Chad Cremer

Do your PDFs have blank pages when you open them from a file server? Do you map drives to a File Server with a batch file or a Group Policy Object that uses the Replace command to map drives? If so, consider using the Update command in the Group Policy Object; it may allow you to view PDFs without blank pages. If you need help updating your GPO, email [email protected].  

6

This Week in Cybersecurity (May 5th - May 10th) Stay Ahead of the Threats! This week saw a rise in ransomware attacks, with both the Ohio Lottery and the City of Wichita falling victim. These incidents highlight the importance of: Patching Early, Patching Often: Hackers are exploiting vulnerabilities faster than ever. Make updating your software and systems a top priority to minimize your risk. Strong Passwords & Multi-Factor Authentication (MFA): Don't be a victim of simple password breaches! Use strong, unique passwords and enable MFA wherever possible. It's like adding a second lock to your digital door! Beware the Phishing Hook: Phishing emails are still a major threat. Be cautious of unexpected emails, even if they appear to be from legitimate sources. Don't click on suspicious links or attachments. When in doubt, verify directly with the sender through a trusted channel. Cybersecurity is an ongoing battle, but by following these steps, you can significantly reduce your risk of falling victim to an attack. Additional Resources: CISA Vulnrichment Program: https://lnkd.in/dj6Fr9Ns How to Spot Phishing Emails: https://lnkd.in/eXytHfnS Stay vigilant and proactive! Your data and privacy depend on it.

2

From confusion to clarity! 😅 Understanding subnetting just in time for the CCNA exam—because who doesn't love a last-minute breakthrough? 💡 Ready to ace it now! 🖥️💪 #CCNAPrep #SubnettingMastered #Eduinx #TechGoals #NetworkingBasics #Subnetting #ExamPrep #StudyHacks #TechEducation

1

🚨CISA released an alert warning that bad actors continue to exploit OT and industrial systems using unsophisticated means. It’s an important message for anyone in ICS security since much of the exploitation they’re seeing is preventable with relatively simple fixes. Though ICS, of course, has a slew of unique challenges that can be a barrier to implementation. The alert notes that “Exposed and vulnerable OT/ICS systems may allow cyber threat actors to use default credentials, conduct brute force attacks, or use other unsophisticated methods to access these devices and cause harm.” They urged operators to implement the recommendations in the CISA resource Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity. Here are a few key recommendations from the CISA resource: ⚠️“Disconnect all HMIs, such as the touchscreens used to monitor or make changes to the system, or programmable logic controllers (PLCs), from the public-facing internet. If remote access is necessary, implement a firewall and/or virtual private network (VPN) with a strong password and multifactor authentication to control device access.” ⚠️“Implement multifactor authentication for all access to the OT network.” (For additional information, see CISA’s More than a Password resource). ⚠️“Immediately change all default and weak passwords on HMIs and use a strong, unique password. Ensure the factory default password is not in use. Open the remote settings panel to confirm the old password is no longer shown.” ⚠️“Keep VNC updated with the latest version available and ensure all systems and software are up to date with patches and necessary security updates.” ⚠️“Establish an allowlist that permits only authorized device IP addresses. The allowlist can be refined to specific times of the day to further obstruct malicious threat actor activity; organizations are encouraged to establish alerting for monitoring access attempts.” ⚠️“Log remote logins to HMIs, taking note of any failed attempts and unusual times.” See the alert on CISA’s Cybersecurity Alerts and Advisories page (separate from their News page): Threat Actors Continue to Exploit OT/ICS through Unsophisticated Means SEP 25, 2024 - Alert

15

1 Comment