Remote Working
Learn how attackers exploit legitimate remote working tools like TeamViewer. ISO 27001:2022 Annex A Controls 6.7 Remote working 22 Apr: Evi…
Posts
Mobile Security
11 Apr 2019: SIM Swap Attack Reference: https://securelist.com/large-scale-sim-swap-fraud/90353/
Network Device Security
17 Apr 2019: Cisco IOS and IOS XE Software Cluster Management Protocol Remote Code Execution Vulnerability ( CVE-2017-3881 ) Reference: https:…
Information Security
Reference: https://securitybaron.com/blog/the-data-big-tech-companies-have-on-you-or-at-least-what-they-admit-to/
Host Configuration Assessment - ESXi
Connects to a vSphere server Enter the following commands in PowerShell Install-Module -Name VMware.PowerCLI Set-PowerCLIConfiguration -Invalid…
Operational Technology (OT) Security
Industrial Control Systems Pattern by OSA ( Trend Micro ) Examples of security threats to a smart factory with IT and OT convergence ( Ch…
Social Media Security
25 May 2019: Disclose files content from Facebook internal CDNs Reference: https://ysamm.com/?p=272 18 Apr 2019: Facebook says it &#…
Operating System Security - Windows
Windows ALPC Elevation of Privilege Vulnerability ( CVE-2018-8440 ) Reference: https://doublepulsar.com/task-scheduler-alpc-exploit-high-level-a…
Operating System Security - MacOS
MacOS High Sierra 10.13.4 Multiple Security Vulnerabilities (March 29, 2018) 1. Safari automatic download and mounting of disk images ( CVE-2017…