The Backup Wrap-up podcast, hosted by W. Curtis Preston, AKA Mr. Backup and Prasanna Malaiyandi.
Joined September 2023
- Tweets 575
- Following 20
- Followers 7
- Likes 0
Photos and videos
May 29
Some people avoid password managers by using 10 memorable passwords across systems. While better than one, a single breach means changing all 10. A password manager remains the most secure and recommended method. #Cybersecurity #PasswordTips
6
May 29
Backup teams shouldn't set policy, retention periods, RTOs, or RPOs. These critical decisions must originate from the business. It's essential to align IT functions with strategic business needs. #ITPolicy #BusinessAlignment
May 29
Websites with MFA and 'remember me' functions create a vulnerability. If a hacker steals your credentials, they only need your MFA token scraped from your browser to access your account. #CyberSecurity #MFA #Privacy
20
May 28
Password managers generate random, strong passwords you don't need to remember. For those preferring phrases, add unique twists like emotions or colors and modify spelling (e.g., substitutions or backward words) to boost security. #Cybersecurity #PasswordTips
5
May 28
Multi-factor authentication usually requires something you know and something you have. While SMS is common, authenticator apps are the most secure option available to most people today. #MFA #Cybersecurity
9
May 28
WannaCry unleashed chaos by exploiting an SMB vulnerability. This ransomware attack infected countless systems worldwide, highlighting critical cybersecurity flaws. #Cybersecurity #WannaCry #Ransomware
20
May 28
Rackspace's hack highlights a critical lesson: a workaround isn't a substitute for a patch. Delaying the patch for Microsoft Exchange left them vulnerable to a 0-day exploit, costing an entire business line. #Cybersecurity #PatchManagement
27
May 27
WannaCry exploited a Windows SMB vulnerability, but the attack vector emerged months after Microsoft released a patch. Organizations that failed to apply this critical update were infected, impacting over 200,000 systems. #Cybersecurity #WannaCry #InfoSec
1
61
May 27
WannaCry exploited a known vulnerability because many organizations lack solid patch management. A simple fix: keep your systems updated. Good cyber hygiene prevents major breaches. #CyberSecurity #PatchManagement
1
12
May 27
Navigating server inventories can be chaotic! A simple naming convention like HPDBSVA evolved into a full system. The key? Meticulous tracking and a signed form to confirm backups are actually listed. Don't assume, verify! #ITPro #ServerManagement
4
May 27
MFA protects against stolen passwords, but human error remains a vulnerability. Passkeys offer a more secure future by eliminating password reliance. Prioritizing passkey adoption is key. #CyberSecurity #Passkeys
8
May 27
Most security incidents boil down to 3 common denominators. While many factors contribute, focusing on these core issues significantly reduces risk. #CyberSecurity #RiskManagement
3
May 27
Cybersecurity isn't just about patches and multi-factor authentication. True security means ensuring your systems are patched, access is verified (MFA used correctly!), and passwords aren't compromised. Good cyber hygiene is key. #CyberSecurity #PatchManagement #MFA
4
May 26
Using the same password everywhere is a huge risk. If one account is compromised, hackers use that password to access all your other accounts, especially since email is often the username. It's a numbers game for them. #CyberSecurity #PasswordSafety
1
1
27
May 26
Ransomware threats often stem from 3 core issues: unpatched systems, compromised passwords, and lack of MFA. Addressing these can prevent widespread attacks. Prioritize patching, secure credentials, and enable MFA to bolster defenses. #CyberSecurity #Ransomware
10
May 26
Cyber hygiene mirrors personal health. Just as you take vitamins and see a doctor, patching systems and securing access are crucial. Multi-factor authentication and responsible password management are key, . #Cybersecurity #DigitalHygiene
4
May 26
A new '0-day' vulnerability can strike when vendors haven't patched it. Sometimes, a patch itself becomes the '0-day' if it fails in your specific environment. Always test patches in a test environment before production deployment. #Cybersecurity #PatchManagement
5
May 26
Rackspace's hack highlights a critical lesson: a workaround isn't a substitute for a patch. Delaying patches based on workarounds left them vulnerable to a 0-day exploit, proving that vigilance against known vulnerabilities is paramount. #CyberSecurity #PatchManagement
5
May 26
Ensuring critical patches are applied starts with organization. First, inventory all your software – from OS like Red Hat or Windows to third-party tools like Adobe. This inventory is key to knowing where to get patches and notifications. #PatchManagement #Cybersecurity #IT
10