Isinguard Technology Group

We recently completed an internal project to improve our network's compartmentalization and to provide more visibility for our security monitoring and control tools. We are a few months in now and I have been very pleased with the results.

We've also had a lot of fun with a recently acquired vulnerability scanning tool. The tool does a great job finding known vulnerabilities in all sorts of network-connected hardware and applications.

The more "smart" things we put on our networks the more important these practices become. Because vulnerable connected devices of any kind can be compromised and turned towards internal attacks, being able to separate well patched and highly managed resources like workstations and servers from the ever growing horde of sensors, cameras, video recorders, TVs, and other unmanaged and often never-patched devices is crucial.

Periodic vulnerability scanning helps identify weak points in your systems so you know where to focus your security resources. Patch management goes way beyond Windows Updates. Printers, scanners, TVs, postage appliances, HVAC systems, and more all need occasional patching. Since many of these types of things don't have robust patch management solutions (like Windows Update for Windows), hunting those vulnerabilities yourself is essential.

If you are interested in this topic and want to read a real-world horror story I'm leaving a link below. If you'd like to put some of these practices into place for yourself but need an extra hand, Robert and I would love to assist.

Hackers breach energy orgs via bugs in discontinued web server Microsoft said today that security vulnerabilities found to impact a web server discontinued since 2005 have been used to target and compromise organizations in the energy sector.

https://www-theverge-com.cdn.ampproject.org/v/s/www.theverge.com/platform/amp/22644194/microsoft-windows-11-minimum-system-requirements-processors-changes?amp_gsa=1&_js_v=a6&usqp=mq331AQIKAGwASCAAgM%3D =From%20%251%24s&aoh=16301015329777&csi=0&referrer=https%3A%2F%2Fwww.google.com&share=https%3A%2F%2Fwww.theverge.com%2F22644194%2Fmicrosoft-windows-11-minimum-system-requirements-processors-changes

Microsoft won’t stop you installing Windows 11 on older PCs We use cookies and other tracking technologies to improve your browsing experience on our site, show personalized content and targeted ads, analyze site traffic, and understand where our audiences come from. To learn more or opt-out, read our Cookie Policy. Please also read our Privacy Notice and Te...

https://www.cnet.com/news/microsoft-to-kill-internet-explorer-support-next-year/

Microsoft to kill Internet Explorer support next year Microsoft wants Edge to be your browser of choice for Windows 10, and is finally sunsetting Internet Explorer.

https://www.cnet.com/how-to/new-windows-10-2021-update-is-here-how-to-download-may-features-everything-else-to-know/

New Windows 10 2021 update is here: How to download May features, everything else to know Microsoft's latest Windows 10 update, version 21H1, is rolling out now. Here's how to download the update and all of the new features it includes.

https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-bug-prevents-viewing-or-creating-email-worldwide/

Microsoft Outlook bug prevents viewing or creating email worldwide A Microsoft Outlook update released today for the desktop client introduced bugs that prevent users from creating or viewing mail.

https://www.techradar.com/news/new-windows-10-update-is-causing-a-whole-world-of-pain

New Windows 10 update is causing a whole world of pain Crashing, blue screen and more

https://www.bleepingcomputer.com/news/security/nsa-discovers-critical-exchange-server-vulnerabilities-patch-now/amp/

NSA discovers critical Exchange Server vulnerabilities, patch now Microsoft today has released security updates for Exchange Server that address a set of four vulnerabilities with severity scores ranging from high to critical.

https://www.bleepingcomputer.com/news/microsoft/windows-10-crashes-when-printing-due-to-microsoft-march-updates/

Windows 10 crashes when printing due to Microsoft March updates Microsoft has pulled the Windows 10 10 KB5000802 and KB5000808 cumulative updates afters users began reporting Blue Screen of Death crashes when printing to network printers.

https://krebsonsecurity.com/2021/02/microsoft-patch-tuesday-february-2021-edition/

Microsoft Patch Tuesday, February 2021 Edition — Krebs on Security Microsoft today rolled out updates to plug at least 56 security holes in its Windows operating systems and other software. One of the bugs is already being actively exploited, and six of them were publicized prior to today, potentially giving attackers a head start in figuring out how to exploit the...

https://www.techradar.com/news/google-chrome-will-no-longer-support-some-older-processors

Google Chrome will no longer support some older processors Everything has its time

https://threatpost.com/critical-microsoft-defender-bug-exploited/162992/

Critical Microsoft Defender Bug Actively Exploited; Patch Tuesday Offers 83 Fixes The first Patch Tuesday security bulletin for 2021 from Microsoft includes fixes for one bug under active attack, possibly linked to the massive SolarWinds hacks.

https://gizmodo.com/windows-10-update-will-get-rid-of-flash-once-and-for-al-1845984918

Windows 10 Update Will Get Rid of Flash Once and for All If you haven't already uninstalled Flash, a near-future Windows 10 update will do it for you.