When an attacker has some presence in your network, they will try to move laterally. They will look for things on the network that will give them access to other systems and data. e.g. plain text credentials stored in files. Does that actually happen? Yes. Here’s a few
We got a Critical alert that a certain port is exposed on an IP address apparently linked to our organisation. The alert reported that the service is vulnerable to high severity vulnerabilities and listed all the CVEs and techniques associated to them. My initial thought was this doesn’t look
Problem I wanted to block access to personal OneDrive or any other personal Microsoft365 portals without disrupting any access to legit company resources. i.e. only allow access to your corporate OneDrive. Why? To mitigate the risk of data exfiltration by users or attackers who have compromised a user account.
If you are not into football, you probably want to stop reading now. There is zero cyber security/IT content in this blog post. I’m in my thirties and I feel like I am playing better football than at any point in the past. I’ve always played small
What the hell is going on? What am I seeing? I don’t know how I am going about my days watching a live streamed genocide and man made famine in Gaza. Living like a zombie. Numb. Just numb. Oh poor me with food and safety everyday. It’s the