Category: Networks
-
Keep the Backup Console Off the Internet: Lessons From the AhsayCBS Attacks
Attackers exploited two AhsayCBS flaws to plant web shells and cryptominers. A backup console reachable from the internet is remote access, and it should be treated that way.
-
Survey Before We Take Over: How We Onboard a Network and Phone System
We assess a network and phone system before we agree to run it. What that survey covers, including Kari’s Law 911 checks, and what to ask any provider.
-
Remote Access Without an Open Door: Moving an Office Off the VPN
Four edge products hit CISA’s exploited list in one October week. Here is how a small office replaces a listening VPN with application-level access.