Kick Cyber Security Into Gear - Page 5 Of 21 - ASAP = As Secure As Practical, As Soon As Possible

Tel: (+61) 422 933 319

Email: [email protected]

Multi factor Authentication, MFA, multifactor authentication
Security Controls
Security controls are not optional and after another cyber security breach that led to a business I have worked with (not as their security consultant) suffering a “CryptoJacking” event where they lost $40,000 US dollars I though the following comment might be necessary. MFA as a Security Control Multi-factor Authentication, as a security control it…
Read More: Security Controls
kicksec.IO
07/08/2023
Cyber risk, Supplier Breach
Supply Chain risk
There has been a number of supply chain attacks recently including MoveIT and 3CX, these cyber attacks can be immensely costly and at the lest distressing for the businesses involved. For the software provider though these breaches can and often do have disastrous impact on their business, which could have been avoided by following a…
Read More: Supply Chain risk
kicksec.IO
14/07/2023
Security posture, Articles, As Secure As Practical, Cyber Security Framework
From Backup to resilient cyber security
In the Beginning From Backup to resilient cyber security: Best practises for Information Technology such as “Least privilege access”, “Admin account segregation”, “Operating system patching”, “Multi-factor authentication”, even “Patching and updating applications” have been around for many years, undertaken as ritual by many Information Technology departments within businesses across Australia as best practise maintainence, without…
Read More: From Backup to resilient cyber security
kicksec.IO
11/07/2023
Articles, Attack surface reduction, Microsoft Defender for Endpoint
Four actions for protection with Microsoft Defender for Endpoint
Four actions for protection with Defender for Endpoint: Originally written by myself for Crayon and sharing here to help other organisations move past Endpoint Detection and response into preventative technologies to improve your security posture. Introduction Often I am asked the question, “Why should I use Defender for Endpoint, I use product ‘X’ and Product…
Read More: Four actions for protection with Microsoft Defender for Endpoint
kicksec.IO
29/03/2023
Breach, Opinion
Optus, Medibank and Latitude, YOU are responsible for your clients data
Optus, Medibank and Latitude, YOU are responsible for your clients data Just the same as all businesses who hold sensitive personal information, you may not want to admit this but you are responsible for your clients data security where their sensitive data is stored on your platform. How do the above machines stay safe? From…
Read More: Optus, Medibank and Latitude, YOU are responsible for your clients data
kicksec.IO
28/03/2023
Articles, Breach, Just good enough security, Security posture
CVE-2023-23397: Microsoft outlook vuln
CVE-2023-23397: Microsoft Outlook Vuln: elevation of privilege vulnerability leads to NTLM credential theft: Very quick and short post today, I have already been contacted today around mitigations for this vulnerability and wanted to get some quick steps out early incase your business is unsure how to check whether you are at risk. My post assumes…
Read More: CVE-2023-23397: Microsoft outlook vuln
kicksec.IO
22/03/2023
Articles, Security posture
101: Basic Security Posture for WordPress
101: Basic Security Posture for WordPress, WordPress is one of the most popular internet technologies in use today, as a tool for amateur and professionals wanting to blog, to sell, to consult or to do almost anything else, nothing comes close to the WordPress ecosystem for flexibility and extensibility – want to build a store…
Read More: 101: Basic Security Posture for WordPress
kicksec.IO
14/01/2023
Articles, Microsoft Defender for Endpoint
101: Introducing Microsoft Defender for Endpoint
101: Introducing Microsoft Defender for Endpoint, one of my favourite role functions is to talk with customers about Microsoft security, of course I like to speak about security in general as well but Microsoft do a really great job covering 80% of what organisations need from a cyber security perspective so I almost always start…
Read More: 101: Introducing Microsoft Defender for Endpoint
kicksec.IO
13/01/2023
Zero Trust Network Architecture, GDAP, Microsoft
MSP’s Enable GDAP or lose access to your O365 customers
MSP’s Enable GDAP or lose access to your O365 customers, Microsoft has released a new more secure method for Managed Service Providers to perform administrative tasks against their clients called Granular Delegated Admin Privileges or GDAP for short. Introduction GDAP provides a much better Least Privilege Access model as is a core component of many…
Read More: MSP’s Enable GDAP or lose access to your O365 customers
kicksec.IO
20/12/2022
Articles, Just good enough security, Security information event management, Security posture, SIEM
Microsoft Sentinel – reducing spend and log complexity first
Microsoft Sentinel – reducing spend and log complexity first, Microsoft sentinel is one of the easiest SIEM platforms to switch on and be usable without configuration. But the devil is in the details of what should be configured to ensure that the signal data being ingested is most useful, minimally duplicated and at the lowest…
Read More: Microsoft Sentinel – reducing spend and log complexity first
kicksec.IO
19/12/2022