AbuchuTech Village Blog Is Technology Sharing Platform

Today, the internet owns our lives. Every website and app we touch knows us: our personal information, our inane ramblings, our deepest secrets. Security has never been more crucial, yet it’s a rare topic outside of ISM teams and hackers. And through the design lens, it’s completely missing. This is a mistake. There’s a misconception that security is a niche for masterminds. In the real world, most security breaches don’t come from 0days or neat hacks. In fact, most errors are human—simple scams that have worked since society began. This is where design fills a missed opportunity. Good user experience design is necessary for good security. We can craft paths of least resistance that match paths of most security. We can educate our users on what is good practice and what is security theater. We can build secure flows that are usable, not obstructive or annoying. In this talk, we'll go over four strategies that apply design thinking to security problems. And finally, we'll ...

Red Flag Alert: Service Accounts Performing Interactive Logins. In the world of account security, we often focus on end user accounts as the weak vector vulnerable to attackers. On the contrary, we at Preempt see something that happens just as frequently: failing to limit exposed and vulnerable service accounts. One clear red flag for any security team should be service accounts performing an interactive login, which would normally be done by a human user, and these instances should be limited in usage as much as possible. Why are service accounts so vulnerable to compromise? See details here, https://lnkd.in/eBANYdp And Now. The best way to understand if your service accounts are vulnerable to compromise is simply understand where all of your service accounts are in your network and limiting those accounts from performing an interactive login. Preempt gives you some tools (Watch the demo, https://lnkd.in/epVP2JU ) to help protect against potentially exposed service acco...

Why Should We Consider a Next-Gen EDR Solution in 2020. Frequently we see security professionals mixing two different things – endpoint protection and breach protection. We know that the endpoint is the entry point for many attacks, and malicious files and process play a role, which means that traditional EDR is an ideal solution for those issues. But you have to remember that the attack surface is actually very wide, and securing your organization means protecting more than only your endpoints. What we need to remember is that any time an attacker is active, there is an anomaly generated. This is the basic assumption we need to understand because the activities involved in compromising data and resources are not your run-of-the-mill activities. Being able to identify these activities is what enables security products – and threat analysts to do their job. They know something bad is taking pace and they know how to block it. When it comes to process anomaly detection, ...

Everyone has times when they need to confide in others. But, there really are some things that you just shouldn’t share–at least with certain people, anyway. Here are ten things you should think about keeping to yourself. 1.   Your Goals Keep your goals to yourself! That’s the advice writer and entrepreneur Derek Sivers  gave  in a TED Talk. Here’s the reason why: Research has shown that sharing our goals with others makes those goals less likely to happen. That’s because we feel a bit of instant gratification when our goals are noticed by others, and as a result, our minds have been tricked into feeling that we’ve already reached our goals. Then, instead of actually pursuing them, we stop (or become less motivated) because we feel there’s no longer a need to achieve those goals.   Psychologists call this phenomenon “social reality.” 2. You’re looking for Another Job This is something you definitely  d...