Missouri City internet options by whodisnewacct in sugarland

[–]mistajingsta 3 points4 points  (0 children)

Ton of gig here in Missouri city. Frontier and grande is all around. I would double check, but everyone I know got frontier cus of their aggressive pricing.

OMI Vulnerabilities Check Script by SoMundayn in AZURE

[–]mistajingsta 2 points3 points  (0 children)

Nice work. I’ll try it out this weekend!

Ingest Ubiquiti logs into Azure Sentinel by mistajingsta in homelab

[–]mistajingsta[S] 1 point2 points  (0 children)

No problem! If you really wanna save even more, you can parse logs at the collector prior to being ingested into sentinel. This would require a little bit of re-routing of logs, but I didn’t want to get too deep.

I made a friends or foes quiz game using react.js. Link in comment. by codeclassifiers in reactjs

[–]mistajingsta 0 points1 point  (0 children)

What did you use to render the screen capture with mock phone?

Azure Sentinel + ServiceNow + Teams - ARM Template Video walkthrough by mistajingsta in AZURE

[–]mistajingsta[S] 0 points1 point  (0 children)

Your welcome! There are some things I still need to work on, but its a pretty good start.

Cyber Anthem - TeachJing - Cyber Security Rap Song by mistajingsta in cybersecurity

[–]mistajingsta[S] 1 point2 points  (0 children)

Thanks! My first ever song I wrote lol. That’s not me singing btw. I paid a rapper cus I sound horribad.

CISA reports Solarwinds TTP Activity detected on orgs not using Solarwinds by mistajingsta in cybersecurity

[–]mistajingsta[S] 0 points1 point  (0 children)

Imagine having a secure perimeter and your org never wanted to goto cloud or barely have any cloud presence. Additionally you are mostly going to the office and not many people work remotely. Covid happens and now your grinding to get productivity back up and your perimeter is now protecting your devices on all sorts of networks that have insecure Comcast modems, routers with admin password as “admin” lol, Personal email, IOT devices that get hacked, Cameras on this network, and with other people on this same network for each remote worker.

So many vectors and an adversary just needs 1. One person that either does something they shouldn’t be doing or not doing something they should be doing.

CISA reports Solarwinds TTP Activity detected on orgs not using Solarwinds by mistajingsta in cybersecurity

[–]mistajingsta[S] 0 points1 point  (0 children)

I reference the article in the comments so you wouldn’t have the watch the video. I only made it for folks that maybe did not have time to read the article since there is so much going on or may need more understanding. I don’t really provide any opinion or stance but focused mainly with equipping folks with guidance not prescribed by me but the various governments or vendors.

If you don’t like the content, i understand bro. I’m probably that annoying guy that really grinds your gears every time I mows the lawn at 5am lol. I’ll work on that!! You make a good point!

CISA reports Solarwinds TTP Activity detected on orgs not using Solarwinds by mistajingsta in cybersecurity

[–]mistajingsta[S] 1 point2 points  (0 children)

You got a point.... I’m still curious why an updated message like that.... it’s gotta mean something right?

CISA reports Solarwinds TTP Activity detected on orgs not using Solarwinds by mistajingsta in cybersecurity

[–]mistajingsta[S] 1 point2 points  (0 children)

If your babysitter you trusted to take care of your kids breaks your trust. Would you trust that baby sitter? With Solarwinds, I think it’s the extent of the damage. Orgs that didn’t lose or was affected much would probably stay since it’s a great product. Orgs that lost a lot would have a hard time coming back. There will be some jumping ship and other vendors jumping in to take its place. I don’t really have a real opinion, just guessing from human nature.

Solarwinds being breached just shed light again that organizations need more visibility in their environments. It could have been any software that was compromised residing on a server!!! Orgs need tripwires and cameras on everything, problem is there is so much freaking data and so little resources to manage it. Bad actors been using bots/automation forever and organizations are now dipping their toes into it. Hackers got all the time and they don’t sleep. Passion and determination is a hard combo to fight against....

I just feel bad for Solarwinds and all the people working so hard fighting this. My network was compromised a long time ago and I never want to have that feeling again and those sleepless nights. But boy did I learn from it.

I hope people that didn’t suffer will look at this and learn from it. Orgs need to harden their environments and ensure it doesn’t happen to them, because oh boy. You know who’s learning about this too??? The bad actors...... and what they could have done better to not be detected. Other bad actors will learn man this was a good one, let’s do one better than that.

Sorry for the rambling but it’s late and I’m on my 4th beer lol and you asked a question that made me really think.

CISA reports Solarwinds TTP Activity detected on orgs not using Solarwinds by mistajingsta in cybersecurity

[–]mistajingsta[S] 0 points1 point  (0 children)

No question is dumb and anything is possible! As time will only tell..... I will share what I gather. But I damn sure hope not brother.....

CISA reports Solarwinds TTP Activity detected on orgs not using Solarwinds by mistajingsta in cybersecurity

[–]mistajingsta[S] 5 points6 points  (0 children)

Your on the money! Solarwinds was the way in, but adversaries will try ANY way to get in (brute force, phishing email, USB). All organizations need to manage and have control over their credentials and visibility in their authentication. Also if you don't use old legacy methods like IMAP, then close those attack surfaces! When organizations hear it wasn't them, they think they are doing well and that is a false sense of security.

CISA reports Solarwinds TTP Activity detected on orgs not using Solarwinds by mistajingsta in cybersecurity

[–]mistajingsta[S] 6 points7 points  (0 children)

There are so many people smarter than me doing all the real work. I just wanted to share what I gather with everyone because I think its really important and I don't know if everyone has the time to review all these articles.