InfoSec

[MrSchmuckatelli]

This will hopefully allow for people to share information on the threat landscape, new vulnerabilities, and hopefully provide people to learn a little bit.

[MrSchmuckatelli]

Make sure you are patching your VMware systems for those using web facing infrastructure. https://www.bleepingcomputer.com/news/security/vmware-fixes-bug-allowing-attackers-to-steal-admin-credentials/

 

Also make sure if you are using Docker that you didn't use any of the identified images. https://unit42.paloaltonetworks.com/malicious-cryptojacking-images/

[MrSchmuckatelli]

Cyber Threat Intelligence Outlined

 

• Understanding the cyber-criminal mindset
  • Movties
    • Effort needed (Low hanging fruit)
    • Objectives
    • Financial benefits
    • Politics (Hacktivist)
  • Attack vectors
    • Zero Days
    • Patch Tuesday/Malware Wednesday
    • Reconnaissance 
    • Passie Intelligence
• Understanding core concepts of Cybersecurity 
  • Confidentiality, Integrity, Availability (C.I.A)
  • Defense in Depth
    • Security Stack
    • Patch Cycle
• What is Cyber Threat Intelligence?
  • Feeds
  • Context
    • Block
    • Monitor
• How Cyber Threat Intelligence is collected
  • Analysis
  • Baseline
• Actionable Intelligence and Maintenance
  • Risk
  • Indicator of Compromise (IoC) Life Cycle

 

[airborne spoon]

i have to do info sec training every year at work and i gotta say its just a massive PITA.