Shak The Hack Profile picture
Security Architect, IT Pro, Geek on 🔥, Jack of Infosec, Master of Disaster, interests in #Cyber #Cloud #Azure #AWS #Hacking, opinions are my own 🙄
Apr 2, 2021 7 tweets 1 min read
Cyber Story Time:

CFO leaves the org and was the Super Admin for one of the financial software for the company which neither IT or Security knew much about. 2 months after he left, a requirement came up to change the access for all users to read only as they would be switching over to a new platform.

Business suddenly realises that the person who had admin access left the organisation.
Dec 30, 2019 7 tweets 2 min read
Ransomware Thread: One day a user clicked on a malicious link which caused some havoc - the company files got encryped with ransomware. Upon investigation looking at the headers of the email it was noted that the email had come from one of the DR servers. How? Why?

#infosec Apparently the Exchange Admin had decided to carry out a DR test but not considered including the spam filter failover as part of the test. It was only meant to be a short while I mean what could possibly go wrong?

Also this was a known threat so why didnt the IPS block it?