Backup Central
The Home of Mr. Backup
- Website
- backupcentral.com · all feeds from this site
- Feed URL
http://www.backupcentral.com/feed/
Read it in your FeedListing reader
Or add to: Feedly Inoreader Raw feed
Latest posts
-
Application Whitelist: Silver bullet?
What if I told you there’s one control that could stop nearly all new malware from running on your endpoints, and most companies won’t touch it? That’s the deal with application whitelisting best practices. The idea has been around forever, it works, and almost nobody does it. I…
-
Have you built your incident response team?
When I cracked a rim on my Tesla recently, I didn’t pull up YouTube and grab a wrench. I called the tire people. I don’t know squat about tires, but I know who does. That’s the whole idea behind building an incident response team. You figure out who you’re going to call before…
-
Endpoint Hardening: Close the Windows Before Somebody Climbs In
Endpoint hardening is the least glamorous job in security, and that’s exactly why most companies skip it. Nobody gets a budget line item for turning stuff off. There’s no dashboard, no quadrant, no conference keynote about the services you disabled last Tuesday. But the endpoint…
-
Least Privilege Best Practices Start With an Uncomfortable Question
Least privilege best practices come down to one question that most organizations never bother asking: does this person actually need this access? A hospital in Portugal answered that question with a shrug. Every single employee got doctor-level access to patient records. The…
-
Password Length vs Complexity: Why 16 Characters Is the New Minimum
You have been trained wrong. For twenty years, every login screen you have touched has nagged you about the same three things. Add a capital letter. Add a number. Add a special character — no, not that special character. There is a comedian who does a whole bit on this, walking…
-
RDP Security Best Practices Every Admin Ignores Until It’s Too Late
RDP security best practices boil down to one thing I will argue about with anybody: Remote Desktop Protocol does not belong on the internet. Not behind a weak password. Not “just for now.” Not because you’re a small shop and who’d bother with you. Off. I’ve been calling it the…
-
The Case for Phishing Resistant MFA
I’ve been saying it for years: turning on MFA is not optional anymore, and if you’re still letting important accounts sit there with no MFA, that’s professional malfeasance. But here’s the thing I’ve come around on, and it’s the whole reason we did this episode: plain old MFA…
-
Backup Security Best Practices: What A Red Teamer Taught Us About Getting Hacked
Here’s the thing nobody wants to hear: your backup server is probably the least secured, most powerful box on your network, and that combination is exactly why attackers love it. Backup security best practices sound like the kind of topic you skip because backups are boring,…