Social engineering exploits human nature. Attackers research targets—hobbies, social media, family—to craft personalized phishing attacks. A single click can compromise credentials. Success hinges on exploiting trust or urgency. #SocialEngineering #CyberSecurity #Phishing #Hacking #InfoSec
A perfectly timed phishing attempt targeted my personal info right when free credit monitoring was offered. Was it a successful scam or a test of my vigilance? The timing was unnerving. #Phishing #CyberSecurity #ScamAlert #PersonalData
Phishing resistant MFA is the difference between a bad guy getting one email address and a bad guy getting your entire company's inbox. On this episode, Prasanna, Dr. Mike Saylor, and I dig into why plain old multi-factor authentication isn't the finish line anymore; it's the starting line. We open…
Phishing resistant MFA stops the attacks that regular MFA can't catch, and this episode breaks down exactly how, and why it matters right now. Regular multi-factor authentication was supposed to be the fix for weak passwords. But session token theft, MFA exhaustion attacks, and social engineering have all found ways…
Running Windows XP? Connecting to the internet can lead to compromises in under 10 minutes. Even Windows Server 2000 was retired in 2013 due to vulnerabilities. It's time for an upgrade. #WindowsXP #CyberSecurity #TechTips #LegacySystems
Infrastructure as code allows creating VMs with dedicated ports for backup and production traffic. Ensures predictable bandwidth for backup systems. #NetworkConfiguration #CloudComputing #InfrastructureAsCode #BackupSolutions
Don't rely on just passwords! Multi-Factor Authentication (MFA) with layered security, like an authenticator app needing a PIN, is crucial. Secure your online accounts effectively. #MFA #Cybersecurity #TechTips #OnlineSafety
Suspicious admin login at 2 AM? Audit trails reveal if it's a genuine activity or a security risk. Tie logins to tickets, change management, and policy adherence for robust security. #SecurityAudit #AdminLogin #Cybersecurity #ITSecurity #IncidentResponse
Learn how VLANs create separate virtual networks on a single physical interface. Perfect for managing traffic and enhancing security, like guest Wi-Fi networks. #VLANs #NetworkManagement #Cybersecurity #ITPro #TechExplained
Network routers are frequently compromised and used in botnet attacks due to users failing to change default passwords. This security lapse extends to various network equipment, impacting overall cybersecurity. #RouterSecurity #Cybersecurity #NetworkProtection #DefaultPassword #TechTips
Join W. Curtis Preston and his 'besties', Prasanna and Mike, as they dive into the world of backup and technology. Expect tech talk and maybe a bit more gray hair! #BackupWrapUp #TechTalk #ITPros #CloudComputing
MFA, or Multi-Factor Authentication, is more than just your password. It uses multiple ways to verify your identity, like touch ID or face ID, ensuring it's really you logging in. It's essential for protecting your accounts. #MFA #Cybersecurity #TechTips #AccountSecurity
Secure your network and operational technology (OT) by testing for default passwords. Tools available for traditional devices (switches, routers, servers) and OT hardware (SCADA, thermostats, printers, smart boards). #NetworkSecurity #Cybersecurity #OTSecurity #DefaultPasswords
Unlocking a surprising feature: some authenticator apps don't need a PIN! Mike shares this gem, and the quest begins to enable it. Could this simplify your digital security? #AuthenticatorApp #TechTips #SecurityHacks #AppFeatures
Discover the 'promotion' or 'escalation' phase in cybersecurity. Attackers use existing permissions to find and exploit service accounts with default passwords, aiming for admin access through a series of stepping stones. #Cybersecurity #Hacking #Tech #InfoSec
Understand VLANs: virtual networks running off one appliance. Isolate traffic, restrict access, and manage security by segmenting your network. Guest vs. main networks are a common example. #VLANs #NetworkManagement #CyberSecurity #TechExplained #ITBasics
Most admins are active 9-5 weekdays, maybe Saturdays. Baseline this normal activity to easily detect unusual logins or actions. Visibility is key to spotting anomalies. #AdminSecurity #CyberSecurity #ITManagement #AnomalyDetection
Your backup server isn't just for recovery; it's a potential exfiltration source. Protect it from ransomware AND data theft. #BackupSecurity #Cybersecurity #DataProtection #Ransomware
Keep your backup systems isolated! Never share production environment credentials (like active directory domains) with your backups. More layers of security mean more time to detect suspicious activity. #CyberSecurity #DataBackup #ITSecurity #TechTips
Turning off unneeded public-facing services is crucial. Vendors should only enable SSH/VPN access when necessary. Especially RDP, the gateway for ransomware attacks. #Cybersecurity #RDP #Ransomware #NetworkSecurity
Backups are often overlooked in cybersecurity. Junior staff, who know the least about security, are frequently in charge, creating a significant blind spot. #Cybersecurity #DataBackups #ITSecurity #JuniorStaff #RiskManagement
Authenticator apps need a PIN, preventing MFA bypass. This ensures Multi-Factor Authentication works every time, preventing trusted device tokens from storing and weakening security. #MFA #CyberSecurity #TechExplained #Authenticators #SecurityTips
Isolating backup and management traffic to a dedicated network makes identifying malicious activity significantly easier. With less dynamic traffic, baselining normal operations is simple, making anomalies stand out. #NetworkSecurity #Cybersecurity #ITManagement #BackupSolutions
Discover how a hacker exploited a company's backup system, restoring data outside their firewall to gain complete control and extract sensitive information. A masterclass in cybersecurity vulnerabilities. #Cybersecurity #Hacking #Tech #InfoSec #DataBreach