malware Archives - Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/tag/malware Exploring the intersection of cybersecurity, psychology, and resilience. Sun, 27 Jun 2021 10:46:04 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.4 https://jeanchristophvonoertzen.com/wp-content/uploads/2020/10/favicon-4.png malware Archives - Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/tag/malware 32 32 Event takeaways: BSidesMeSh21 – day 2 https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-2 https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-2#respond Tue, 22 Jun 2021 16:05:01 +0000 https://jeanchristophvonoertzen.com/?p=511 My key takeaways 11 min from publishing credentials (accidently) to github till pwn 2019: ~200k credentials in Github ; 2021: +20% runtime secrets go to application secrets managers AWS Secrets Manager GCP Secrets Manager Hashicorp Vault Azure Vault InfoSec’s dirty little secret: We can’t know all the options, but we still need to help secure […]

The post Event takeaways: BSidesMeSh21 – day 2 appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-2/feed 0 Event takeaways: BSidesMeSh21 – day 1 https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-1 https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-1#respond Mon, 21 Jun 2021 16:34:29 +0000 https://jeanchristophvonoertzen.com/?p=507 My key takeaways Security in sprints vs whole security sprints? Smaller activities from the very beginning. It is not full time, but always ongoing. And maybe, if the situation is very tricky, entire sprints might be necessary, too. — Thomas Fricke Kubernetes does its best to be secure inside. Unfortunatly it is not configured so […]

The post Event takeaways: BSidesMeSh21 – day 1 appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-1/feed 0 Webinar takeaway: Move Aside Script Kiddies: Malware Execution in the Age of Advanced Defenses https://jeanchristophvonoertzen.com/webinar-takeaway-move-aside-script-kiddies-malware-execution-in-the-age-of-advanced-defenses https://jeanchristophvonoertzen.com/webinar-takeaway-move-aside-script-kiddies-malware-execution-in-the-age-of-advanced-defenses#respond Thu, 03 Dec 2020 19:02:11 +0000 https://jeanchristophvonoertzen.com/?p=280 My key takeaways it’s getting harder to execute malware in a lot of environments, also due to endpoint maturity 3 parts of an assumed compromise: priv esc, lateral movement, senstive data access Win10 is safer then ever, also Windows Defender has improved defense vendors have signatures for almost all metaspoilt machine code nowadays you can’t […]

The post Webinar takeaway: Move Aside Script Kiddies: Malware Execution in the Age of Advanced Defenses appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/webinar-takeaway-move-aside-script-kiddies-malware-execution-in-the-age-of-advanced-defenses/feed 0