by Jesper Kråkhede, Sweden
Posted in Security Architecture, Technology on Oct 4th, 2020
Autumn has come to Sweden. The leaves are turning yellow and red and falling one by one. Looking at the incidents this year, I can´t help seeing the same pattern among companies. They fall one after another, and nearly always for the same reasons. A remote access server without a second factor. Domain admins logging […]
Posted in Computer Forensics, Technology on Aug 13th, 2019
After an incident there is a moment when everyone just wants things to go back to normal. Servers are restored, passwords are reset, the incident response team goes home and management breathes out. This is exactly the moment when you are the most vulnerable. Look at it from the hacker´s perspective. You found a company […]
Posted in Security Architecture on May 19th, 2019
Back in April 2019 FireEye told the world that the group behind TRITON had been found in yet another critical infrastructure facility. Who and where was never disclosed. TRITON is the malware that went after the safety systems at a petrochemical plant in Saudi Arabia in 2017, the systems that are supposed to stop a […]