Knowledge from our cybersecurity and risk management experts

Where the Holes Aren't

Posted by ProCircular Team on Jul 16, 2019 11:19:00 AM

Let’s just say there’s a lot to learn from history without quoting Sun Tzu… again. Especially in information and cybersecurity. While much of the birth of cyber realm revolves around the military - many of the members of our community are current or former members of various armed forces - many of us still refer to the military influence of old when working through our business planning and various actions revolving around cybersecurity. A great example is the common use or reference to Boyd’s OODA (Observe–Orient–Decide–Act) loop flow chart in both attack and defensive security applications. In sticking to a military theme, I want to touch on a story from World War II and its applicability in today’s modern cybersecurity world.

0 Comments Click here to read/write comments

Topics: Penetration Testing, Monitoring & Detection

Network Segmentation and Why It Matters

Posted by ProCircular Team on May 20, 2019 11:37:00 AM

Let’s take a look at an often under-utilized aspect of network topology in the small to medium business realm: that’s right, a networking article. But before you run off, what if I told you you could increase performance and lower your production down time with equipment you (might) already have!?

0 Comments Click here to read/write comments

Topics: Data Protection & Privacy, Incident Response, Monitoring & Detection, Security Advisory

LLMNR & NBT-NS Spoofing

Posted by ProCircular Team on Apr 30, 2019 2:09:00 PM

During a penetration test, we’ve found that a common (and easy) way to gather credentials and gain an initial foothold on the client’s network is to perform a Man-in-the-Middle poisoning attack abusing LLMNR & NBT-NS. Depending on how active users are on the network, this attack can give an adversary valuable information almost immediately. Fortunately, with a little knowledge, this attack can be easily remediated.

What is LLMNR & NBT-NS?

0 Comments Click here to read/write comments

Topics: Penetration Testing, Monitoring & Detection

Let your Risk Register be your Guide

Posted by Brandon Blankenship on Jan 30, 2019 12:46:00 PM

“What are the top 7 things you can do to protect your business from hackers?” Have you ever read a list like that on the internet? In the cybersecurity realm, they’re everywhere. I’ve even assembled and presented one of those lists to a group of business owners myself. They tend to point out things like user awareness training, patching and passwords. All noble things to get your arms around, of course, but are they useful to a client? Sometimes I feel as though those lists, as true as they are, are about as useful as telling a football team to “score touchdowns”, or “guard the quarterback.” Yeah, I know that scoring touchdowns is good… but how?

0 Comments Click here to read/write comments

Topics: Hospitals & Health Care Systems, Monitoring & Detection, Security Advisory, Compliance & Governance

From the Front Lines of Malware Detection

Posted by ProCircular Team on Jan 24, 2019 3:24:18 PM

Everyone has (or should have) an anti-virus solution. It's probably barked at you once or twice for downloading a file from a sketchy website or opening a link from an email you didn't quite recognize. But how does your anti-virus know what programs are bad, and what programs are good?

0 Comments Click here to read/write comments

Topics: Incident Response, Monitoring & Detection, Security Advisory

Educating your business on the importance of cybersecurity

Where the Holes Aren't

Network Segmentation and Why It Matters

LLMNR & NBT-NS Spoofing

Let your Risk Register be your Guide

From the Front Lines of Malware Detection

ProCircular is a Full-Service Information Security Firm

Recent Posts

Posts by Topic

Subscribe to Email Updates