How often do infosec practitioners discover they find the same findings over and over again, just in a different org? Far too often. After years of Red Teaming and internal penetration tests, Jean Maes shares these regular findings, along with relatively straightforward solutions to harden your organization's security.
/// At a Glance:
0:00 Intro to "Same Findings, Different Org"
1:24 Why should we care about this?
4:25 Passwords, are you doing them right?
6:16 So how do we get better at passwords?
11:47 You said something about MFA?
15:57 The external is only half the battle
16:56 Legacy Protocols Being Enabled
20:30 IPv6 Enabled NICs... But no IP6
25:16 Crowd favorite... printers!
30:09 Relays?
38:09 Active Directory Certificate Services
42:58 Sensitive Information.. Everywhere
44:01 Local Admin Password Reuse
45:21 Weak Service Account Passwords
46:56 Default Configurations and Passwords
47:46 Misconfigured Objects in AD
48:21 So how do we fix these issues...
52:41 Questions? Contact Neuvik
/// About Neuvik:
Website: www.neuvik.com/
LinkedIn: / neuvik-solutions
Twitter: / neuvik
/// Jean Maes's Socials:
Twitter: / jean_maes_1994
LinkedIn: / jean-francois-maes