Application whitelisting best practices can stop malware your antivirus never sees coming, but almost nobody follows them. Dr. Mike Saylor joins Prasanna and me to talk about why, and what it really takes to build an approved software list that sticks. We start with SocGholish, a fake browser update campaign…
Application whitelisting can stop malware your antivirus misses. Dr. Mike Saylor joins us once again to explain why almost nobody does it, and how you can. There's a malware campaign called SocGholish that's been around since 2018. It pops up a message telling your users their browser is out of…
Ransomware gangs demand payment in days, but securing the funds takes a month. Between insurance company involvement and the legal minefield of the OFAC restricted list, navigating a cyber-extortion event is far more complex than movie tropes suggest. #CyberSecurity #Ransomware #DataBreach #InfoSec #RiskManagement
Ransomware negotiations are a high-stakes race against time. From complex insurance involvement to navigating restricted OFAC lists, the process is far more layered than a simple payout. Law enforcement focuses on forensics, leaving the transaction to those willing to take the legal risk. #CyberSecurity #Ransomware #DataProtection #InfoSec #TechInsights
Tech companies often claim no evidence of a data breach, yet fail to confirm data remains untouched. Understanding the nuance between a lack of evidence and absolute security is essential for digital safety. #CyberSecurity #DataPrivacy #TechNews #InformationSecurity
During a live radio interview, a cybersecurity expert was asked the best way to prevent ransomware attacks. Their blunt, one-sentence answer was met with an immediate dial tone. Solid security advice for anyone browsing the web. #CyberSecurity #Ransomware #TechTips #InternetSafety
Incident response is often viewed as an IT issue, but it is fundamentally a business crisis. Beyond technical recovery and hardware replacement, the survival of the enterprise depends on public communication and strategic management. #CyberSecurity #BusinessStrategy #IncidentResponse #RiskManagement
During a radio interview, a simple yet effective tip for preventing ransomware attacks was shared: stop visiting pornographic websites. While the blunt advice led to an immediate hang-up, it remains a reliable security practice even for military personnel. #CyberSecurity #TechTips #InternetSafety #Ransomware
Building an incident response team is something you do before the incident, not during it. Prasanna, Dr. Mike Saylor, and I walk through who needs to be on that team, why each person matters, and how to get them lined up now so nobody’s scrambling when ransomware hits. We’re back…
Building an incident response team before ransomware hits is the difference between a bad day and a business-ending week. Here’s who you need. Prasanna, Dr. Mike Saylor, and I are back after a few weeks off, and we’re talking about the people you need lined up before something goes wrong.…
Gain local admin access in under 30 minutes by stealing password hashes from a computer. Learn how to bypass security policies and boot from USB to compromise systems. #Hacking #Cybersecurity #InfoSec #EthicalHacking #TechTips
Discover how a large company managed Unix server ports with daily inetd.conf updates. A daily pushout meant ports enabling backup software would mysteriously vanish, causing disruptions until the automated reset was understood. #Unix #ServerManagement #Cybersecurity #TechHistory #ITPro
Minimize technology variety for IT efficiency. A unified 'golden image' simplifies deployment and maintenance across device models. Document everything: why it was built, how it was built, and update as needed. #ITStrategy #GoldenImage #TechManagement #SystemAdmin #Deployment
Think of your home security like a house. Attackers look for easy entry points – unlocked doors, weak windows. A 'broken window' is a known vulnerability, like an old, unpatched system. Don't be the easiest target. #CyberSecurity #Hacking #Vulnerability #ITSecurity #HomeSecurity
Despite automatic openers and 'if-this-then-that' fail-safes, my garage door mysteriously stays open. It's a battle between smart tech and the unpredictable reality of hardware. #GarageDoor #SmartHome #TechFails #Tesla #HomeAutomation
On a seminar trip, three of us went to dinner, leaving our laptop bags in the car. A smash and grab cost us all three laptops instantly. A harsh lesson in vigilance. #SmashAndGrab #LaptopTheft #TravelSafety #SeminarTrip #Loss
Malware embedded at the fundamental hardware layer, like UEFI, can persist even after wiping drives and rebuilding systems. This hidden compromise allows persistent communication, bypassing typical security measures. #UEFIMalware #Cybersecurity #HardwareCompromise #TechExplained
Discover how malware can infect hardware, bypassing software security. Learn about persistent threats like UEFI rootkits and how encryption is your last line of defense. #Cybersecurity #Malware #UEFI #DataSecurity #TechExplained
Unlock computer access by booting from a USB drive through the BIOS. Gain control even if Windows policies block USB drives, bypassing security measures. #CyberSecurity #BIOS #Hacking #TechTips #Privacy
Just like a burglar spots a broken window, attackers target known system vulnerabilities. Leaving a system like Windows XP connected to the internet is like an open invitation for compromise—minutes until it's breached. #Cybersecurity #VulnerabilityAssessment #BrokenWindowTheory #TechTips #SecurityAwareness
If your laptop is stolen, simply closing the lid won't protect your data. Without encryption like BitLocker, an attacker can boot into a Linux environment and access everything, even reset your password. Encryption makes your data unreadable. #DataSecurity #LaptopTips #Encryption #Cybersecurity #TechHacks
Endpoint hardening is the unglamorous work of closing the windows and locking the doors before somebody comes along and jiggles the handle. Prasanna, Dr. Mike Saylor and I walk through what that actually looks like: secure builds and golden images, which services to shut off, which ones to uninstall so…
Endpoint hardening means closing the windows before a bad guy jiggles the handle: golden images, USB lockdown, BIOS/UEFI, and full disk encryption. Your receptionist's computer is running a web server. Your new Dell shipped with Xbox Game Bar turned on. Neither one helps anybody do their job, and both of…
Applying device patches overwrites potential malware and spyware, securing your phone's core firmware. Critical security fixes and new features are pushed by Apple and Android only when necessary. #DeviceSecurity #SoftwareUpdates #CybersecurityTips #Tech