C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 45/20

- Roderick Mooi

  1. Operational network security – training sessions Aug 2020 to Feb 2021 [GÉANT/DFN]
  2. Interview: How the University of Duisburg-Essen (UDE) prevented a ransomware attack [Davina Luyten/Marius Mertens]
  3. Privacy Impact Assessment Toolkit [ucisa]
  4. Ransomware Protection and Containment Strategies [MANDIANT]
  5. Active Directory administrative tier model [Microsoft]
  6. OUCH! Newsletter: Social Engineering Attacks [Christian Nicholson]
  7. Cybersecurity as we know it will be ‘a thing of the past in the next decade,’ says Cloudflare’s COO, as security moves towards a ‘water treatment’ model [Rosalie Chan, Business Insider]
  8. Zoom Finally Has End-to-End Encryption. Here’s How to Use It [Brain Barrett, WIRED / Condé Nast]
    - see also: End-to-end (E2E) encryption for meetings
  9. Patch for Critical VMware ESXi Vulnerability Incomplete [Eduard Kovacs, SecurityWeek / Wired Business Media]
  10. PATCH NOW: CVE-2020-14882 Weblogic Actively Exploited Against Honeypots [Johannes Ullrich, SANS ISC]
    - see also: Security Alert CVE-2020-14750 Patch Availability Document for Oracle WebLogic Server
  11. Why Paying to Delete Stolen Data is Bonkers [Krebs on Security]
  12. NAT Slipstreaming [Samy Kamkar]
    - see also: news.ycombinator.com/item?id=24955891
  13. Dr. Strangenet—or, how I stopped worrying and embraced the WFH IT apocalypse [Sean Gallagher, Ars Technica / Condé Nast]
  14. ‘There’s a whole war going on’: the film tracing a decade of cyber-attacks [Adrian Horton, The Guardian]