Thursday, September 28, 2017
A common strategy of successful CyberPatriot teams is the use of checklists. Checklists should be living documents that are continuously updated. This ensures repeatable success and reinforces lessons learned. This Linux checklist was made by CyberPatriot competitors in 2016. Use it, merge it, replace it, incorporate it with your existing Tactics Techniques and Procedures (TTPs). https://github.com/Forty-Bot/linux-checklist/blob/master/README.md If you have a Tech Tip you want to share, send them to firstname.lastname@example.org and we'll get them out next #TechTipTuesday.
Thursday, September 21, 2017
Supply chain attacks are in the news again after CCleaner version 5.33 infected with malware. The affected version (5.33) was released on August 15, 2017 and was available up to September 12, 2017. The scariest part was that the software wasn’t a bootleg copy. It was signed with a legitimate certificate. CCleaner has since updated the product but as of a couple of days ago, there were over 730,000 users still using the infected version. If you use CCleaner (which is still a good product) please update it. http://blog.talosintelligence.com/2017/09/avast-distributes-malware.html If you have a Tech Tip you want to share, send them to email@example.com and we'll get them out next #TechTipTuesday.
Thursday, September 14, 2017
If you haven’t heard yet, Equifax unwilling shared 143 million Americans personally identifiable information (PII) (e.g. names, social security numbers, birth dates, etc) with some unidentified actors. You should assume that your information has been compromised. If you are not planning on applying for loan or new credit cards then you should consider freezing your credit with all four major credit bureaus. The fees are normally $5-10 to add the freeze and another $5-10 to remove the freeze. Currently Equifax is waiving its freeze fee until November 21st. Brian Krebs put together a great Q&A and the comments are always entertaining. https://krebsonsecurity.com/2017/09/the-equifax-breach-what-you-should-know/ If you have a Tech Tip you want to share, send them to firstname.lastname@example.org and we'll get them out next #TechTipTuesday.
Tuesday, September 5, 2017
The National Cyber League Regular (NCL) Season runs from November 3-5, 2017. The Regular Season is the portion of the NCL where individuals compete on their own, without the assistance of others, to solve game challenges. The game challenges are aligned with preparatory exercises and allow participants to validate the knowledge and skills they are developing in the NCL Gymnasium. https://www.nationalcyberleague.org/regular-seaso-fall If you have a Tech Tip you want to share, send them to email@example.com and we'll get them out next #TechTipTuesday.