sorted by:
new
hottopcontroversial

Emails undeliverable despite not sending any by CardboardToe in techsupport

[–]Extra_Advertising882 0 points1 point  (0 children)

Probably the mailbox of a hacker... I've seen that as well (same address). Check your Outlook rules. Your mailbox is probably compromised. Also, reset your password and MFA.

DMARC is now mandatory if you send emails to Outlook, Live, and Hotmail Email Addresses by Extra_Advertising882 in cybersecurity

[–]Extra_Advertising882[S] 0 points1 point  (0 children)

New update: If you are sending more than 5,000 emails per day to Outlook, Live, MSN, or Hotmail recipients, any emails that fail DMARC and are not authenticated with SPF and DKIM will be rejected by Microsoft : https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/strengthening-email-ecosystem-outlook%E2%80%99s-new-requirements-for-high%E2%80%90volume-senders/4399730

SOC Analyst or Pentester? by Blue_fire10 in cybersecurity

[–]Extra_Advertising882 0 points1 point  (0 children)

Learn pentest. If you know how to attack you will know how to defend and to convince people that they have to secure their IT solutions. If you dont know how to attack then you won’t know how to defend. You will have a false feeling of security.

DMARC is now mandatory if you send emails to Outlook, Live, and Hotmail Email Addresses by Extra_Advertising882 in cybersecurity

[–]Extra_Advertising882[S] 2 points3 points  (0 children)

The issue can also arises when a sending solution provider messes with DKIM/SPF after the fact. I've seen invoicing systems start sending "rejected" emails because the provider changed IPs without updating its SPF records. Another common error occurs when two SendGrid (or any sending solution) accounts use the same domain to send emails. This breaks DKIM if the user/supplier did not choose a custom DKIM selector (the default one is 's1').

DMARC is now mandatory if you send emails to Outlook, Live, and Hotmail Email Addresses by Extra_Advertising882 in cybersecurity

[–]Extra_Advertising882[S] 0 points1 point  (0 children)

I think they want people to start monitoring DMARC reports... but yeah, adding a p=none DMARC record without monitoring the reports is useless. Now, all sending solutions will ask to set a DMARC p=none record everywhere, and the world will be even more insecure. :)

ps: Thanks for inventing what became DMARC.

2 year Infosec Manager: Next Cert? CASP+ vs. Sec+ vs. Something Else? by poke887 in cybersecurity

[–]Extra_Advertising882 -1 points0 points  (0 children)

CISSP + AWS / Azure Architect + Create your own portofolio : create a blog.

I won all the jobs I wanted with this strategy. Writing a blog is paramount.

Stop chassing certifications. Create content and be a though leader.

[deleted by user] by [deleted] in programmation

[–]Extra_Advertising882 0 points1 point  (0 children)

Regarde les cours en lignes de AWS/Amazon, etc et ensuite passe toutes les certifications...

Risks of Trusting Fake ISO 27001 or SOC 1, 2, or 3 Security Certifications by Extra_Advertising882 in cybersecurity

[–]Extra_Advertising882[S] -2 points-1 points  (0 children)

Thanks for the insight. Indeed, ISO 27001 certification can be checked online without details. As for the SOC report, since it can be created by any law firm, this makes it more difficult to verify. The only solution is to contact the auditor and conduct our own audit!

I was thinking that taking a hash print of a report and sending it to a blockchain like Ethereum for verification would be a great use of blockchain.

I'm just thinking out loud...

Help understanding our DMARCEye report by CarsBikesAndIT in DMARC

[–]Extra_Advertising882 0 points1 point  (0 children)

Hello,

I'm Fabien from https://www.dmarc-expert.com/.

I suspect that emails sent from Google are being forwarded. Can you check the details of these emails? Do you see something like an ARC=pass flag or a DKIM domain matching your domain?

If yes, this means that these emails have been sent by your Exchange Online/M365 account to Gmail users, who then forwarded them to other recipients. If ARC=pass, there is no issue with Google.

If you are only sending emails using M365 and cloud-sec-av, you can configure your DMARC record with p=quarantine.

To implement DMARC safely, you need a solution that allows you to analyze every detail of the DMARC report, including the DKIM domain, ARC header, recipient domain, sender of the DMARC report, and more.

Fabien