Possible pitfalls with filesharing using local account instead of domain account

I’ve recently eradicated Active Directory from my network. However, I’m having trouble verifying there is no issue with sharing files using a local account instead of a domain account.
I have exactly one server I was unable to convert to u… Continue reading Possible pitfalls with filesharing using local account instead of domain account

Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)

May 2022 Patch Tuesday is here, and Microsoft has marked it by releasing fixes for 74 CVE-numbered vulnerabilities, including one zero-day under active attack (CVE-2022-26925) and two publicly known vulnerabilities (CVE-2022-29972 and CVE-2022-22713). … Continue reading Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)

Good end user passwords begin with a well-enforced password policy

In this interview with Help Net Security, Lori Österholm, CTO at Specops Software, explains what makes passwords vulnerable and suggests some password best practices and policies organizations should implement to keep their systems secure. There’… Continue reading Good end user passwords begin with a well-enforced password policy