Author Archives: Paul Asadoorian

Password Spraying Windows Active Directory Accounts – Tradecraft Security Weekly #5

Posted on by

Compromising the credentials of users in an Active Directory environment can assist in providing new possibilities for pivoting around the network. It allows for additional access to various network resources like shares, email and other systems. In this week’s episode of Tradecraft Security Weekly Beau Bullock (@dafthack) discusses how to perform password spraying attacks using Continue reading Password Spraying Windows Active Directory Accounts – Tradecraft Security Weekly #5→

News – Startup Security Weekly #42

Posted on by

Why You Should Think Twice About Listening to Business Gurus (There’s no one-size-fits-all approach to innovation), A tech investor analyzed his 5000 monthly emails and explained how startups can stand out, Don’t Build a Startup, Build a Business, Can Google’s 20% time really work for your startup?, As a startup, friction is a killer. In Continue reading News – Startup Security Weekly #42→

Startup Advice with Matt Alderman – Startup Security Weekly #42

Posted on by

Matt is the former VP of Strategy for Tenable where hew was responsible for developing strategies to enter new markets, develop new products and improve existing products, including the new Tenable.io platform. Prior to Tenable, he ran product strategy… Continue reading Startup Advice with Matt Alderman – Startup Security Weekly #42→

OneLogin Woes, Shadow Brokers Identity, oAuth Nightmares – Paul’s Security Weekly #516

Posted on by

Chipotle and OneLogin suffer breaches, Windows XP Too Unstable To Spread WannaCry, Patches Available for Linux Sudo Vulnerability, Cisco, Netgear Readying Patches For Samba Vulnerability, oAuth nightmares, Attack and Defense, Jay Beale style, Decoding … Continue reading OneLogin Woes, Shadow Brokers Identity, oAuth Nightmares – Paul’s Security Weekly #516→

Exploiting Client-Side Node.js with Moses Hernandez – Paul’s Security Weekly #516

Posted on by

I know what you’re thinking, Node.js is server-side right? Not exactly. It turns out many client-side applications have embedded Node.js. And its not always updated to the latest version. And, its vulnerable to attacks! Moses Hernandez is a Consulting Systems Engineer for Cisco Systems and an Instructor for pen testing courses at the SANS Institute. Continue reading Exploiting Client-Side Node.js with Moses Hernandez – Paul’s Security Weekly #516→

Security For Small Business – Paul’s Security Weekly #516

Posted on by

Don Pezet from ITPro.TV joins us on the show to help us identify security challenges and solutions for small business/mid-market. Backups are key, as are ease of use and support. The most important thing? Awareness and education! Tune in for the full d… Continue reading Security For Small Business – Paul’s Security Weekly #516→

June 6, 2017 – Hack Naked News #128

Posted on by

Exploiting Windows 10, mimicking Twitter users, vulnerabilities in Subarus, security issues surrounding virtual personal assistants, and more. Jason Wood of Paladin Security joins us to discuss sniffing out spy tools with ridesharing cars on this episo… Continue reading June 6, 2017 – Hack Naked News #128→

June 6, 2017 – Hack Naked News #128

Posted on by

Exploiting Windows 10, mimicking Twitter users, vulnerabilities in Subarus, security issues surrounding virtual personal assistants, and more. Jason Wood of Paladin Security joins us to discuss sniffing out spy tools with ridesharing cars on this episo… Continue reading June 6, 2017 – Hack Naked News #128→

Exploit, Carbon Black, and IAM Best Practices – Enterprise Security Weekly #47

Posted on by

The power of an exploit, Carbon Black’s open letter to Cylance, Viavi Solutions introduces scalable RF monitoring for heterogeneous networks, and 13 AWS IAM best practices for security and compliance! Full Show Notes Visit http://securityweekly.com/esw for all the latest episodes! http://traffic.libsyn.com/eswaudio/Exploit_Carbon_Black_and_IAM_Best_Practices_-_Enterprise_Security_Weekly_47_converted.mp3 Continue reading Exploit, Carbon Black, and IAM Best Practices – Enterprise Security Weekly #47→

Containers and Security – Enterprise Security Weekly #47

Posted on by

Containers are here to stay. While there is some resistance to this movement, Devops can help improve efficiency and security. For the first time security has a seat at the table when discussing the implementation of this new technology. Corey Bozdin c… Continue reading Containers and Security – Enterprise Security Weekly #47→