Kick Cyber Security Into Gear - Page 4 Of 21 - ASAP = As Secure As Practical, As Soon As Possible

Tel: (+61) 422 933 319

Email: [email protected]

Articles
NSW Clubs – Impacted by Breach of customer data
NSW Clubs – Impacted by Breach of customer data Another Australian business affected through a 3rd party cyber incident, though in the linked article (at the footer of this post) great pains are taken to explain that it is not their own systems but rather a 3rd party, yet who owns the data that has…
Read More: NSW Clubs – Impacted by Breach of customer data
kicksec.IO
02/05/2024
Articles, ACSC, ACSC essential 8, Macro, Office Macro
Microsoft Office Macro security – Are you covered?
Microsoft Office Macro security – are you covered? Microsoft Office macros are an amazing way to automate and script many parts of a business process, sometimes directly on an Office document, Spreadsheet or PowerPoint but also for interacting with third party data, the operating system and more, which is also why the recommendation today in…
Read More: Microsoft Office Macro security – Are you covered?
kicksec.IO
16/04/2024
Articles
AI devices currently, nothing but “hot Air”
AI devices currently, nothing but “hot Air”, problems with what is possible with our voice, conflicts with the ideas of start up founders to make money. Mr Who’s The Boss, a YouTube influencer and content creator summarised this with another AI device vying for our wallets here very succinctly. If you plan to buy this…
Read More: AI devices currently, nothing but “hot Air”
kicksec.IO
16/04/2024
CISA Scuba, CISA, Open source, SCUBA, Security Assessment, Security posture
SCUBA now scans Google
SCUBA is not Scuba, one is a pursuit I would like to try one day and the other is something to deetect misconfigurations and some security vulnerabilities in a cloud environment (the one in all CAPS). CISA SCUBA is maintained and is free, it works for Microsoft 365 environments and now they have updated for…
Read More: SCUBA now scans Google
kicksec.IO
13/12/2023
Data Protection, Data Loss Prevention
Data Cleansing and Large Language Models
Data Cleansing and Large Language Models, what is great about large language models for enterprise is also what is potentially most problematic. Training an LLM using your data will bring amazing upsides to productivity, for example, maybe I have a customer who requires my assistance to build out a programme of work for a project.…
Read More: Data Cleansing and Large Language Models
kicksec.IO
12/12/2023
Articles, Cyber risk
Consulting Integrity
Consulting with Integrity is critically important in my industry of Cyber Security, there are many consultants preaching to be what they are not, “knowledgeable” people. The Cyber security industry is fully of vendors and sellers trying to position security tooling as a solution to a cyber risk problem. I want to share a recent story…
Read More: Consulting Integrity
kicksec.IO
08/12/2023
Business Email Compromise
Targeted Business Email Compromise through weaponising your own tenant!
Targeted Business Email Compromise through weaponising your own tenant!, As we in the ‘Industry’ are well aware, 90% of Cyber security incidents start with email, its simple, we all use it and an email attack targets the weakest link in our security posture, me and you. During the past month an old/new cyber criminal attack…
Read More: Targeted Business Email Compromise through weaponising your own tenant!
kicksec.IO
28/09/2023
Supplier Breach
Occams razor – When an attack is unknown?
Occams razor – When an attack is unknown? This is a true story with a recent Managed Service Providers customer: Customer was breached, bank account details changed and a significant amount of money was transferred from the business account. I am not using industry or amounts to keep this anonymous, this tale though illustrates something…
Read More: Occams razor – When an attack is unknown?
kicksec.IO
27/09/2023
SIEM
Splunk, assassinated by Cisco – RIP
Cisco to acquire Splunk? good news? not if you are a Splunk customer, not if you are a Cisco customer either….. Splunk was one of those brands that I could not get my head around, a name that seemingly means nothing to Americans but to others on the global stage, almost dirty but not quite.…
Read More: Splunk, assassinated by Cisco – RIP
kicksec.IO
26/09/2023
Articles
A picture is not always worth a thousand words
A picture is not always worth a thousand words, cyber security vendors please take note Question: When is a picture NOT worth a thousand words? Answer: When it has no context Just like my photo, it has no context and therefore would by of little interest to anyone who wasn’t on the same trail with me…
Read More: A picture is not always worth a thousand words
kicksec.IO
11/08/2023