Tech Tip Tuesday - Hour of Code

The Hour of Code is happening this week in conjunction with computer science education week. It gets bigger and better every year. This year they provide statistics to convey the impact they are having in the State of Hawaii. Are you one of the 2,219 registered teachers or one of the 91,561 registered students in Hawaii? #CSEdWeek #HourOfCode

https://code.org/advocacy/state-facts/HI.pdf

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday - CampFIRE Cyber Security Challenge

CyberHawaii, University of Hawai‘i, and State of Hawai‘i is hosting a jeopardy-style, Capture the Flag (CTF) event. This half-day, on-site event is free for security professionals and college students. Participants can play in a team of two or individually. CampFIRE CTF is primarily focused around incident response and contains challenges that are based on real-life attacks or inspired by day-to-day security tasks. Upon completion of the event, participants will have learned about tools and techniques to deal with actual cyber security threats.

http://www.hawaii.edu/infosec/campfire/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Thursday – Default IoT Passwords

The Mirai malware relied on the average user, who just wants their “stuff” to work, to leave the default credentials (username and password) on their Internet of Things (IoT) devices (e.g. IP cameras, routers, DVRs, refrigerators). Once the devices were compromised, they were added to the botnet to perform Distributed Denial of Service (DDoS) attacks. It’s was pretty successful with just 68 credentials. Have you changed your default credentials?

https://krebsonsecurity.com/2016/10/who-makes-the-iot-things-under-attack/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – VPN Comparison

Are you looking for VPN solution? A VPN is a simple solution to help secure your data and personal information. Picking one can be a daunting task. Fortunately, That One Privacy Site put together a list that compares 163 products against security standards, privacy, price and others categories to help you make an informed decision.

https://thatoneprivacysite.net/vpn-comparison-chart/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Windows 10 and Server 2016 Security Auditing and Monitoring Reference

Microsoft put together a 729 page document (containing 208,110 words) with detailed technical descriptions for most of the advanced security audit policies that are included with Windows 10 and Windows Server 2016. It’s great for bedtime reading and even better for referencing all Windows events.

https://www.microsoft.com/en-us/download/details.aspx?id=52630

If you have a #CyberPatriot Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday - Unskilled Attackers Pester Real Security Folks

Whether you’re looking at packets wireshark or you’re setting up your NMAP scan, it’s important to remember TCP flags. Here’s a mnemonic to recall them.

Unskilled Attackers Pester Real Security Folks
Unskilled = URG
Attackers = ACK
Pester = PSH
Real = RST
Security = SYN
Folks = FIN

https://danielmiessler.com/study/tcpflags/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Netflix F.I.D.O.

No it’s not a new Netflix series, the Fully Integrated Defense Operation (FIDO) is an open source security incident event manager. The focus is to automate and expedite incident response with an alert-to-ticket process. Netflix built the tool to solve in-house issues but saw the opportunity to share it with the security community.

http://www.tripwire.com/state-of-security/latest-security-news/netflix-unveils-fido-an-open-source-incident-response-tool/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Microsoft Local Administrator Password Security (LAPS)

When an attacker compromises any workstation, the local administrator password hash can be obtained and used to access every other workstation using the classic Active Directory exploit Pass-the-Hash (PtH). Fortunately Microsoft now has a solution to protect local administrator accounts from reuse. Labeled LAPS (Local Administrator Password Solution), a compromised local admin account cannot be used to as a launch point for other malicious activity by an adversary.

http://www.praetorian.com/blog/microsofts-local-administrator-password-solution-laps

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – VMware ESXi 6 Installation Guide

We are in the process of designing a “standard build” for a Cyber Hui Range (lab), which can serve as a local training environment. We haven’t figured out the hardware specifications yet but it will most likely run VMware Hypervisor. Take a look at this installation guide and give ESXi a try and let us know if you have any ideas for the lab.

http://www.vladan.fr/vmware-esxi-6-installation-guide/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Veterans Day Tech Tip Tuesday – National Initiative for Cybersecurity Careers and Studies (NICCS) for Veterans

The NICCS has a collection of educational and career opportunities for veterans. It’s a good start for transitioning vets or vets looking to further their education.

http://niccs.us-cert.gov/home/veterans

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.