by Jesper Kråkhede, Sweden
Posted in Computer Forensics, Security Architecture, Technology on Nov 30th, 2020
Earlier this year security researchers described a ransomware attack with an interesting twist. Before encrypting anything, the attackers installed an old, legitimately signed hardware driver from a well-known manufacturer. The driver had a known vulnerability, and the attackers used it to load their own malicious driver into the Windows kernel. From there they could kill […]
Posted in Business, Methodology, Security Architecture, Technology on Nov 21st, 2020
Following my previous post, let´s talk money, because that is usually where the PAW discussion ends up. When an admin needs two devices, an extra logon and a few more minutes for each task, someone in management eventually does the math. Ten minutes a day for twenty admins is a lot of hours per year. […]
Posted in Methodology, Security Architecture, Technology on Nov 11th, 2020
I have been talking about Privileged Access Workstations for years. Every customer agrees it is a good idea. Very few actually do it. Why? The honest answer is that it is a pain for the admins. Instead of one laptop they now need two, or at least a separate secure environment. They can´t read mail […]