While we can never say, all is well in the world of network security, this week I feel I can write to you about something other than a US-CERT alert. This week’s topic – an interesting Cisco Talos blog post on the top 5 recommendations the Cisco Incident Response Team, looking back over the past […]

As I write this, Netflix is bringing back a new version of “Lost in Space”.  Hopefully, it is better than the movie and truer to the original series.  Bob has been on a roll with US-Cert announcements (danger, danger Will Robinson) about threats the last few weeks.

Well, it’s time for another Tech Tidbit from me and right on cue another alert from the National Cyber Awareness system run by the good people at the United States Computer Emergency Readiness Team (US-CERT) has come in that I felt really needed to be highlighted for all of you.

Many of you may be on the US-Cert alert e-mail list, but I suspect many of you are not.   Since most all of you have Internet-facing devices, or even more likely cloud-based applications (Office 365 / Google Apps, at least), I wanted to make certain that all of our clients “heard” the message contained in […]

  The call came in.  We have a serious virus outbreak.  Can you help? Over the years we have been asked this question time and time again.   Viruses have been predictable.   Their infection routes could be easily discerned.  Then it became a matter of discipline – Update clients, scan systems, re-image trashed machines.

The 2018 Yankees have taken the field.  We’ll all find out soon who is playing second and third base. In the meantime, I want to continue my discussion of the basics of patching. Many sites decide not to patch or patch only in the summer.

Now that the NFL season is over we turn our eyes to Valentines Day when Yankees Pitchers and Catchers report for Spring training.   It is the time of the baseball year when we go back to basics to shake the rust off the foundational aspects of the game.

I wanted this week to take a few minutes to share with you our latest thinking on the Intel Spectre and Meltdown fiasco. In a nutshell, there are two issues: An actual hardware flaw that exists in Intel and other compatible processor chips.

Back in May 2015 we started talking about the Microsoft Group Policy security change to prevent a “man in the middle attack” where any Group Policy that you test with security filtering for group membership will no longer operate with the default “Authenticated Users” on the delegation tab.

You will find on our web site under Webinar recordings, Hardening Active Directory Part I and also Part II. If you haven’t watched those presentations, you should to understand the threat to your Windows networks. One basic concept you can start with is to realize that all the Group Policy security settings are found in […]