Breaking Kerberos for Active Directory with Tim Medin, SANS Institute – Paul’s Security Weekly #535

Tim Medin from the SANS Institute delivers a technical segment on abusing Kerberos tickets and PowerShell Empire! Full Show Notes Subscribe to YouTube Channel

The post Breaking Kerberos for Active Directory with Tim Medin, SANS Institute – Paul’s Security Weekly #535 appeared first on Security Weekly.

Continue reading Breaking Kerberos for Active Directory with Tim Medin, SANS Institute – Paul’s Security Weekly #535

Matthew Toussain, SANS Institute – Paul’s Security Weekly #533

Matthew Toussain is an active-duty Air Force officer and the founder of Spectrum Information Security. He regularly hunts for vulnerabilities in computer systems and releases tools to demonstrate the effectiveness of attacks and countermeasures. Full Show Notes Subscribe to YouTube Channel

The post Matthew Toussain, SANS Institute – Paul’s Security Weekly #533 appeared first on Security Weekly.

Continue reading Matthew Toussain, SANS Institute – Paul’s Security Weekly #533

Pausing Processes with PowerShell with Mick Douglas, SANS – Paul’s Security Weekly #533

Mick Douglas is a SANS instructor and the Managing Partner for InfoSec Innovations. He joins us to demonstrate pausing potentially malicious executables in PowerShell! Full Show Notes Subscribe to YouTube Channel

The post Pausing Processes with PowerShell with Mick Douglas, SANS – Paul’s Security Weekly #533 appeared first on Security Weekly.

Continue reading Pausing Processes with PowerShell with Mick Douglas, SANS – Paul’s Security Weekly #533

What It Takes To Attack an ICS with Mike Assante, SANS Institute – Paul’s Security Weekly #530

Mike Assante is the Director of Critical Infrastructure and ICS for the SANS Institute. He clears up the confusion of Dragonfly 2.0 and explains control systems and how those attacks work. Full Show Notes Subscribe to YouTube Channel

The post What It Takes To Attack an ICS with Mike Assante, SANS Institute – Paul’s Security Weekly #530 appeared first on Security Weekly.

Continue reading What It Takes To Attack an ICS with Mike Assante, SANS Institute – Paul’s Security Weekly #530

Ted Demopoulos, SANS Institute – Paul’s Security Weekly #530

Ted Demopoulos is a Senior SANS Instructor, a recipient of the Department of Defense Award of Excellence, and the author of Infosec Rock Star: How to Accelerate Your Career Because Geek Will Only Get You So Far. Full Show Notes Subscribe to YouTube Channel

The post Ted Demopoulos, SANS Institute – Paul’s Security Weekly #530 appeared first on Security Weekly.

Continue reading Ted Demopoulos, SANS Institute – Paul’s Security Weekly #530

Ted Demopoulos, SANS Institute – Paul’s Security Weekly #530

Ted Demopoulos is a Senior SANS Instructor, a recipient of the Department of Defense Award of Excellence, and the author of Infosec Rock Star: How to Accelerate Your Career Because Geek Will Only Get You So Far. Full Show Notes Subscribe to YouTube Channel

The post Ted Demopoulos, SANS Institute – Paul’s Security Weekly #530 appeared first on Security Weekly.

Continue reading Ted Demopoulos, SANS Institute – Paul’s Security Weekly #530

Mobile Application Assessment with Chris Crowley, SANS Institute – Paul’s Security Weekly #529

Chris Crowley is a SANS instructor and independent consultant based in the Washington, D.C. area. Mr. Crowley overviews his approach to keeping mobile applications secure in this technical segment! Full Show Notes Subscribe to YouTube Channel

The post Mobile Application Assessment with Chris Crowley, SANS Institute – Paul’s Security Weekly #529 appeared first on Security Weekly.

Continue reading Mobile Application Assessment with Chris Crowley, SANS Institute – Paul’s Security Weekly #529

Telnet Credential Leak Reinforces Bleak State of IoT Security

The disclosure and recent analysis of thousands of leaked telnet credentials paints a bleak picture of the state of IoT security. Continue reading Telnet Credential Leak Reinforces Bleak State of IoT Security

News – Enterprise Security Weekly #53

Suffering breaches from ex-employees, Tanium announces threat response, the SANS Institute’s incident response survey results, and is cybersecurity getting harder? New OneLogin Study finds Businesses Knowingly Leave Themselves Vulnerable to Data Breaches from Former Employees Flexera & Microsoft Join Forces to Increase Software Supply Chain Transparency & Strengthen Customer Relationships Tanium Announces Threat Response: A […]

The post News – Enterprise Security Weekly #53 appeared first on Security Weekly.

Continue reading News – Enterprise Security Weekly #53

Critics slam cyber hygiene bill as redundant, confusing

A new bill that would direct federal scientists to come up with a short list of cybersecurity best practices for consumers, businesses and federal agencies is sparking concern from some observers, who fret it will reinvent the wheel, create confusion, and fail to be effective because best practices are widely ignored. The bill, which has bicameral and bipartisan support, would mandate scientists at the National Institute for Standards and Technology to partner with the Department of Homeland Security and the Federal Trade Commission in order to create concise, voluntary guidelines for basic online security measures, dubbed “cyber-hygiene.” Critics say they are already several existing lists of best practices, including the Top 20 and Top 5 Security Controls list maintained by the non-profit Center for Internet Security. “I am all for improving hygiene, but this bill will have no positive impact and because it will create another set of  ‘best practices’ [and] it […]

The post Critics slam cyber hygiene bill as redundant, confusing appeared first on Cyberscoop.

Continue reading Critics slam cyber hygiene bill as redundant, confusing