Collaborate Disseminate
This week, we finally get the inside scoops on some old stories, starting with the Bitwarden Windows Hello problem from last year. You may remember, Bitwarden has an option to …read more Continue reading This Week in Security: Bitwarden, Reverse RDP, and Snake
I’ve had some arguments with people about securing RDP access to servers:
Team 1 (including me) suggests that direct RDP access should only be possible with an (separate) administrative account.
Team A suggests that one should do RDP logi… Continue reading Security of RDP directly with administrative account VS RDP with normal account and elevation with administrative account
Without knowing more details, I can’t suggest to our security guy that we should use RDP along with a Remote Desktop Gateway.
One person says to that VMware Remote Console is more secure than using RDP with an X.509 certificate but another… Continue reading Which is more secure to access a VMware Windows VM : VMware Remote console or RDP+Remote Desktop Gateway
I’m trying to access to access to my RDP on Whonix (over Tor and despite all dangers) this way
rdesktop myip
but I’m always getting error
Autoselecting keyboard map ‘en-us’ from locale Core(error):
tcp_recv(), recv() failed: Connection … Continue reading RDP Access on Whonix [migrated]
Bitdefender finds new malware capable of monitoring incoming RDP connections and infect the connecting clients that have client drive mapping enabled.
The post New ‘RDStealer’ Malware Targets RDP Connections appeared first on SecurityWeek.
Continue reading New ‘RDStealer’ Malware Targets RDP Connections
Last week we briefly mentioned a vulnerability in the Papercut software, and more details and a proof of concept have been published. The vulnerability is one known as session puzzling. …read more Continue reading This Week in Security: Session Puzzling, Session Keys, and Speculation
Today, we noted a remote IP making a connection from source port 3389 to an internal server of ours to destination port 80.
Below is what the traffic looks like:
196.191.131.89:3389 to 10.x.x.x:80
We found the remote IP to be malicious. … Continue reading Remote IP connecting from source port 3389. Is this malicious? [closed]
We recently got a strengthened security policy where people are required to log out of any RDP connections at the end of the day. So when I turn off my laptop, it is not enough to merely close the RDP connection, I actually have to log out… Continue reading RDP logout necessary to prevent RDP session hijacking?
I have changed my MAC-Address, after that i disconnect from Server. When i use original MAC-Address everything works normal.
How can i change mac Address and can use remote desktop? I lost connection when i edit MAC.
Continue reading How can i change mac Address and can use remote desktop?
The question is mainly about the default windows implementation of rdp, but could also apply to xrdp. Enabling rdp is an option in the windows settings (remote desktop).
I would like to use rdp in a secured local network, to connect comput… Continue reading Does enabling rdp induces a security risk coming from the internet if no port forwarding/nat is configured?