Security
Don't go wild on Shodan just yet though...
First task: No more random Raspberry Pis on the network.
Microsoft warned that a malicious campaign targeting SQL Servers is using an "uncommon living-off-the-land binary" that to achieve persistence on compromised systems -- saying that defenders need to pay increased attention to abuse of the sqlps.exe which ships with SQL Server as standard. Without naming the attackers
Don't put that stuff on the public internet, kids.
Former NCSC Director of Incident Management John Noble, opening the Qualys Security Conference (QSC) in London, warned that much of what he would say would be “to use a British expression, bleedin’ obvious”. He was right. And that's a problem. “My colleagues in the NCSC [say] patching remains
"Contracts should also require MFA to be enforced on all MSP accounts..."
All hands on deck, as Linux Foundation, Open SSF convene meeting
"This is a major attack surface and not consistent with the level of security that public cloud customers expect."
Industry will need to "adopt an open mindset to resetting security relationships"