scituated_it

Small healthcare orgs: CISA offers free Cyber Hygiene Services. ✅ Weekly external vulnerability scans ✅ Monthly web app scans ✅ Reports + ongoing paper trail ✅ Available to private companies Great evidence for SOC 2/HIPAA compliance. cisa.gov/cyber-hygiene-servi…

Was recently ask “when is it the right time to start looking for a new job” my answer is “when you feel you can’t make a difference at the current company and you lost your passion for your job at that company”

Today I was asked by a developer “if the db is in a private subnet that only the web app server can get to do we really need db auth” I guess one way around @owasp #2 broken authentication is no authentication? Obviously spoke to the person and inbound additional training coming

Doing a compensation analysis the other day for a systems admin (single system) and was told “all a network admins do is plug and unplug cables” said sure no VLAN segmentation, routing, osi layer troubleshooting or anything like that

Ok this is a first @Netlify holding soc and iso reports ransom by only allowing them to be given out to $36k a year enterprise plans

Feel like a fish swimming upstream at #marketbasket people need grocery cart license test

When the issues isn’t DNS it tends to be #AWS #us-east-1

Employee requests a company pays for training. Which option as a manager would you like to see as to when they complete it? And does the answer impact future training request?

PSA if you dispute something on you credit card and the vendor asks to cancel the dispute so the can give you a full credit don’t it’s a scam. Once you close the dispute you can’t open it again. Vendor tried this today on me. Nice try!!!

User gets phished account is compromised they were alerted by the previous phished person to change their password if they clicked the link. Doesn’t do anything or alert anyone what should the ramifications be after confirmation bad actors in their account?

Wow @gmfinancial worst support ever will never buy a gm again #lostagoodcustomer