Pinned Tweet
Replying to @tjssh
.@tjssh SSH access to from DEV/TEST to PROD in a real mid-sized bank, violates segregation of duties (anonymized). ssh.com/ra
I'll be talking with Sam Curry tomorrow in the webinar on the Future of Security. You are welcome to join! Please register at: attendee.gotowebinar.com/reg…
Tatu Ylonen retweeted
Is it time to regulate #IoT devices? We talk to #cybersecurity experts @samjcurry and @tjssh about the rising threats of smart devices.
SSH.COM & ISACA: SSH (Secure Shell) Practitioner guidelines. info.ssh.com/ssh_practitione… #grc #infosec #isaca
It looks like the Intel attacks seriously affect end user systems as well and are remotely exploitable (Javascript, flash/client-side Java?). Can be injected to any unencrypted HTTP connection on the network or by corrupt server. Browser dependent. Email? spectreattack.com/spectre.pd…
The Intel speculative execution flaw appears serious and multiuser systems (especially public cloud hypervisors) MUST be patched quickly. End user systems and appliances appear largely unaffected (single user). Not remotely exploitable. Performance penalty from fix 5-30% or so.
Understand how to manage SSH. ISACA guidance for the audit/compliance practitioner. info.ssh.com/ssh_practitione… #infosec #grc #isaca
How to audit SSH? Read ISACA joint paper SSH Practitioner considerations. info.ssh.com/ssh_practitione… #infosec #grc #isaca
Presenting in 20 minutes (11:00am ET) on BrightTalk on How to Fix Cybersecurity. Welcome to join webinar. brighttalk.com/webcast/288/2…
GRC guidance from ISACA&SSH: SSH Practitioner considerations. info.ssh.com/ssh_practitione… #infosec #grc #isaca
Webinar today: SSH keys provide access - don't confuse them with certificates. info.ssh.com/ssh_keys_provid… #infosec #grc
Unmanaged SSH keys can destroy even a major enterprise. See how: ssh.com/iam/how-to-kill-a-fo… #infosec #grc #isaca
Oct 25 webinar on SSH keys - should they be managed like access tokens or like certificates? info.ssh.com/ssh_keys_provid… #infosec #grc
New ISACA guidance on SSH (Secure Shell). How to audit&secure SSH keys and access. info.ssh.com/ssh_practitione… #infosec #grc #ISACA
New ISACA guidance on SSH for the practitioner. SSH keys, encryption, policy, audit. Free download: info.ssh.com/ssh_practitione… #infosec #grc













