View source for PSWEpisode644

From Security Weekly Wiki

← PSWEpisode644

You do not have permission to edit this page, for the following reason:

---

You can view and copy the source of this page.

<!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> = Paul's Security Weekly Episode 644 - 2020-03-19 = ==Episode Audio== <!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> <p>[https://securityweekly.com Paul's Security Weekly Episode 644]</p> == Announcements == <!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> <p> <ul style="margin-left: 50px;"> <li>Register for our upcoming webcasts and virtual trainings by visiting securityweekly.com selecting the webcast/training drop down from the top menu bar and clicking registration. In our first virtual training with Online Business Systems you will learn how to generate a complex SHA-256 hashed password and then use password cracking tools to break it. In our next webcast with Gravwell, we will cut through the marketing buzzwords and teach you about collecting & analyzing logs in hybrid cloud environments.</li> <li>CyberSecurity Exchange Day hosted by OSHEAN and the Pell Center was originally scheduled for Wednesday, March 18th and has currently been postponed. The new date is still TBD and we will keep you posted as soon as we hear more!</li> <li>SecureWorld Boston was scheduled for March 25th & 26th at the Hynes Convention Center. The event has been postponed until further notice. We will keep you in the loop as soon as we know more!</li> <li>InfoSecWorld 2020 was originally scheduled for March 30 - April 1, 2020 at the Disney Contemporary Resort! This conference has been rescheduled for June 22nd-24th due to COVID-19. Security Weekly listeners still save 15% off the InfoSec World Main Conference or World Pass! Visit securityweekly.com/ISW2020, click the register button to register with our discount code or the schedule button to sponsor a micro-interview!</li> </ul> </p> = News - Drobo Exploit, Docker Escape, SMBv3.11 = <!-- ************************* MAKE CHANGES IN THE TEMPLATES BELOW! *************************** --> {|style="width: 100%;margin: auto; " cellpadding="10" |<center>{{#ev:youtube|n2iR6Wa5QdI }}</center> |- |<p>'''Description:'''<br><br> SANS Penetration Testing | Microsoft SMBv3.11 Vulnerability and Patch CVE-20200796 Explained, Drobo 5N2 4.1.1 - Remote Command Injection, $100K Paid Out for Google Cloud Shell Root Compromise, WordPress, Apache Struts Attract the Most Bug Exploits, Run Docker nginx as Non-Root-User.</p> |- |<p>'''Content:'''<br><br> Scan for SMB 3.11: nmap -p445 --open --script smb-protocols -Pn -n 172.16.1.0/24 | grep -P '\d+\.\d+\.\d+\.\d+|^\|.\s+3.11' | tr '\n' ' ' | sed -e 's/Nmap scan report for/\n/g; s/\|//g; s/\_//g' WordPress, Apache Struts Attract the Most Bug Exploits - We have the tools and processes to fix this already, but many organizations don't do it, therefore I somewhat disagree with these statements: Even if best application development practices are used, framework vulnerabilities can expose organizations to security breaches. Run Docker Nginx as Non-Root-User - In Docker, this is a problem as it means the container will drop you into root-level privileges by default for a shell (exploit or with docker exec -ti). So, for Docker, make sure you change this as the Docker Hub image for Nginx runs as root! They should really change this.</p> |} ==[https://twitter.com/@MrJeffMan Jeff Man]'s Content: == [[Image:Jeff_Man_2-0.jpg|50px|thumb|left]] <br> {{Template:PSW644NewsJeff Man}} ==[https://twitter.com/@joff_thyer Joff Thyer]'s Content: == [[Image:Joff_Thyer-0.jpg|50px|thumb|left]] <br> {{Template:PSW644NewsJoff Thyer}} ==[https://twitter.com/@haxorthematrix Larry Pesce]'s Content: == [[Image:larry_headshot-0.jpg|50px|thumb|left]] <br> {{Template:PSW644NewsLarry Pesce}} ==[https://twitter.com/@lelandneely Lee Neely]'s Content: == [[Image:Lee_Neely-0.jpg|50px|thumb|left]] <br> {{Template:PSW644NewsLee Neely}} ==[https://twitter.com/@securityweekly Paul Asadoorian]'s Content: == [[Image:Paul_Asadoorian-0.png|50px|thumb|left]] <br> {{Template:PSW644NewsPaul Asadoorian}} = Technical Segment - Work from home securely = <!-- ************************* MAKE CHANGES IN THE TEMPLATES BELOW! *************************** --> {|style="width: 100%;margin: auto; " cellpadding="10" |<center>{{#ev:youtube|lP3River00o }}</center> |- |<p>'''Description:'''<br><br> The challenges and differentiated values of desktop and laptop protection and administrative tool control (e.g., Powershell, SSH) for remote users and administrators to work securely.</p> |- |'''Guest:''' |'''Bio:''' |- |[[Image:PeterSmith-0.jpg|200px|thumb|<center>'''[https://twitter.com/@PeterSmith2013 Peter Smith]''' is Founder, CEO at Edgewise</center>]] |Peter Smith, Edgewise Founder and CEO, is a serial entrepreneur who built and deployed Harvard University's first NAC system before it became a security category. Peter brings a security practitioner's perspective to Edgewise with more than ten years of expertise as an infrastructure and security architect of data centers and customer-hosting environments for Harvard University, Endeca Technologies (Oracle), American Express, Fidelity UK, Bank of America, and Nike. |- |} ==[https://twitter.com/@MrJeffMan Jeff Man]'s Content: == [[Image:Jeff_Man_2-0.jpg|50px|thumb|left]] <br> {{Template:PSW644Technical SegmentJeff Man}} ==[https://twitter.com/@haxorthematrix Larry Pesce]'s Content: == [[Image:larry_headshot-0.jpg|50px|thumb|left]] <br> {{Template:PSW644Technical SegmentLarry Pesce}} ==[https://twitter.com/@lelandneely Lee Neely]'s Content: == [[Image:Lee_Neely-0.jpg|50px|thumb|left]] <br> {{Template:PSW644Technical SegmentLee Neely}} ==[https://twitter.com/@securityweekly Paul Asadoorian]'s Content: == [[Image:Paul_Asadoorian-0.png|50px|thumb|left]] <br> {{Template:PSW644Technical SegmentPaul Asadoorian}} ==[https://twitter.com/@tyler_robinson Tyler Robinson]'s Content: == [[Image:Tyler_Robinson-0.png|50px|thumb|left]] <br> {{Template:PSW644Technical SegmentTyler Robinson}} = Interview: Zen And The Art Of Logs In The Cloud - 6:00-6:45PM = <!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> {|style="width: 100%;margin: auto; " cellpadding="10" |<center>{{#ev:youtube|zI8uzsBg3oQ }}</center> |- |<p>'''Description:'''<br><br> Struggling with how to get your logs from the cloud? Have no fear, Corey and the Security Weekly crew talk about how to configure your logs in the cloud, use cloud-native services to handle the shuffling of logs in and out of the cloud, and control your costs! We conclude by talking a bit about Windows Event logs and overcoming some gotchas.</p> |- |<p>'''Content:'''<br><br> Visit https://securityweekly.com/gravwell to grab their open-source version and collect and analyze ALL of your logs. Drink all the booze, log all the things.</p> |} {|style="width: 100%;margin: auto; " cellpadding="5" |'''Guest:''' |'''Bio:''' |- |[[Image:Corey_Thuen_-0.jpg|200px|thumb|<center>'''[https://twitter.com/@CoreyThuen Corey Thuen]''' is Co-Founder at Gravwell</center>]] |Corey Thuen is a founder of Gravwell and has spent over a decade doing cybersecurity at places like Department of Energy national labs, Digital Bond, and IOActive. That experience is now driving development of a full-stack analytics platform built to alleviate pain points he personally experienced from inflexible tools. |- |} ==Hosts== <!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> {|style="width: 100%;margin: auto; " cellpadding="1" |[[Image:Jeff_Man_2-0.jpg|100px|thumb|<center>[https://twitter.com/@MrJeffMan Jeff Man] - Sr. InfoSec Consultant at Online Business Systems</center>]] |[[Image:larry_headshot-0.jpg|100px|thumb|<center>[https://twitter.com/@haxorthematrix Larry Pesce] - Senior Managing Consultant and Director of Research at InGuardians</center>]] |[[Image:Lee_Neely-0.jpg|100px|thumb|<center>[https://twitter.com/@lelandneely Lee Neely] - Senior Cyber Analyst at Lawrence Livermore National Laboratory</center>]] |[[Image:Paul_Asadoorian-0.png|100px|thumb|<center>[https://twitter.com/@securityweekly Paul Asadoorian] - Founder & CTO at Security Weekly</center>]] |[[Image:Tyler_Robinson-0.png|100px|thumb|<center>[https://twitter.com/@tyler_robinson Tyler Robinson] - Managing Director of Network Operations at Nisos, Inc</center>]] |}

Return to PSWEpisode644.