cyber security

A collection of 82 posts

cyber security

When do you pay the ransom?

Should you pay the ransom when attacked with ransomware? I don't think there's a clear cut answer to that...

how to

Setting up MTA-STS using AWS S3, CloudFront and AWS Certificate Manager

Mail Transfer Agent Strict Transport Security is a reasonably new protocol, that helps protect email you're being sent from interception. Here's how to set it up with AWS S3, CloudFront and Certificate Manager.

how to

Setting up MTA-STS using Azure Static Web Apps

Mail Transfer Agent Strict Transport Security is a reasonably new protocol, that helps protect email you're being sent from interception. Here's how to set it up with Azure static web apps.

Security Congress 2021

(ISC)² Security Congress 2021 - the online experience

What was it like to actually attend a conference purely online?

Security Congress 2021

(ISC)² Security Congress 2021 - day three

Rounding out the conference on day three with some fantastic speakers.

Security Congress 2021

(ISC)² Security Congress 2021 - day two

Looking at my sessions on day two.

Security Congress 2021

(ISC)² Security Congress 2021 - day one

My reflections on the first day of the (ISC)2 Security Congress conference.

honeypot

Playing with honeypots: part 4

Looking at a different attack on the honeypot I investigate an attempt to deploy a crypto currency miner.

honeypot

Playing with honeypots: part 3

Having built a honeypot and published it to the Internet, it's time to see what the attackers tried to do.

honeypot

Playing with honeypots: part 2

I build my honeypot in Microsoft's Azure cloud using open source software.

honeypot

Playing with honeypots: part 1

Let's look at what honeypots are, and why we might use them.

cyber security

Receiving a security disclosure for an old subdomain

After receiving a security disclosure from a security researcher I knew I needed to investigate.

wargaming

Wargaming: running incident response plan tests - part 3

Part two [https://blog.jonsdocs.org.uk/2021/04/18/wargaming-running-incident-response-plan-tests-pt2/] finished with our defenders heading in the right direction to find the simulated infection.  They'll have used a combination of tools in order to get this far, likely including firewall and network logs.  As a reminder, for

wargaming

Wargaming: running incident response plan tests - part 2

The time has come to run your wargame, let's look at what happens on the day itself.

wargaming

Wargaming: running incident response plan tests - part 1

Cyber exercising is important for checking how a team responds to an incident.

cyber security

The dangers of default credentials

Default credentials are useful for logging in to systems initially, but shouldn't remain in place afterwards.

hacking my old blog

Hacking my old blog: part 4, security fixes

To finish off the series, I discuss some of the mechanisms that could have been used to protect my old blog.

hacking my old blog

Hacking my old blog: part 3

The final post in the attack phase of this series.

hacking my old blog

Hacking my old blog: part 2

Let's get into the admin panel...

hacking my old blog

Hacking my old blog: part 1

A dig around my old blog to see if I can hack it.

cyber security

Dealing with low hanging fruit

Deal with the easy quick wins before you have an external testing team perform their audit.

cyber security

My CISSP experience

In early September 2020 I studied for the CISSP at an intensive six day course.

cyber security

"We have conducted a review to ensure this never happens again"

If you're going to claim to have "conducted a review" you need to make sure your response is appropriate and useful.

development

Passwords as technical debt

Passwords aren't going away...

cyber security

Dealing with Ransomware - a real life tale

Thinking clearly during a ransomware attack is key, helping to save your data.