SANS Cyber Aces Online is Open

As of today, the SANS Cyber Aces Online is open. 

Cyber Aces provides free and online, selected courses from the professional development curriculum offered by the SANS Institute, the global leader in cyber security training. 

You have two options to participate in the Cyber Aces program. 

1. With quizzes, which will test your skills every 3 months

2. Without quizzes, where you can access the course material at your own leisure. 

The training offered by Cyber Aces can also benefit students participating in the CyberPatriot program and is highly recommended. 

Top performers in the online course quizzes (option 1 above) will be invited to attend the National Cybersecurity Career Fair (NCCF), the largest virtual career fair in the cybersecurity industry. The 2014 NCCF featured18 leading employers in the information security industry, including the NSA, the US Army’s Intelligence and Security Command (INSCOM), Citi, JP Morgan Chase, CBS, NBC Universal, Accenture, KPMG, Pricewaterhouse Coopers (PwC), Ernst & Young, Juniper Networks, Solutionary, Palantir, Stroz Friedberg, FINRA, Branch Banking & Trust Co., NIPSCO, and STIGroup.

More information on Cyber Aces: http://www.cyberaces.org

Link to the Tutorials: https://tutorials.cyberaces.org/tutorials


Thanks to Dillon for letting us know about the updated training.

Tech Tip Tuesday: Securing Samba

Tomorrow marks the ONE year anniversary of Cyber Hui's Tech Tip Tuesday.  Thanks to Jake Ross, Jason Yeo and whoever else contributed.

Hau`oli la Hanau

This week's TTT focuses on Securing Samba.

Samba is an Open Source/Free Software suite that provides seamless file and print services to SMB/CIFS clients." Samba is freely available, unlike other SMB/CIFS implementations, and allows for interoperability between Linux/Unix servers and Windows-based clients.

The following articles provide guidance on securing Samba.

How to Secure Samba (dated, but still relevant)
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-samba.html

Securing a Samba File and Print Server
https://help.ubuntu.com/12.04/serverguide/samba-fileprint-security.html

Secure SMB Connections
http://www.windowsecurity.com/articles-tutorials/misc_network_security/Secure-SMB-Connections.html

Linux command to check for guest access to your shares.
grep -i "guest ok = yes" /etc/samba/smb.conf

Linux command to check for SMB client signing
grep signing /etc/samba/smb.conf

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.


Visit us at www.cyberhui.org
Like us at www.facebook.com/cyberhui
Follow us @cyber_hui
Email us at info@cyberhui.org

Tech Tip Tuesday – Bad Microsoft Patch MS 14-045

Do you faithfully patch your Windows machine every Patch Tuesday? Did you get a Blue Screen of Death (BSOD) after installing MS 14-045? Microsoft has published an official workaround but Naked Security from Sophos has good write up and simplified workaround.

https://nakedsecurity.sophos.com/2014/08/18/microsoft-pulls-patch-tuesday-kernel-update-ms14-045-can-cause-blue-screen-of-death/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Hacme Bank

Have you ever wanted to own your own bank? Hacme Bank simulates a “real-world” web services-enabled online banking application with common vulnerabilities and without the prison time for major breaches.

http://www.mcafee.com/us/downloads/free-tools/hacme-bank.aspx

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Data Back Up Options

There are two hurricanes approaching Hawaii. This might be a good time to back up your important files up. It’s as easy as 3-2-1.
3 - Keep 3 copies of any important file: 1 primary and 2 backups.
2 – Keep the files on 2 different media types to protect against different types of hazards.
1 – Store 1 copy offsite (e.g., outside your home or business facility).

http://www.us-cert.gov/sites/default/files/publications/data_backup_options.pdf

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.