Tools changedetection.io: Webpage Monitoring for Patch Management Part of my job is monitoring updates for many systems that are released monthly. For the most part, patch Tuesday keeps these updates on a pretty consistent schedule. The concerning updates are the out-of-band updates that are released at anytime, on a as-needed basis, usually to patch a critical process
Tools RustScan - Fast Port Scanning Port scanning is a widely used penetration testing tool to scan and verify if certain ports are open or vulnerable within a network. The default go-to tool is Nmap but it has been around since 1997 and is currently being out-performed by other tools in terms of scan speed and
Guides Windows Virtualization-Based Security: What is it? Windows Virtualization-based Security (VBS) is a security integration that uses virtualization to enhance your device's security. It utilizes Windows hypervisor to create a virtual environment for security features to operate in isolated sections of the operating system. With this feature, the trust boundaries of your computer are changed.
Guides Protecting yourself from Identity Theft Recently, there have been many data breaches exposing Personally Identifiable Information (PII), making it likely that your full name, email address, home address, phone numbers, credit card numbers, and Social Security Numbers (SSN) are now circulating on the dark web. This information is just waiting for a bad actor to
Vulnerability NetBIOS Vulnerability: Mitigating risks by disabling service NetBIOS(Network Basic Input/Output System) is an old service that allows computers to communicate with each other over a LAN and to identify Windows systems names in TCP/IP. Originating in 1980s, NetBIOS ran over IEEE 802.2 and IPX using NetBIOS Frames (NBF) and NetBIOS over IPX/SPX
Vulnerability CVE-2013-3900: Authenticode Signature Verification - Certificate Padding Description Microsoft republished a security vulnerability Jan 21, 2022 to re-address an issue that allows remote attackers to execute arbitrary code in the context of the current user by exploiting the WinVerifyTrust function of Windows Server and Windows 10/11. If the user is logged in with administrator creds, an
