Sunday, February 25, 2018

Windows - Got System Protection??

 I am finding some Windows PCs without System Protection. Even one of my own.
 As you change, add, or remove settings on any of your devices  -  make a note in your inventory.
That inventory should list all computing devices, devices for the devices, network interconnects, AND settings.

 For defense against malware, human error, Microsoft updates and patches with impact to your systems usability - you need the ability to restore your Windows systems to a previous known state.
This requires a restore point and a 3-2-1 backup. I will cover the 3-2-1 backup in another post.

 To ensure you have the ability to create a restore point, use the search box for restore point:

 This brings up the window

This shows the Windows system C: drive with protection On.
You can use the Configure button to manage restore points and the Create button to create restore points as needed/desired.

Friday, February 2, 2018

Microsoft Patch number 15 so far

 Patches anew, patches withdrawn, patches to patches. It has been a busy month for Microsoft
 Patch released today  KB4058258. This one requires a reboot. Microsoft even released for download a patch/update for Windows 7 Service Pack 1.

 All these in addition to updates to signatures for Windows Defender.

 In addition browser maintainers have been just as busy with browser updates. Edge, Internet Explore, Firefox, Opera, Safari, Brave to name a few.

 Most patches thus far have been for Meltdown and Spectre. Patches to Intel microcode, firmware, and BIOS are part of the updates and patches.

Wednesday, January 24, 2018

Phishing from Netflix ??

 Weird phishing campaign looking to be from Netflix.

First the email:

A normal phishing attempt   -  so far.
Easily done,

To be expected:

I had never seen one like this:



 Phishing (sending email to lure you to a fake site that looks identical to a site you are familiar with)
is profitable for cyber criminals. Being a victim of such sites and email links is common.
 This is a new twist to me, but there will be more in the future.
 FOMO (fear of missing out) is tempting. Fear of losing your Netflix account is tempting. Being the first to know is tempting.

 Be careful out ther.

Apple updates again

 Updates out from Apple late yesterday.
Products: iOS, MacOS, WatchOS, tvOS, Safari

Thursday, January 18, 2018

Inspectre utility to clarify Meltdown and Spectre

 I try to avoid placing links in blog posts. A security vulnerability.
 I try to avoid recommending applications or utilities.
HOWEVER
 This is one I make exception for.
Steve Gibson is a seasoned security researcher.
After Microsoft released a power shell script to give details on Meltdown and Spectre, AND disabled patches for the vulnerabilities under certain circumstances   users were unsure how to protect themselves from the sensationalism in print and video media.

https://grc.com/inspectre is an executable that adds some clarity.  When downloaded and run the executable checks for the required patches, does an analysis and performance impact, and allows you to disable one or both patches and measure performance with and without the patches.
 My recommendation is to patch and adapt to any performance impact.


 After running you can scroll the window to gain further information.

 The mitigations for meltdown and spectre will be ongoing for awhile.

 I will attempt to update the blog and Cyber Security SIG meetings with updates.