It looks like the next version of this great tool has been released. It can be a little frustrating to configure but time and time again my pen tester associates say EMET is one of the top controls that stop…
EMET 5.5 Released
Tag: microsoft
Windows’ Built-In Wireshark
The SANS ISC blog had s great tip last week if you ever needed to perform a packet capture but didn’t have ready access to the usual set of tools like Wireshark or tcpdump. On the defensive side you might…
Stop Blaming Users for Choosing Dumb Passwords
Microsoft put out a nice paper (pdf) last week countering many of the common password authentication best practices. The main point is that we need to stop blaming users for choosing dumb passwords (they just don’t care) and instead beef…
TrueCrypt Mystery
Fascinating discussions going on today about one of our all time favorite tools, TrueCrypt… If you haven’t heard, the TrueCrypt site is down and redirecting to a SourceForge page recommending to stop using it and providing instructions for migrating to…
Microsoft Azure Achieves FedRAMP JAB P-ATO
Following Amazon from last May, Microsoft is finally on board as a FedRAMP validated supplier. Nothing really too interesting here besides another one of the big “cloud” boys joining in for all those lucrative government contracts … that is if…
How-To On Australian Signals Directorate’s Top 4
I’ve been a big fan of some of the simple yet effective advice the Australian Signals Directorate (ASD) has given over the years. Key among them are the Top 35 strategies for mitigating threats posted each October. But some of…
Weekly Rewind – Malware Analysis, Microsoft, BSidesDC & More…
Welcome to another edition of our Weekly Rewind – where we summarize all our posts from the last week. The top stories this week were 3) “BSidesDC CFP Closes in 2 Days”, 2) “Microsoft to Cut Test Lab Friendly TechNet…
Microsoft to Cut Test Lab Friendly TechNet Subscription
It’s a dark day for many information security pros that depend on the inexpensive $200 per year TechNet subscription service to build out their test labs. Microsoft has formally announced that all sales of the service will cease on August…
Weekly Rewind – NSA Scandal, NSA – Scramblis Edition, Microsoft & More…
Welcome to another edition of our Weekly Rewind – where we summarize all our posts from the last week. The top stories this week were 3) “Microsoft Caters to Betas & Teens in Entry to th Bug Bounty Market”, 2)…
Microsoft Caters to Betas & Teens in Entry to Bug Bounty Market
Well, it’s about time…Other companies have been enjoying high-quality, cost-effective security fixes for years. I’m not really sure what took Microsoft so long but at least they’ve finally ponied up. Microsoft has previously offered a temporary solution with their BlueHat…