/2020/12/futu…
Josh A retweeted
A few things are painfully obvious to me during the pandemic:
One-size fits all learning isn't working. Kids who did terribly onsite are thriving online and vice versa.
Internet access needs to be a utility and not a luxury.
Remote work is an option for most industries.
Kids complained about high latency playing Fortnite. We recently swapped APs so spent an hour troubleshooting, changing channels, frequencies, swapping cables to AP before realizing that they had accidentally changed their match making region from the US to the Middle East. 🤷🤦♂️
These are interesting times indeed, but has anything really changed?
Josh A retweeted
We don't know who needs to hear this right now, but #defconsafemode is free to attend. You don't have to register. It starts in one week. You should join us.
defcon.org
Josh A retweeted
Stay Calm, and Patch 'Em All!
✅ Microsoft
✅ Cisco
✅ Juniper
✅ Oracle
✅ Zoom
✅ Citrix
✅ SAP
✅ F5
✅ Intel
✅ Adobe
✅ Jenkins
✅ NVIDIA
✅ Apache
✅ Chrome
✅ Android
✅ VMware
✅ Siemens
✅ Rust Lang Crates
✅ Go programming
Happy Patch Week, Everyone.
Josh A retweeted
Microsoft DNS Server vulnerability is wormable! There is a workaround that does NOT require reboot. I suggest applying this ASAP. Most Active Directory environments use Microsoft DNS Server. CVE-2020-1350
support.microsoft.com/en-us/…
Screenshot since it is not loading for some.
Josh A retweeted
Today, we’re happy to announce that Google Cloud VMware Engine is generally available—enabling you to seamlessly migrate your existing VMware-based applications to Google Cloud without refactoring or rewriting them ↓
cloud.google.com/blog/topics…
Check out SANS' DFIR Summit (Summit content is free):
Digital Forensics & Incident Response Summit & Training 2020
sans.org/event/digital-foren…
I am signed up!
VMworld is an awesome event that historically has been quite expensive.
This year the event is online and FREE!
There is an overwhelming amount of content in so many different areas from end user computing to containers to sdwan to security.
VMworld 2020 registration is now open! 48 hours of non-stop innovation await September 29 – October 1: bit.ly/2YXem8S
Josh A retweeted
Imagine if every SIEM adopted a single search query language. You know, like the SQL they all use on the back end?
This is reality. Some of the easiest proactive steps we can take to secure our environments may get dismissed because they are mundane or don't seem fun or interesting.
Replying to @hacks4pancakes
1) Cray cray 0day and theoretical attacks are cool and all, but why are you worrying so hard about them when you still run XP and have 380 undocumented firewall holes?
What do you think the path of least resistance and cost is?




















