End of 2021 witnessed an explosion of RDP brute-force attacks

RDP brute-force attacks continue to be one of the most used attack vectors for breaching enterprise networks, ESET’s latest Threat Report has revealed. RDP brute-force attacks escalated throughout all of 2020 and 2021, and the last four months of… Continue reading End of 2021 witnessed an explosion of RDP brute-force attacks

RDP to a Virtual Machine. Where should I apply the security measures? [closed]

I have a computer with Hyper-V installed and a virtual machine. I want to connect only and directly to the VM with Remote-Desktop from outside the network.
I have some good ideas to make the connection more secure, but the question is:

sh… Continue reading RDP to a Virtual Machine. Where should I apply the security measures? [closed]

Zero trust isn’t just for IT, it can also protect targeted critical infrastructure

Gartner predicts that by 2025 cyber attackers will have weaponized OT environments to successfully harm or kill humans. Not only is a solution to secure OT assets imperative, but it may also be a matter of life and death. Bare-minimum OT security is no… Continue reading Zero trust isn’t just for IT, it can also protect targeted critical infrastructure

Disabled MD5 and enabled SHA under SCHANNEL/Hashes in registry. xfreerdp fails with an ssl i/o error

So delving into securing server and not quite understanding how I broke the ability to rdp into my server (using xfreerdp). I disabled MD5 as an available hash and enabled SHA. The exact changes in the registry I made were to:
HKLM\System\… Continue reading Disabled MD5 and enabled SHA under SCHANNEL/Hashes in registry. xfreerdp fails with an ssl i/o error