Robert H. Osborne

Learn active reconnaissance enumeration techniques with Chris Paul. Gather critical information during pentests, exploit vulnerabilities, and become an enumeration pro.

23

POV: You tell a SOC analyst they can just search all their security data without all that ETL, without learning a new syntax, and without pivoting from console to console..

20

Did you know that 37% of malicious email attachment types are .doc and .dot? If you get an attachment from an unknown source, DON’T open it! 📧 Forward it to your IT team for investigation. #cybersecurity #hackers #databreach #titantechnologies #marlboro #centraljersey

1

JYSAC is getting ported to an audiobook. Listen to the introduction to Jump-start Your SOC Analyst Career: A Roadmap to Cybersecurity Success and stay posted for the Audible in a week or so.

9

3 Comments

As a modern SOC analyst, juggling multiple tabs and pivoting between them during an incident can be brutal. But it doesn't have to be. With StrikeReady, you can conduct your investigations in one place, regardless of the technology stack, and without writing a single line of code. Unlike other vendors who are tied to the technology they sell, our commitment is to you, the defender. Our goal is to empower you and make your work more efficient. Let’s connect and explore how StrikeReady can simplify your life. We will be at Black Hat—let’s meet and chat! Book a meeting here https://lnkd.in/gWMuN_ys #SOC #cybersecurity #BlackHat #StrikeReady #ModernSOC #SecurityAI

4

🔗 Tired of juggling multiple tools across a dozen tabs? StrikeReady is your unified command center, connecting all your best-of-breed tools into one seamless experience. No more whiplash from pivoting between platforms—just complete visibility, collaboration, and hyper-actionable intelligence in one place. 🛡️ Our allegiance is to you, the defender. Empower your #SOC with the freedom to use the tools that work best for you, without writing a single line of code. 👉 Watch the quick video below then Schedule a demo and see how StrikeReady can transform your SOC  https://ow.ly/sa1F50SYSJQ #ModernSOC #CyberSecurity #BestOfBreedSecurityTools #StrikeReady #UnifiedSecurity

17

Esf Labs News | 🚨 Alert: Black Basta Ransomware Exploits Microsoft Teams | Source : https://lnkd.in/gcKzVRtY The Black Basta group is using advanced social engineering tactics within Microsoft Teams, impersonating IT support to deploy ransomware. Protect Your Organization: Verify IT Requests: Always confirm unsolicited support messages, even on internal platforms. Restrict External Access: Limit external communications in Teams to prevent unauthorized contact. Enhance Security Training: Regularly update employees on emerging threats and response protocols. Stay vigilant and proactive to safeguard your digital assets. #CyberSecurity #Ransomware #RansomwareAttack #MicrosoftTeams #SocialEngineering #BeAware #StaySafe #StayProtect #EsfLabsNews #EsfLabsCyberSecurityNews #EsfLabsFeeds

8

Microsoft recently sent out emails warning some customers about a data breach, but there's a big problem: The emails looked like spam. It’s caused a bit of confusion and concern. So, what happened? Microsoft didn’t follow their usual data breach process. Instead of using their secure customer portal, they emailed admins directly. Unfortunately, these emails often end up in spam folders. Even worse, admin accounts should be secure and not used for regular email communications. Oh, and the emails contained a “secure link” that leads to a domain not immediately recognizable as Microsoft’s, which caused even more alarm. Many people submitted the link to urlscan.io, a service that checks if a website is safe, to verify its legitimacy. You might be wondering how you can tell if an email like this is spam or legitimate. First, look at the sender's email address and see if it matches what you’d expect from Microsoft. Check for grammar mistakes or unusual formatting, which are common in spam. Be cautious of any links – you can hover over them without clicking to see where they lead. If they don’t look right, don’t click. If you’re still unsure, you can contact Microsoft support directly through their official website, or my team will be happy to help. It’s better to be safe and verify the email than to risk a potential scam. Have you seen one of these emails? And did you think it looked suspicious? https://lnkd.in/e27spETQ #CyberSecurity #Microsoft #DataBreach

4

1 Comment

Very well thought out post regarding one of the biggest issues with the cybersecurity industry right now!

3

Cyber Safety Quick Tip: Close out and delete old accounts. Don't leave important data laying around for hackers to steal. If you switch to a new email or other type of account, delete the data and close it completely before disregarding it.

1

I recently posted in anger about SPAM SMS text and robocalls and I'm sorry... ...sorry I didn't spend that 10 minutes perfecting my PowerShell Selenium SPAMReporter script. I now have the capability to bulk report millions of spam calls on behalf of victims to enablers like Bandwidth Inc. using their own forms. No API needed. Just PowerShell expertly guiding Selenium to automate the forms filling and submission process. The FCC database contains 1.57M rows of unwanted call reports. If telephony providers continue to shirk their responsibilities and put the onus on the victims to report these bad actors, then I can submit 1.57M reports to all 9000+ STIR/SHAKEN registered providers. #SPAM #Cybersecurity #Robocalls #Robotext #Robosms #SMSSpam #ElectionSpam

17

2 Comments

Adding Humor into Cyber - It can be done. Recently I had the privilege of training leadership at the Spokane Housing Authority alongside Todd Miller. Todd had an unconventional approach to the Senior training event by wearing a T-shirt that humorously read "I find your lack of Cybersecurity Disturbing" sparked a positive shift towards prioritizing Cybersecurity within the organization. It's moments like these that showcase the importance of embracing creativity and humor in the tech space. Has anyone else wore a T-shirt like this for a senior leadership training instead of a suit and tie? #IT #Cybersecurity #TechCommunity #LeadershipTraining 🖥🔒

27

2 Comments

Windows PHP server owners patch now - PHP ADDRESSED CRITICAL RCE FLAW POTENTIALLY IMPACTING MILLIONS OF SERVERS Researchers at cybersecurity firm DEVCORE discovered a critical remote code execution (RCE) vulnerability, tracked as CVE-2024-4577, in the PHP programming language. An unauthenticated attacker can exploit the flaw to take full control of affected servers. https://lnkd.in/gq3VMaQp (Thanks Critical Insight for the reminder)

13

5 Comments

We’ve worked in cybersecurity for years, and here are 5 things we’d NEVER do! 1.Reuse passwords or use one-word passwords. If you do this, you are asking for trouble. They are so easy to crack, you don’t stand a chance. 2.Use public WiFi. You might as well just write your login information on a Post-it note and hand it over to the hackers. 3.Click links in e-mails. If your bank e-mails you, just go log in. If there is a promotion for a store, just go to that store’s website and search for it. 4.Skip two-factor or multi-factor authentication. It’s an extra step that can be the difference between someone getting into your account or not. 5.Save passwords to my Google account. If someone hacks your Google account, they have your passwords for everything. It’s easy, but easy is dangerous, so use a secure password manager. https://lnkd.in/e4d4WhdT

1

I usually don't post my holiday pictures on Linkedin, but when I do I make sure they are taken from my hotel's CCTV system 👇 How's was that possible 1. Check for WiFi connections 2. Reuse your room's password for the "Office" network 3. Scan the internal network using NMAP 4. Find CCTV web interface on obscure port 5. Reuse once again the same password (!) 6. ?? 7. Take a picture of yourself 😎

188

16 Comments

Stay safe during #InternetSafetyMonth!🛡 Check out some resources below from the Cybersecurity and Infrastructure Security Agency.

7