Cybersecurity
First task: No more random Raspberry Pis on the network.
Microsoft warned that a malicious campaign targeting SQL Servers is using an "uncommon living-off-the-land binary" that to achieve persistence on compromised systems -- saying that defenders need to pay increased attention to abuse of the sqlps.exe which ships with SQL Server as standard. Without naming the attackers
Don't put that stuff on the public internet, kids.
Former NCSC Director of Incident Management John Noble, opening the Qualys Security Conference (QSC) in London, warned that much of what he would say would be “to use a British expression, bleedin’ obvious”. He was right. And that's a problem. “My colleagues in the NCSC [say] patching remains
"This is a major attack surface and not consistent with the level of security that public cloud customers expect."
The future of IR is in delivering an automated triage-level analysis of relevant artefacts...
Administration tells agencies to inventory cryptographic systems stat.
Just block iControl REST access through the management interface for starters...