VLOG Thursday 286: Microsoft's Bad Security, Phishing with Phin, Errata, and Q&A

TL;DR

Microsoft's lack of transparency and slow response to bug reports has raised concerns among security professionals, highlighting the importance of prioritizing cybersecurity to keep clients safe.

Transcript

and we're live episode 286 are they episodes are they just what should i title it like i was called vlog thursday number 286 because i don't really know they're not really episodic they're just numbers that increment every week that i do this where is a good place to buy a quota you know this is going to come up so let's uh talk about that after we... Read More

Key Insights

• 🎮 The Kotom routers are being tested and seem to work well, especially for home lab purposes.
• 🤝 Netgate, the company behind pfSense, has developed drivers for certain hardware to ensure compatibility and better user experience.
• 🚗 Microsoft's lack of transparency in cybersecurity is a concern, as they are ignoring bug reports and vulnerabilities, putting users at risk.
• 🔒 It's important to have separate administrative accounts for staff, but managing accounts for every client can be challenging.
• 🔐 Using a generic account for administrative purposes may not cause audit issues, but it's essential to have proper controls and access management in place.
• 🌐 Paid DNS blocklists may exist, but the specific options are not mentioned in the content.
• 🎛️ The use of flash drops and the choice of deployment method (on the router or separately) depend on individual requirements and preferences.
• 💼 BEC (Business Email Compromise) is a significant cybersecurity threat, and it is essential to have measures in place to prevent such attacks.

Questions & Answers

Q: Why has Microsoft's approach to cybersecurity raised concerns?

Microsoft's lack of transparency and slow response to bug reports has led security professionals to question their commitment to cybersecurity, as they prioritize profit over securing their products.

Q: How does Tenable's call-out impact cybersecurity practices?

Tenable's call-out highlights the importance of working with companies that prioritize security and address vulnerabilities promptly to protect clients from potential threats.

Q: What is the significance of bug bounties in cybersecurity?

Bug bounties encourage ethical hackers to identify and report vulnerabilities in software, leading to improved security. However, companies should not use bug bounties as a means to dismiss or delay addressing reported issues.

Q: How can clients ensure the security of their networks?

It is essential for clients to partner with companies that prioritize cybersecurity and promptly address reported vulnerabilities. Regular audits, security training, and staying updated with the latest security technology can also enhance network security.

Summary & Key Takeaways

• Microsoft's approach to cybersecurity is under scrutiny due to a lack of transparency and slow response to bug reports.

• Tenable, a cybersecurity company, has called out Microsoft for ignoring bug reports and using bug bounties to silence vulnerabilities.

• The issue emphasizes the need for partnerships with companies that prioritize security to protect clients effectively.