Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/briankrebs/statuses/111610429235502279">BrianKrebs (briankrebs@infosec.exchange)'s status on Wednesday, 20-Dec-2023 15:46:24 JST</a><a href="https://infosec.exchange/@briankrebs" title="briankrebs@infosec.exchange"><img src="https://gnusocial.jp/avatar/21764-48-20231108132353.webp" width="48" height="48" alt="BrianKrebs" style="position: absolute; left: 0; top: 0;">BrianKrebs</a><div><a href="https://infosec.exchange/@briankrebs/111581571706042655" rel="in-reply-to">in reply to</a></div></section><article><p>I mean, why shouldn't we count on more organizations just observing best practices? It's so simple, I just don't understand why everyone can't do this? /s</p><p>This is not sustainable. We probably need to scrap everything and start over. But in the meantime, yeah, let's make it illegal to pay a ransom. I think we've long past reached that point.</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2454999#notice-4900636">In conversation</a><time datetime="2023-12-20T15:46:24+09:00" title="Wednesday, 20-Dec-2023 15:46:24 JST">Wednesday, 20-Dec-2023 15:46:24 JST</time> <span>from <span><a href="https://infosec.exchange/@briankrebs/111610429235502279" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@briankrebs/111610429235502279">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/1992257">Some security suggestions for municipalities, in an email from a security firm. They include: Training and Awareness: Train employees on cybersecurity best practices, including identifying phishing attempts, using strong passwords, and recognizing potential threats. Update and Patch Systems: Keep software, operating systems, and applications up to date with the latest security patches to minimize vulnerabilities. Backup and Recovery: Regularly backup critical data and systems, ensuring backups are stored securely and can be restored in case of an attack. Firewalls and Security Software: Install and maintain firewalls and robust antivirus/antimalware software to protect against various forms of cyber threats. Vendor Management: If using third-party vendors, ensure they adhere to strong security standards and regularly audit their practices. Continuous Monitoring and Testing: Employ systems that continuously monitor for potential threats or anomalies. Regularly conduct penetration testing and security audits to identify weaknesses. Cyber Insurance: Consider investing in cyber insurance to mitigate potential financial losses in the event of a successful cyberattack.</a></label><br><a href="https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/610/425/061/383/991/original/53dbd28c084194d2.png" rel="external">https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/610/425/061/383/991/original/53dbd28c084194d2.png</a></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
BrianKrebs (briankrebs@infosec.exchange)'s status on Wednesday, 20-Dec-2023 15:46:24 JST BrianKrebs
in reply to
I mean, why shouldn't we count on more organizations just observing best practices? It's so simple, I just don't understand why everyone can't do this? /s
This is not sustainable. We probably need to scrap everything and start over. But in the meantime, yeah, let's make it illegal to pay a ransom. I think we've long past reached that point.
In conversationWednesday, 20-Dec-2023 15:46:24 JST from infosec.exchangepermalink
Attachments
1. Some security suggestions for municipalities, in an email from a security firm. They include: Training and Awareness: Train employees on cybersecurity best practices, including identifying phishing attempts, using strong passwords, and recognizing potential threats. Update and Patch Systems: Keep software, operating systems, and applications up to date with the latest security patches to minimize vulnerabilities. Backup and Recovery: Regularly backup critical data and systems, ensuring backups are stored securely and can be restored in case of an attack. Firewalls and Security Software: Install and maintain firewalls and robust antivirus/antimalware software to protect against various forms of cyber threats. Vendor Management: If using third-party vendors, ensure they adhere to strong security standards and regularly audit their practices. Continuous Monitoring and Testing: Employ systems that continuously monitor for potential threats or anomalies. Regularly conduct penetration testing and security audits to identify weaknesses. Cyber Insurance: Consider investing in cyber insurance to mitigate potential financial losses in the event of a successful cyberattack.
  https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/610/425/061/383/991/original/53dbd28c084194d2.png

Public

Embed Notice

HTML Code

Corresponding Notice