Weak Security Controls and Practices Routinely Exploited for Initial Access

ronjor · May 17, 2022

Original release date: May 17, 2022

The cybersecurity authorities of the United States, Canada, New Zealand, the Netherlands, and the United Kingdom have issued a joint Cybersecurity Advisory (CSA) on 10 routinely exploited weak security controls, poor configurations, and bad practices that allow malicious actors to compromise networks. While these poor practices may be common, organizations can apply basic practices, such as the following, to help protect their systems:
Click to expand...

Control access.
Harden credentials.
Establish centralized log management.
Use antivirus solutions.
Click to expand...

Employ detection tools.
Operate services exposed on internet-accessible hosts with secure configurations.
Keep software updated.
Click to expand...

CISA encourages organizations to review Weak Security Controls and Practices Routinely Exploited for Initial Access and apply the recommended mitigations.

Log in or Sign up

Weak Security Controls and Practices Routinely Exploited for Initial Access

ronjor Global Moderator

Log in or Sign up

Weak Security Controls and Practices Routinely Exploited for Initial Access

ronjor Global Moderator

Useful Searches