Bemused ramblings some dude says on the internet
January 15, 2020 is going to be an important day in the tech industry. Not because of some new product or the coming singularity, but because of the end of life for Windows 7 and all Server 2008 and 2008 R2 derivatives.
Windows 7 and derivatives will have received just over a decade of support by end of life and were essential for ending the era of Windows XP.… Read the rest
Automation has encroached on almost every sector of the economy indiscriminately rearranging jobs and careers in its wake. It has been strangely absent from the news in the field of cybersecurity and technology. The irony is that cybersecurity and other technical fields have probably had the most time and effort spent on automation out of any sector, just that the developments have not seemed as disruptive as they could.… Read the rest
There are new stories every week about this company or that being hacked. Many of these stories happen because of leaky API’s. Large RMM providers like Kaseya and ConnectWise are being targeted repeatedly for exploits.
An API is an Application Programming Interface. API’s are used to extend and expand the functions of a product and to allow them to interact with other products.… Read the rest
I previously wrote about another technique malware and ransomware authors were using to obfuscate their infections. Fileless malware is the natural evolution of this and is far scarier for file-based antivirus solutions. These infections have been making the news with Sodinokibi (or Revil), and others.
These malware attacks are coming from more recent exploits which allow them to run what they want in memory without having to touch the disk at all (for the infection itself) as long as Powershell works on the machine.… Read the rest
With the sheer volume of ransomware attacks in the past couple weeks, I decided to write an article about what works and what doesn’t. I’m writing about ransomware attacks, but this advice ultimately applies to most types of compromises, viruses, or malware attacks. These steps are going to be more generic because there is “no one size fits all” approach to resolving infection or compromise.… Read the rest
Windows has multiple options for scripting languages, but some are better suited than others for widespread administration. This article looks to cover the most accessible options as well as their specific use cases and any caveats. I am focusing on what can be used in order to administer Windows machines, ideally remotely via an RMM tool or other remote access. This article will cover what languages are most widely available as well as the pros and cons of each.… Read the rest