Steve Sims retweeted
I think it’s important to provide candid, even critical, feedback on topics of national security. But I don’t ever want to imply that the various govt agencies and the people at them are not genuinely amazing human beings trying really hard to do good in often hard situations
Steve Sims retweeted
The greatest lie the Devil ever told is that you can simply automate your compliance.
Steve Sims retweeted
mom: l was sent a jif.
me: no mom, it’s gif.
mom: but this person pronounced it jif.
me: don’t trust people who pronounce gif as jif.
Steve Sims retweeted
No the White House notice isn’t really actionable for cybersecurity professionals and yes many are already tired, but it’s still significant and cybersecurity personnel are not necessarily the core audience. I’m not sure they had many better options than to publish what they did.
Steve Sims retweeted
#Okta:
1. Share the information internally.
2. Collect and retain related logs.
3. Hunt logs for bad.
4. Rotate Okta privileged passwords.
5. Move on unless Okta reaches out to you that you are involved. Adjust DFIR to their context.
That’s about all you can do right now.
Two factor or bust. Also reset your passwords. I’m really hoping I don’t have to give the update your firmware advice still.
Hackers leak passwords for 500,000 Fortinet VPN accounts - @LawrenceAbrams
bleepingcomputer.com/news/se…
