Netsec @NetsecSE

Bank-grade Security - Next Gen Thought Leader Stockholm, Sweden Joined June 2017

Tweets

496
Followers

145
Following

788
Likes

2K

Netsec @NetsecSE

7 months ago

@TenantIQ checklist

1 0 1 25 0

View Details

@fabian_bader @N805DN Do you know if CA policies can be set to only allow TAPs for 1) Pwd/MFA resets and 2) Autopilot fresh machine and set up WHfB? (Don't see why you would ever want to allow TAPs for anything else)

1 0 0 71 0

View Details

Netsec @NetsecSE

2 years ago

@stokfredrik Are you on YesWeHack?

1 0 0 131 0

View Details

Netsec @NetsecSE

2 years ago

@weggles @SwiftOnSecurity Victim blaming users for clicking links is ridiculous and a misdirected effort of spreading "awareness".

0 0 5 341 0

View Details

Netsec @NetsecSE

2 years ago

@HackingLZ But if someone snatches passwords via some infostealer having yearly password rotations is a very very slim mitigation for lacking MFA. On average the attacker will have 6 months to use that password. MFA is a must for everything unless access is severely limited somehow.

1 0 8 347 0

View Details

Netsec @NetsecSE

2 years ago

Windows Server 2028 will include mandatory "Azure NTP", giving you modern cloud time sync capabilities for only $1/month/server.

CJ @N805DN

2 years ago

So long WSUS! Hope everyone has $5/month/server in their budget for Azure patch management. A service that previously was available for $0/server through Azure Automation. techcommunity.microsoft.com/t5/windows-it-…

0 0 0 203 0

0 0 0 76 0

View Details

Netsec @NetsecSE

2 years ago

@PyroTek3 @MCTTP_Con Fantastic, thanks!

0 0 0 147 0

View Details

Netsec @NetsecSE

2 years ago

@fabian_bader @JanVidarElven Any video available?

1 0 0 40 0

View Details

Netsec @NetsecSE

2 years ago

@duanegran @wimremes Don't think the question refers to TOTP (which is an open standard), but to the 2-digit code used when doing passwordless sign in with MS Authenticator.

1 0 1 65 0

View Details

Netsec @NetsecSE

2 years ago

@HackingLZ I understand why those titles are red flags for him since they are usually the type of people most able to see through the type of junk he seems to peddle.

0 0 16 1K 0

View Details

Netsec @NetsecSE

2 years ago

@coulls @SwiftOnSecurity This doesn't filter for binaries but will include all files file writes MDE registers. Also only shows most recent file during the time window of the search. Not first time ever a file was seen.

0 0 0 46 0

View Details

Netsec @NetsecSE

2 years ago

@WellKnitTech @GossiTheDog Yeah. I'm not affected, just pointing out that a cyber insurance can potentially cover various types of outages, not only those due to attacks. But considering the scale I have a feeling insurance companies will find ways to avoid payments.

1 0 1 67 0

View Details

Netsec @NetsecSE

2 years ago

@WellKnitTech @GossiTheDog Cyber insurances can cover various outages and disruptions, not only attacks.

1 0 3 129 0

View Details

Netsec @NetsecSE

2 years ago

@0x44dt Could you specify the SMTP part? You got outbound connection from target?

0 0 0 243 0

View Details

Netsec @NetsecSE

2 years ago

@jeremymoskowitz @MEM_MVP Would requiring third party kernel drivers to be written in Rust be an unreasonable ask? (Know this would only solve one type of bugs, but still)

0 0 0 140 0

View Details

Elli @ellishlomo

2 years ago

While #CrowdSrtike had a massive outage, CISOs and many security managers asked me about delaying updates in Microsoft Defender. This article discusses these possibilities in MDAV and MDI. Still, you should decide what is best for your organization and technological environment. cyberdom.blog/2024/07/20/mic…

4 22 114 12K 76

View Details

Netsec @NetsecSE

2 years ago

@jfslowik Well, see lots of articles blaming MSFT for the CRWD issues. Azure was bad but at least fixed by MS themselves.

0 0 2 477 0

View Details

Netsec @NetsecSE

2 years ago

@JimSycurity @SamErde Good point. I guess setting prod servers to 'Critical' and most pre-prod to 'Current Channel (Broad)' with a few at '(Staged)' could be good. Hope is that MS would identify and fix bad updates before reaching our servers.