URL: https://www.microsoft.com/security/blog/?p=91853
Overview: As you build your cybersecurity career, take advantage of important
new and proactive security configuration and management capabilities that will
help your organization ‘move left’ on understanding and reducing risk.
The post Microsoft
Security: Use baseline default tools to accelerate your security career
appeared first on Microsoft
Security.
Overview: We’re excited to release a new tool called OneFuzz, an extensible
fuzz testing framework for Azure.
The post Microsoft
announces new Project OneFuzz framework, an open source developer tool to find
and fix bugs at scale appeared first on Microsoft
Security.
Microsoft delivers unified SIEM and XDR to modernize security operations
https://www.microsoft.com/security/blog/2020/09/22/microsoft-unified-siem-xdr-modernize-security-operations/
Overview: The new Microsoft Defender is the most comprehensive XDR in the
market today and prevents, detects, and responds to threats across identities,
endpoints, applications, email, IoT, infrastructure, and cloud platforms.
The post Microsoft
delivers unified SIEM and XDR to modernize security operations appeared
first on Microsoft
Security.
—————————-
Enable secure remote work, address regulations and uncover new risks with
Microsoft Compliance
URL: https://www.microsoft.com/security/blog/2020/09/22/enable-secure-remote-work-address-regulations-microsoft-compliance/
Overview: A recent Microsoft poll of Chief Information Security Officers
(CISOs) revealed that providing secure remote access to resources, apps, and data
is their top concern.
The post Enable
secure remote work, address regulations and uncover new risks with Microsoft
Compliance appeared first on Microsoft
Security.
—————————-
Identity at Microsoft Ignite: Rising to the challenges of secure remote
access and employee productivity
URL: https://www.microsoft.com/security/blog/2020/09/22/microsoft-identity-ignite-rising-challenges-secure-remote-access-employee-productivity/
Overview: Keeping your users secure, wherever they are, has been our collective
priority. Identity remains the heartbeat of all the services your users rely
on.
The post Identity
at Microsoft Ignite: Rising to the challenges of secure remote access and
employee productivity appeared first on Microsoft
Security.
As co-chair of the The 2020 NY Metro Joint Cyber Security Conference i invite you to our conferance. The on-line conferance will take
place virtually on October 22nd.
NYMJCSC is now in its seventh year; featuring a keynote and
sessions aimed at various aspects of information security and technology.
NYMJCSC will also a post-conference online workshop
on October 23rd featuring in-depth half-day
hands-on classroom-style educational courses to expand your knowledge and
foster security discussions.
NYMJCSC: Who We Are
The New York Metro Joint Cyber
Security Conference is a collaborative event cooperatively developed, organized
and sponsored by the leading information security industry organizations and
chapters.
Organizational Partners:
Community Partners:
Driven by the collaboration between members of this
coalition, the strength of organizational membership, the provision of
desirable CPE credits and the concurrence of National Cyber Security Awareness
Month, the NYMJCSC promises — once again — to be well-attended by members of
the information technology, information security, audit, academic, and business
communities.
Schedule for Oct 22, 2020
|
8:45 |
Welcome |
||
|
9:00 |
|||
|
9:45 |
Protecting the |
||
|
10:30 |
|
||
|
10:45 |
Beyond |
||
|
11:30 |
|||
|
12:15 |
 |
||
|
12:30 |
|||
|
1:15 |
|||
|
2:00 |
 |
||
|
2:15 |
Boosting Cyber |
||
|
3:00 |
|||
|
3:45 |
 |
||
|
4:00 |
|||
|
4:45 |
Closing |
||
_Schedule of Workshop and Topics Oct 23. 2020
AZ-900: Microsoft Azure Fundamentals
Instructor: Jay Ferron
In this full day
course students will learn the following information. This training is for
those who have heard about the cloud and now want to learn the Fundamentals.
Students will also learn how they can get a free account in Azure with a
$200.00 credit. This full day session will include lots of demos. Topics
include:
Robotic Process Automation: The Promise, the Patterns,
and the Pitfalls
Instructors: Mike Ogrinz and John C. Checco
Automation (RPA/RDA)
is proliferating as it is being used to optimize mundane tasks, cut costs and
support Machine Learning and AI applications. Designing for automation is not
as simple as record and play, there are several major areas for consideration
to create robust but auditable RPAs. Topics include:
To register go here:
Original
release date: September 18, 2020
The Cybersecurity and Infrastructure Security Agency (CISA) has released Emergency
Directive (ED) 20-04 addressing a critical vulnerability—
CVE-2020-1472—affecting Microsoft Windows Netlogon Remote Protocol. An
unauthenticated attacker with network access to a domain controller could
exploit this vulnerability to compromise all Active Directory identity
services.
Earlier this month, exploit
code for this vulnerability was publicly released. Given the nature of the
exploit and documented adversary behavior, CISA assumes active exploitation of
this vulnerability is occurring in the wild.
ED 20-04 applies to Executive Branch departments and agencies; however, CISA
strongly recommends state and local governments, the private sector, and others
patch this critical vulnerability as soon as possible. Review the following
resources for more information:
This eResouceKit is your guide to Working, Learning, and Living from Home, with your security and privacy defended. It will be a long and challenging road for us all, but we can and will get there, together by taking informed actions to gain control and risk prioritization during and after the pandemic – Cities and Communities, Businesses, First Responders, and Self-Employed/Gig Worker.
Fortinet is leveraging curriculum from its NSE Institute’s training and certification program to offer 24 advanced security courses for free to help IT professionals expand their cybersecurity knowledge and address new risks.
By learning about Fortinet technologies, such as FortiGate, FortiNAC and FortiManager, training participants will acquire an array of skills to defend any network against threats. Recorded lab demos for these courses will be available for on-demand viewing and supplemented with regularly scheduled live sessions with Fortinet Certified Trainers. During these live sessions, Trainers will be available to demo labs and conduct Q&A sessions. Anyone interested in getting started with Fortinet’s free training courses can visit here.
NIST
seeks feedback on Draft
NIST Special Publication (SP) 800-53B, Control Baselines for Information Systems and Organizations.
SP 800-53B provides three security control baselines for low-impact,
moderate-impact, and high-impact federal systems, as well as a privacy control
baseline for systems irrespective of impact level. The security and privacy
control baselines have been updated with the controls described in SP 800-53,
Revision 5; the content of control baselines reflects the results of a
comprehensive interagency review conducted in 2017 and continuing input and
analysis of threat and empirical cyber-attack data collected since the update
to SP 800-53.
In
addition to the control baselines, this publication provides tailoring guidance
and a set of working assumptions to help guide and inform the control selection
process for organizations. Finally, this publication provides guidance on the
development of overlays to facilitate control baseline customization for
specific communities of interest, technologies, and environments of operation.
The control baselines were previously published in NIST SP 800-53, but moved so
that SP 800-53 could serve as a consolidated catalog of security and privacy
controls that can be used by different communities of interest.
In
addition to your feedback on the three security control baselines, NIST is also
seeking your comments on the privacy control baseline and the privacy control
baseline selection criteria. Since the selection of the privacy control
baseline is based on a mapping of controls and control enhancements in SP
800-53 to the privacy program responsibilities under OMB Circular A-130,
suggested changes to the privacy control baseline must be supported by a
reference to OMB A-130. Alternatively, you may provide a description and
rationale for new or modified privacy control baseline selection
criteria.
Your
feedback on this draft publication is important to us. We appreciate each
contribution from our reviewers from the public and private sectors, nationally
and internationally, to help shape NIST publications to ensure they meet the
needs and expectations of our customers.
A public comment period for this document is open through
September 11, 2020. See the publication
details for a copy of the draft and instructions for providing
comments (including a comment template spreadsheet for your use).
NOTE:
A call for patent claims is included on page vi of this draft. For additional
information, see the Information
Technology Laboratory (ITL) Patent Policy–Inclusion of Patents in ITL
Publications.
Publication
details:
https://csrc.nist.gov/publications/detail/sp/800-53b/draft
No More Ransom initiative, with four founding members, No More Ransom provides free decryption tools for ransomware and has been growing.
The “No More Ransom” website is an initiative by the National High Tech Crime Unit of the Netherlands’ police, Europol’s European Cybercrime Centre, Kaspersky and McAfee with the goal to help victims of ransomware retrieve their encrypted data without having to pay the criminals.
Since it is much easier to avoid the threat than to fight against it once the system is affected, the project also aims to educate users about how ransomware works and what countermeasures can be taken to effectively prevent infection. The more parties supporting this project the better the results can be. This initiative is open to other public and private parties.
The site also has a way to find out what your infected with, whether there is a solution available. If there is, we will provide you with the link to download the decryption solution.
WannaCry additional prevention advice
