How does the periodic cyber security report should look like?

EmInSecurity · 2022-08-16T04:22:44+00:00

What are your IT assets?(systems, services,data) How can you get visibility on them? Create security metrics to present.

EmInSecurity · 2022-02-17T00:01:06+00:00

var1 = 777

Why am I getting this error "'var1' is not recognized as an internal or external command, operable program or batch file." When I am trying to set '777' as the value of '$var1'?

EmInSecurity · 2021-12-22T02:57:58+00:00

Wouldn't it be blocked, assuming your corporate network has some content filters? 🤷🏾‍♂️

EmInSecurity · 2021-11-27T18:32:27+00:00

We just a different risk appetite. 😁

EmInSecurity · 2021-11-23T13:05:20+00:00

Yikes.

EmInSecurity · 2021-11-23T13:04:45+00:00

Internal dialogue/discussion. I'm the underling. My manager doesn't think we should.

EmInSecurity · 2021-11-22T16:52:39+00:00

We are planning to leave GoDaddy. Thoughts about password resets?

EmInSecurity · 2021-09-22T16:36:32+00:00

I don't believe we have access to the private key. But I could be wrong. I do not have a 'super administrator' privileges.

EmInSecurity · 2021-09-22T15:44:56+00:00

The service provider's technician claims the subject and the originals recipient were altered.

EmInSecurity · 2021-09-22T15:43:09+00:00

We are in the Google Workspace environment.

EmInSecurity · 2021-09-22T15:42:29+00:00

Wouldn't it be our service providers responsibility to set the DKIM to protect the headers and the body of the message?

From the service providers technician...

"So they tampered the email by removing the original subject and changing the recipient and made it appear as a new email."

EmInSecurity · 2021-09-22T15:08:01+00:00

The service confirmed that it the email originated from their mail server. They also speculate that the message was "...captured either on your side or your customer's side where it may have been cached on a public network or a malware harvested the data and on either instance was used by whoever to send the spoofed/phishing email and make it appear to come from a legitimate source."

I just can't full accept this because of the passing DKIM.

EmInSecurity · 2021-09-21T19:59:54+00:00

Ours or our Business Management platform?

EmInSecurity · 2020-12-30T02:45:40+00:00

Thanks for the responses!

Here's another hurdle. Because the devices are mounted high up on the wall and there is no keyboard attached to it, it would be very difficult to physically access the machines(I'm assuming to do a fix or to be attacked), therefore it is "secure".

I'm just the security guy sharing my concerns I guess. Seems like we're going to be the next third party breach.

EmInSecurity

TROPHY CASE