Disable Autorun and Autoplay for Removable Media One of the oldest tricks in security still works. Leave a few USB drives in a parking lot, a lobby, or a break room, and wait. Someone picks one up, plugs it into a work computer to see what's on it, and if that computer is set to automatically run whatever the drive offers, the attacker just skipped past nearly every other defense you have. Control 10.3 closes that specific door by turning off the feature that lets removable media run on...
CIS IG1 Safeguard 5.2: Why Unique Passwords Still Matter in a Multi-Factor World By Heath Gieson CIS Safeguard 5.2 is deceptively simple on the...
Security Complexity Is an Operational Risk by Heath Gieson Most organizations do not set out to create a complex security environment. It usually...
As we move into CIS Control 5, Account Management, we're going to spend a few weeks working through the individual safeguards. We're starting with...
by Heath Gieson Manage Default Accounts on Enterprise Assets and Software As we continue through the CIS IG1 controls, a consistent pattern keeps...
Why More Updates Are Coming — and Why That’s a Good Thing Over the next several weeks, organizations are likely to notice something familiar but...
When the Management Plane Becomes the Attack Plane by Heath Gieson A few years ago, I was sitting in a conference room with an executive team after...
by Heath Gieson Some attacks are sophisticated. Weeks of reconnaissance, carefully crafted phishing emails, vulnerabilities quietly exploited in the...
by Heath Gieson Every device you deploy and every application you install arrives configured for ease of use, not security. When was the last time...
When geopolitical tensions rise, widespread cyber activity follows. Recent attacks connected to events involving Israel, the Gulf States, and India...
