Tag: Security
All the articles with the tag "Security".
Server Message Block (SMB) Protocol Version 1 Unspecified RCE (uncredentialed check)
Updated:Start Powershell as an administrator and run the following to disable SMB Version 1. PS C:\> Get-SmbServerConfiguration | select enablesmb1protocol enables
SSL 64-bit Block Size Cipher Suites Supported (SWEET32)
Updated:Nessus reports a vulnerability because of 64-bit cipher suites and SSL Medium Strength Cipher Suites Supported (even though it shows up as strong ). Window
PacketFence Join Domain
Updated:This has caused me a lot of frustration this morning. The new version of PacketFence doesn't like the externally configured domain configuration that I was forced to use when I first set things up.
SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam)
Updated:Create and set the following registry key value: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffi
SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam) - Tomcat
Updated:Disable the ciphers that use Diffie-Hellman by adding !DHE into your ciphers list ciphers="HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA:!3DES:!DHE" Now
SSL 64-bit Block Size Cipher Suites Supported (SWEET32) - Tomcat
Updated:Following on from the Windows vulnerability for SWEET32, Here's how to resolve the same issue with Tomcat 8. This use the OpenSSL format string for ciphers
Java Ciphers & Algorithms
Updated:I've tasked myself with getting one of our most used vendor apps up to compliance with our security audits. It's not as easy as I'd hoped. Especially seein
Disconnected RDP Sessions
Updated:Who has left their account logged onto a server using RDP and has diconnected it leaving it open to session hijacking?
SMC & JBoss Cipher Suites
Disabling weak cipher suites in Sophos Mobile Control
Sophos Mobile Control
When upgrading from v6.1.4 to v7.0.8 I ran aground as it came up with a very bland error message: "Error! Database update error. Please contact support." N