Today I am continuing the thread I started last week about breaking into information technology and cybersecurity as a career. Let’s begin at the beginning. No matter where you end up in your career, you can expect to start in an entry level position in a repair center, help desk, or desk side support team. To be qualified for this position you need to know how to install, configure, maintain, and repair ...
One of the persistent questions I am asked, as an instructor, is a variation of: “Every job I apply for wants experience, how do I get experience without a job?” The flip side of that question comes from IT managers, and sounds like: “We see too many candidates with computer degrees that lack any hands on computer experience or working knowledge of computers or networking.”
The problem is most college degree ...
Continue Reading →
A quick Saturday digest of cybersecurity news articles from other sources.Original release date: July 27, 2020
CISA and NCSC are investigating a strain of malware known as QSnatch, which attackers used in late 2019 to target Network Attached Storage (NAS) devices manufactured by the firm QNAP.
All QNAP NAS devices are potentially vulnerable to QSnatch malware if not ...
Continue Reading →
Phishing Email AlertsCatch of the Day: Why We Don’t Do Product Endorsements
Chef’s Special: Spoofing SharePoint Phish
Examples of clever phish that made it past my spam filters and into my Inbox, or from clients, or reliable sources on the Internet.
I would be delighted to accept suspicious phishing examples from you. Please forward your email to phish@wyzguys.com.
My intention is to provide a ...
Continue Reading →
How do you get a job in cybersecurity? Here’s how it worked for me.
I have joined several LinkedIn and Facebook groups that are focused on cybersecurity, and very frequently there is a post from a newcomer asking the question “How do I get a job in cybersecurity?” The actual question can vary, from “what certifications are best, where can I look for ...
Continue Reading →A quick Saturday digest of cybersecurity news articles from other sources.Original release date: July 16, 2020
This Activity Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK™) and Pre-ATT&CK frameworks. See the MITRE ATT&CK for Enterprise and Pre-ATT&CK frameworks for referenced threat actor techniques.
Attributing malicious cyber activity that uses network ...
Continue Reading →Happy SysAdmin Day!Today is the annual recognition event for all the sysadmins, technical support specialists, and cybersecurity professionals who keep your computers and networks operational and secure. Gifts are appreciated.
Catch of the Day: Fake Domain Renewal Phish
Chef’s Special: Incomplete Document Phish
Examples of clever phish that made it past my spam filters and into my Inbox, or from clients, ...
Continue Reading →
