Cris Ferguson

smb signing vs smb encryption ask Questions for all the folks out there: 1. How many folks are using both? 2. What is the performance hit you experienced? Can you quantify smb s vs smb e? 3. Let's hypothetically say you have smb signing enabled did you hit any road blocks when you turned on smb encryption? DM me. Help a fool out =) #cybersecurity #blueteam #redteam #bitcointeam

1

3 Comments

I see TAs looping over wevtutil and deleting event logs on any.run and various reports. Why? Anyone wants to fill me in - please let me know. I get the action is defense evasion. Most orgs send logs to a SIEM. Are they catching and deleting the logs prior to the SIEM push? Let me know. #cybersecurity

1

"A group of researchers released a follow-up paper saying they've been able to hack zero-day vulnerabilities – vulnerabilities that aren't yet known – with a team of autonomous, self-propagating Large Language Model (LLM) agents using a Hierarchical Planning with Task-Specific Agents (HPTSA) method" This is interesting, and scary! Threat actors are doing the same thing to identify zero day vulns and exploits every single day (understanding that a vulnerability without a known exploit is a potential future risk, but once an exploit is identified things can go bad fast). If you recall, Clop was sitting on the MOVEit vuln and exploit for TWO YEARS while planning their coordinated and devastating attack in 2023 exposing a wide range of PII and PHI. https://lnkd.in/edyrF4Xb The current backlog with the NVD makes me wonder if our govt is using LLMs to help speed up analysis. Per https://lnkd.in/eG3ScUjA "NIST is also working on ways to address the increasing volume of vulnerabilities through technology and process updates." Does this mean the incorporation of LLMs? Who knows! Let's all just hope the National Institute of Standards and Technology (NIST) isn't doing it the way it's always been done given the threat actors aren't slowing down any time soon. https://lnkd.in/eHNwHxnf "Researchers from VulnCheck analyzed the NVD’s activity since it announced cutbacks on February 12 and found that of the 12,720 new vulnerabilities added since then, 11,885 “have not been analyzed or enriched with critical data that help security professionals determine what software has been affected by a vulnerability.”" Key takeaway - Layer in those defenses and focus on early detection and response capabilities across endpoints, data repositories, applications, identities, etc.

22

2 Comments

Project Spectrum CMMC Cybersecurity Services! September 19, 2024, 10:00 - 11:00 am - Virtual Project Spectrum is a #comprehensive, #cost-effective platform that provides companies, institutions, and organizations with #cybersecurity information, #resources, tools, and #training. The United States Department of Defense (DoD) recognizes Project Spectrum as a premier resource for the tools and training needed to increase cybersecurity #awareness and maintain #compliance in accordance with DoD #contracting #requirements. During this webinar, you'll learn about the services they can provide to assist your business in pursuit of Department of Defense contracts including: #threatenvironment, #FOCI (foreign ownership, control or influence), #CUI (controlled unclassified information) and #FCI (Federal contract information). Training Topics: #Cybersecurity Assistance, Defense Industrial Base (#DIB) Readiness, Foreign Ownership Compliance (#FOCI), Government Industrial Base (#GIB) Readiness Click here to register: https://lnkd.in/gKShd_TX Cost: #Free #moapex #missouriapex #ohioapex #ohiodepartmentofdevelopment #arapex #arkansasapex #southernohioapex #apexaccelerators #projectspectrum #cybersecurityawareness #cmmc #governmentcontracting #govcon #smallbusiness #smallbusinesstraining #compliance

2