Every Swede of a certain age knows Anders F. R\u00f6nnblom\u00b4s \u2018Det \u00e4r inte sn\u00f6n som faller\u2019 from 1980, the punk anti-Christmas song with the cartoon video that was shown on TV on Christmas Eve for years. I can\u00b4t get it out of my head this time of year, so here is my own security version. Not his lyrics, just borrowing the idea.<\/p>\n
It\u00b4s not the snow that\u00b4s falling It\u00b4s not the snow that\u00b4s falling Joking aside, Christmas is coming and with it the holidays. For the attackers it is high season. Fewer people at work, slower decisions, systems that nobody wants to touch until January. Every year I spend some part of the holidays on an incident that started on the 23rd or the 24th.<\/p>\n So before you light the candles: Patch what is exposed to internet. Check that the backups ran and that one copy is out of reach. Make sure someone is watching the alerts, and that they can act.<\/p>\n Then enjoy the snow. The real one.<\/p>\n","protected":false},"excerpt":{"rendered":" Every Swede of a certain age knows Anders F. R\u00f6nnblom\u00b4s \u2018Det \u00e4r inte sn\u00f6n som faller\u2019 from 1980, the punk anti-Christmas song with the cartoon video that was shown on TV on Christmas Eve for years. I can\u00b4t get it out of my head this time of year, so here is my own security version. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4,13],"tags":[96,97,42],"class_list":["post-1277","post","type-post","status-publish","format-standard","hentry","category-security-architecture","category-technology","tag-christmas","tag-holidays","tag-ransomware"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1277","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1277"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1277\/revisions"}],"predecessor-version":[{"id":1285,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1277\/revisions\/1285"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nit\u00b4s servers going down
\nthe backups were reachable
\nand the admins logged on all over town.<\/em><\/p>\n
\nit\u00b4s the password from last year
\nthe SOC sent off a mail on Friday
\nand on Monday it\u00b4s all too clear.<\/em><\/p>\n