Imagine if every SIEM adopted a single search query language. You know, like the SQL they all use on the back end?

This is reality. Some of the easiest proactive steps we can take to secure our environments may get dismissed because they are mundane or don't seem fun or interesting.

I am signed up! VMworld is an awesome event that historically has been quite expensive. This year the event is online and FREE! There is an overwhelming amount of content in so many different areas from end user computing to containers to sdwan to security.

Check out SANS' DFIR Summit (Summit content is free): Digital Forensics & Incident Response Summit & Training 2020 sans.org/event/digital-…

Today, we’re happy to announce that Google Cloud VMware Engine is generally available—enabling you to seamlessly migrate your existing VMware-based applications to Google Cloud without refactoring or rewriting them ↓ cloud.google.com/blog/topics/hy…

Microsoft DNS Server vulnerability is wormable! There is a workaround that does NOT require reboot. I suggest applying this ASAP. Most Active Directory environments use Microsoft DNS Server. CVE-2020-1350 support.microsoft.com/en-us/help/456… Screenshot since it is not loading for some.

Stay Calm, and Patch 'Em All! ✅ Microsoft ✅ Cisco ✅ Juniper ✅ Oracle ✅ Zoom ✅ Citrix ✅ SAP ✅ F5 ✅ Intel ✅ Adobe ✅ Jenkins ✅ NVIDIA ✅ Apache ✅ Chrome ✅ Android ✅ VMware ✅ Siemens ✅ Rust Lang Crates ✅ Go programming Happy Patch Week, Everyone.

We don't know who needs to hear this right now, but #defconsafemode is free to attend. You don't have to register. It starts in one week. You should join us. defcon.org

These are interesting times indeed, but has anything really changed?

Kids complained about high latency playing Fortnite. We recently swapped APs so spent an hour troubleshooting, changing channels, frequencies, swapping cables to AP before realizing that they had accidentally changed their match making region from the US to the Middle East. 🤷🤦‍♂️

A few things are painfully obvious to me during the pandemic: One-size fits all learning isn't working. Kids who did terribly onsite are thriving online and vice versa. Internet access needs to be a utility and not a luxury. Remote work is an option for most industries.

Happy Halloween Hackers! (it is Halloween all week, I don't care).

This one hurts. I know we joked about CentOS Project going away with IBM's acquisition but... Official notice: blog.centos.org/2020/12/future…

The SANS Institute Cloud Security Solutions Forum is underway. It is not too late to join this FREE resource: There are 7 speaker presentations and a panel discussion. sans.org/webcasts/cloud… #CyberSecurity #cloudsecurity #Security #Training

Finally got a set of my own! Thanks Black Hills Information Security! blackhillsinfosec.com/projects/backd… #CyberSecurity #security #training #cardgames

Someone is always listening. #SuicidePrevention 1-800-273-8255

Jake is a great mentor and has some keen insights. Keep your head up and don't be afraid of failing. As long as you can learn something from the process you are coming out ahead. If you avoid failure you will have a hard time growing.

I'm so tired of quarterly password resets. Can we all tell PCI fuck off and accept NIST's policy already and/or move to webauthn so we can just be done with this?

Very well said!

Real hackers use a magnet to scribe bits to platter hard drives by hand.