cybersecurity

The original post: /r/cybersecurity by /u/jjrlfoley1 on 2024-09-30 04:58:46.

How do you all stay motivated to keep learning? I have a few certs already along with accounts on HTB and THM. Lately I just haven’t been able to find the motivation after work to learn. I feel burned out to the point that I just don’t want to deal with hard problems outside of work. How do you all stay motivated or get back into the learning mindset?

The original post: /r/cybersecurity by /u/Nikhil1007 on 2024-09-30 04:56:52.

How are you guys planning to spread the awareness for this year's cybersecurity month? Any specific theme/topic you are targeting apart from A.I related?

The original post: /r/cybersecurity by /u/GojoDojo12 on 2024-09-30 02:26:54.

Hi,

Little bit of background. I'm planning to leave my company and look for cybersecurity jobs overseas (Australia, Singapore, or Japan). I want to take a certification before applying for jobs to increase my chances. Right now I have more than 2 years of cybersecurity background (I work as a network security engineer with a little bit of SOC). I also have 2 certifications with me (CEH and Cysa+). I want to aim for middle-level cybersecurity jobs and am stuck between CASP+ and CISSP. Anyone have any recommendations regarding this? Which one will give me better chances to land an interview?

Thank you

The original post: /r/cybersecurity by /u/Dunamivora on 2024-09-30 00:45:52.

Recently I have been evaluating different solutions around cloud security posture management.

Seems that a lot of services are hosted in the service provider's own cloud. Am I being too cautious on passing up on those in favor of one that I can have managed on-prem or in our cloud?

I think even metadata about the cloud security posture management of a company would be something sensitive to keep internal rather than share with another cloud managed by someone else. Just want to check if I am thinking right here.

Seems it is a hot new tool available and just don't want to jump into using one that ends up being a security risk itself.

The original post: /r/cybersecurity by /u/AutoModerator on 2024-09-30 00:00:11.

This is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do you want to know about certs/degrees, job requirements, and any other general cybersecurity career questions? Ask away!

Interested in what other people are asking, or think your question has been asked before? Have a look through prior weeks of content - though we're working on making this more easily searchable for the future.

The original post: /r/cybersecurity by /u/JCTopping on 2024-09-29 22:52:25.

The original post: /r/cybersecurity by /u/Akkeri on 2024-09-29 22:41:25.

The original post: /r/cybersecurity by /u/SecTemplates on 2024-09-29 22:12:40.

The original post: /r/cybersecurity by /u/RegionPersonal on 2024-09-29 20:59:10.

I have covered various topics, from covering the OSI model and each layers use, to basic network terms (IDS,IPS, TCP,UDP, TLS, HTTPS). I really just want to know the technology through and through to be able to provide in depth answers to questions I may receive.

I was also told pictures may be given in the interview as questions, anyone have any ideas on how I might be able to practice this? i.e. explain a pic of 3-way handshake. (ik what that is and how it looks like)

The original post: /r/cybersecurity by /u/IAmNotNumber6 on 2024-09-29 20:30:29.

An acquaintance of mine was on a cybersecurity team that was cut by the company as a cost savings move. The company is a couple thousand employees but is public, and I am trying to work through (mostly as a mental exercise) where the liability would fall if there were an 8k filing required. I know that the board is supposed to have accountability for cybersecurity, but does that flow trickle through management? Apparently the executives looked at the payroll numbers and figured they could improve their bottom line and didn’t ask for many opinions, but I don’t think that makes a difference here?

I do wonder if the firm has cyberinsurance and how that gets renewed with the staff gone.

The original post: /r/cybersecurity by /u/Few_Seaworthiness502 on 2024-09-29 19:35:27.

Are data centers and manufacturers having difficulty identifying and vetting the right vendors for compliance and quality? What challenges do you face in the vendor selection process?

The original post: /r/cybersecurity by /u/ajjaajajakakakakajj on 2024-09-29 18:11:48.

Guys can anyone send me a phishing tool called maxphisher please it was deleted from GitHub and I found another person who uploaded it but there is something error in source code showing that , or anyone knows how to fix that error ? Sorry it could be an easy method to fix but I'm a beginner

The original post: /r/cybersecurity by /u/gordon22 on 2024-09-29 15:50:17.

The original post: /r/cybersecurity by /u/Missing_Space_Cadet on 2024-09-29 12:09:13.

C

The original post: /r/cybersecurity by /u/Admirable_Doctor_242 on 2024-09-29 08:04:11.

We are an MSP with 8K endpoints and growing. We have been managing MS Defender and MDE for our customers, but we would like help here. We are considering S1, Huntress, Blackpoint, ArcticWorlf, and FieldEffect. I would love your guidance here. If you can rank these from your experience, it would be great.

Field Effect was not on my radar until some colleagues in other MSPs recommended them and Blackpoint to me.

My take so far:

1. S1 and ArcticWolf seem expensive
2. Huntress and Blackpoint seem to be the best value for the money
3. Field Effect appears to provide a broad set of offerings, but I have not heard of them before. They seem to have ranked #2 on Mitre Attack EDR Evaluation regarding "mean time to detection," but there are limited proof points outside that. Any ideas?

We would love to learn from your experience with these solutions.

The original post: /r/cybersecurity by /u/javaLonghorn on 2024-09-29 04:27:54.

My organization has been trying to use this system for the past year with minimal success. The entire platform is a mess - full of half baked features. The data parsing and normalization is a joke and the entire platform is riddled with spelling errors.

Have you looked at the underlying policy logic? Half of the policies are built or also have typos so try will never work.

Support randomly disables policies without notice. Start away

The original post: /r/cybersecurity by /u/FJoe007 on 2024-09-29 02:05:57.

It’s there more than the eye meets to the bold move on Kaspersky action to remotely uninstall Kaspersky and install a replacement without any action from users.

Could kaspersky have even more access permissions to do much more like sniff on important data without users consent?

The original post: /r/cybersecurity by /u/Otter_Than_That on 2024-09-29 01:22:31.

Major tech areas like NY, Boston, SF, Austin, Raleigh are all decently known for their security career opportunities, finance centers like Charlotte, as well as government hubs like DC/NOVA or Huntsville.

But what are some not well known cyber security hubs? Or places that may have a lot of fields that employ cyber professionals (finance, defense, government, etc.)?

The original post: /r/cybersecurity by /u/E_Howard_Blunt on 2024-09-29 00:00:40.

Currently, we attach our vuln reports our Service Now tickets when we submit them to our SRE's. I was thinking about a more secure method of attaching and delivering the reports, since they contain data on exposed attack vectors and weaknesses.

Wondering if anyone uses a different internal solution to pass vulnerability reports to the internal teams responsible for mitigating your vulnerabilities. Thanks in advance!

The original post: /r/cybersecurity by /u/vskhosa on 2024-09-28 22:33:13.

I have around 7 years experience in security. 2 years ago, I moved out of SOC and went into security automation - Python coding, API integrations, containers, security reviews etc. I am happy with overall work because there is always new things to learn. It is an established company with mature security team and lots of bright minds.

I have another opportunity that pays 20k more. It's a unicorn company with almost no security team. It's just a security manager and they want a senior person to handle part of operations tasks along with working with DevOps team. I will have a lot of autonomy because there is a lot of opportunity to build everything from scratch. I will get to learn AWS which I haven't worked with yet.

I know I still have to figure it out myself, but what do you think is the right thing to do here for myself? Go towards extra 20k, AWS, SOC, on-call and higher responsibility role? Or stay at the current place, no SOC, no on-call, keep learning what's thrown at me. I can't go much higher than where I am now unless its a team lead role.

The original post: /r/cybersecurity by /u/Hot_Kaleidoscope3864 on 2024-09-28 22:16:50.

The original post: /r/cybersecurity by /u/potatofan1738 on 2024-09-28 21:07:57.

Since the MGM , Ceasers breach I've been intrigued by this problem. Verification between IT <-> Employee and vice versa.

Is this something your org struggles with and if so how are you currently going about securing.

The original post: /r/cybersecurity by /u/Regular-Bed8091 on 2024-09-28 20:56:02.

I’ve been working in cybersecurity for about a year now. I absolutely love the field but I’ve been feeling overwhelmed trying to strike the right balance between security and UX.

I know security is paramount, but how do you all balance strong protection without completely sacrificing user experience? I’m especially curious about people’s experiences in corporate environments—any tips on making security feel more intuitive for non-tech-savvy users? Also, I’ve been experimenting with password managers and secure authentication apps, and I’d love to hear about any go-to tools that have worked for you!

The original post: /r/cybersecurity by /u/Akkeri on 2024-09-28 20:44:26.

The original post: /r/cybersecurity by /u/Muffatzava on 2024-09-28 17:41:32.

What can the provider access from the connected devices.