All posts tagged Weekend Reading

Blogs / News

• Security: Gone In Six Characters: Short URLs Considered Harmful for Cloud Services
• Inception: Introducing Nested Virtualization in Windows Server 2016
• Microsoft SQL: Microsoft SQL Server 2016 RC3 is Out
• Security: new Ncrack 0.5 release
• Apple: Uninstall QuickTime for Windows: Apple will not patch its security bugs
• PowerShell: PoshWSUS 2.3.1.0 Released
• Exchange: Migrating a small organization from Exchange 2010 to Exchange 2016 (Part 6)
• Windows: Ten reasons you’ll love Windows Server 2016 #5: Software defined storage
• DevOps: DevOps Basics: Introduction to Docker Registry and Images
• Azure: Announcing Azure Resource Policy general availability
• Tools: O365 Administration Center made in PowerShell studio
• Training: Java Basics Course for Teens (or kids, maybe)
• AWS: Training Update – Revised AWS Technical Essentials and Architecting on AWS Courses
• Microsoft Storage: Data Deduplication in Windows Server 2016
• Linux/Android: How to install and run Android Apps (APKs) on Linux with Shashlik
• ELF’s: Ubuntu (not Linux) on Windows: How it works
• Garage Tech: Run your own cloud: Installing OwnCloud 9 on Debian 8
• Android/Security/Tools: Best Android Hacking Apps for Script Kiddies and Security Experts
• Security: The anatomy of an spearphishing scam, or how to steal $100M with a fake email
• Training: Introducing the Class Notebook add-in for OneNote—designed and built with teachers
• Apple: Researchers claim to remotely ‘brick’ Apple devices with ‘1/1/1970’ bug
• Office365: Introducing Office 365 Connectors
• DNS: Azure DNS for Exchange Administrators (Part 3)
• Exchange: Load balancing Exchange Server 2016 (Part 1)
• PowerShell: Using PowerShell Gallery
• Python: IPGeoLocation – Retrieve IP Geolocation Information
• VMWare: VMWare Releases Security Updates
• Microsoft: Microsoft Sues US Govt Over Unconstitutional Secret Data Requests
• BSOD: Windows 10 Blue Screen of Death Gets QR Code
• Security: Bitdefender’s free tool protects against TeslaCrypt, Locky, CTB-Locker infections
• Training: in-depth course on cloud computing at Microsoft
• Microsoft Storage: SMB Transparent Failover – making file shares continuously available

Conference / Meetups

• SQL Saturday #511. Redmond, WA. All Day, Saturday, April 2nd, 2016

Blogs / News

• Cloud: Announcing Google Stackdriver. Monitoring, Metrics, Logging for GCP & AWS
• Backup: Veeam Endpoint Backup FREE
• Wireless/Security: Rootsh3ll Wi-Fi Security and Pentesting Series (RWSPS) – Preface
• GoDaddy: Announces Worldwide Launch of Cloud Servers & Cloud Applications
• Containers: Containers all the way through
• Cloud: MSPs Take Note: The Cloud War Is Still Ongoing
• AWS: Ten Years in the AWS Cloud – How Time Flies!
• Exchange: iOS 9.3 fixes Multiple Response issue
• Exchange: Azure DNS for Exchange Administrators (Part 1)
• Active Directory: Using PowerShell to Gather Information from Active Directory
• Active Directory: A Few Easy Steps to Help Protect Your Active Directory
• Hyper-V: Linux Integration Services Version 4.1 for Hyper-V
• Funny: Estimating Time
• Networking: I’m New to SDN. Where Should I Start?
• Docker: Native Docker Apps Arrive for Mac and Windows
• Docker: Docker and Containers (Part 2) – Understanding Docker
• Azure: Deploying Virtual Machines in Azure using Azure Resource Manager – ARM Templates (Part 2)
• Security: FBI’s Most Wanted List – Cyber Edition
• Microsoft Security: Microsoft Deploys Macro Blocking Feature in Office to Curb Malware
• Security: PETYA Crypto-ransomware Overwrites MBR to Lock Users Out of Their Computers
• Microsoft Security: Critical File Sharing Flaw in Windows and Samba (March 23 and 24, 2016)
• Security (is hard): Certified Ethical Hacker website caught spreading crypto ransomware
• Hardware: AMOLED displays are now cheaper to produce than LCD

Blogs / News

• Windows: Work Folders for Android Released to Google Play Store
• Home Hacks: Adblock DNS BlackHole with a Raspberry Pi
• Amazon AWS: The Amazon Tax
• Privacy: How your data is collected and commoditised via “free” online services
• Apple: AceDeceiver: First iOS Trojan Exploiting Apple DRM Design Flaws to Infect Any iOS Device
• Training: IPv6 and Microsoft Windows
• DNS Attack Analysis: Using the power of DNS traffic to deter infected machines
• VMware: License changes put users on upgrade treadmill
• PowerShell: Writing a Active Directory Audit Module – Creating the Project
• Microsoft Edge Browser: Bringing Extensions to Microsoft Edge
• Tools: Nmap 7.10 released: 12 new scripts, hundreds of OS/version fingerprints, bug fixes, and more!
• Tools: BinDiff now available for free
• Tools: Draw AWS diagrams with Cloudcraft, Visualize your cloud architecture like a pro
• Amazon AWS: 10 Lessons from 10 Years of Amazon Web Services
• Podcast: Episode #2 of Office 365 Exposed Podcast
• Tool Tutorial: tcpdump is amazing
• VPN: Tip of the Day: The Conditional Access Framework and Device Compliance for VPN
• Exchange: Migrating a small organization from Exchange 2010 to Exchange 2016 (Part 5)
• Active Directory: Monitoring On-Premise Active Directory via Azure AD Connect Health
• Bitlocker: Automatic Bitlocker on Windows 10 during Azure AD Join
• Exchange: 20 years ago in a galaxy far away…
• Windows 10: An Introduction of Windows 10 Credential Guard
• How-To: How to use Port Knocking on Ubuntu to hide the SSH port
• How-To: Installing Nginx with PHP (as PHP-FPM) and MariaDB (LEMP) on Debian 8
• Android: Cyanogenmod, First 13.0 Release
• PowerShell: Get Antivirus Path w/o use of WMI
• PowerShell: Debugging PowerShell DSC Class Resources
• Encryption: New NIST Encryption Guidelines
• Security: Typosquatters Target Mac Users With New ‘.om’ Domain Scam
• Security: Vulnerability scanners plagued with false positives, but still have value
• MS Office: What’s new on the Office Roadmap – 2016-03-17
• PowerShell/Security: Attackers packing malware into PowerShell

Conference / Meetups

• GeekFest Seattle – March 17th @ Noon
• Beers with Engineers – March 17th @ 5:30pm

Blogs / News

• Office365: Using XML to Backup and Restore Office 365 Settings
• Automate all the things: IT depts. suffering from ‘patch fatigue,’ study says (Actual study‘ish)
• Docker: How to use it in a practical way – Part 3
• Exchange: A Sender Policy Framework (SPF) Primer for Exchange Administrators
• Tom Knows Best: Best Mac Antivirus Software
• Great Framework: Google Opens Up Collection of Vendor Security Assessment Questionnaires
• Powershell: Configure DNS Dynamic Update Credentials for DHCP with PowerShell
• Big Data: BBC TV Writes 21TB DAILY to Amazon S3
• Office365: Announcing the new Office 365 admin center
• Cloud RemoteApp: February updates to Azure RemoteApp
• MFA w/ AzureAD: Azure AD Identity Protection: MFA Registration Policy
• BGP: Want to Know More about BGP?
• PowerShell+O365: Deep Dive Into Office 365 PowerShell Cmdlets
• DddddDoS: 400Gbps: Winter of Whopping Weekend DDoS Attacks
• 1-800-Flowers-dot-com: Notice of Data Breach
• Ransomware: Locky Ransomware Spreading in Massive Spam Attack
• Hardsploit: The handy hacker help for hapless hopeful hardware hacks
• Spelling: A typo stopped hackers siphoning nearly $1bn out of Bangladesh
• CR4zi1e: Let your uSeRS chOOse wACKy passWords, US banks!
• Crypto: A Wall Against Cryptowall? Some Tips for Preventing Ransomware
• Powershell+Infosec: Powershell Malware – No Hard drive, Just hard times
• Malware: W97M/Downloader macro malware grows even more deceptive
• Opportunity!: Security market to exceed $170 billion by 2020, analysts say
• Breach: Stolen laptop exposes PII of over 200K Premier Healthcare patients
• DirectAccess+Server2016: DirectAccess Test Lab Guides for Windows Server 2016
• Microsoft: SMH
• Docker: Docker and Containers (Part 1) – Understanding Containers
• Exchange: Mail Relay in Exchange Server 2016
• Roll Your Own Slack: Install Mattermost with PostgreSQL and Nginx on CentOS 7

Conference / Meetups

• GeekFest Seattle – March 17th @ Noon
• Beers with Engineers – March 17th @ 5:30pm

Blogs / News

• MFA: No More Passwords – Microsoft’s Implementation of FIDO 2.0 Spec
• SQL: SQL 2016 – It Just Runs Faster Announcement
• OneNote: OneNote Class Notebook now available for all educators
• UEFI: An Introduction of UEFI Secure Boot in Windows 10 Enterprise
• Neat Hack: Playing with claim rules and attribute store to trigger MFA when the user is connected from a different country
• Azure: General Availability for the Microsoft Azure StorSimple Virtual Array
• Azure/MFA: Azure MFA for Enrollment in Intune and Azure AD Device registration explained
• Powershell: Investigating AD Classes
• Amazing A/V: AirTame – Chromecast for Meeting Rooms
• Office: Microsoft Office Roadmap 3-3
• Exchange: Migrating a small organization from Exchange 2010 to Exchange 2016 (Part 4)
• O365’ish: Dynamic Office 365 Groups might come with a big cost
• O365’ish: Office 365 Planner FAQ + Groups for Task Management
• InTune: The Ultimate Intune Setup Guide
• Azure: Preview of Azure Active Directory Identity Protection
• O365: The new Office 365 admin center
• Containers: 10 things to avoid in docker containers
• DevOps: DevOps, Security and Compliance
• PIES!!!!: https://www.raspberrypi.org/blog/raspberry-pi-3-on-sale/
• Mardown Desktop Client: http://abricotine.brrd.fr/
• VMWare: Bye-Bye, Support Ending
• Hyper-V: Headless Hyper-V???
• Infosec: How to Steal Secret Encryption Keys from Android and iOS SmartPhones
• Infosec: Malware Still Prevalent on Corporate Network, Proofpoint Warns
• Major Breach: Credit Unions Feeling Pinch in Wendy’s Breach
• NewsBites: SANS News Newsbites
• Hacked: CTB-Locker Ransomware Spreading Rapidly, Infects Thousands of Web Servers
• Office… Still… It’s 2016, so why is the world still falling for Office macro malware?
• Weak: Gaining access to your bank account with multiple passwords impacts 350 million customers
• Linux: If You Like Fedora, You’ll Love Korora
• Storage: 15TB whopper of an SSD. Farewell, spinning rust

Conferences/Meetups

• Windows Weekly Meetup at PostDoc Brewing in Redmond from 5-8pm on February 29^th w/ Mary Jo Foley and Paul Thurrott – http://www.geekwire.com/calendar-event/windows-weekly-meetup/
• SeaSecEast Meetup @ LunchBox Laboratory in Bellevue from 6:30pm to 8:30pm on Tuesday, March 1^st. – http://www.meetup.com/SEASec-East/

Blogs/News

• Security – 90 Percent of All SSL VPNs Use Insecure or Outdated Encryption, Putting Your Data at Risk
• Security – Google Releases Project Shield DDoS Protection for press, human rights and election monitoring orgs
• Creeper – Graphing when your Facebook friends are awake
• Hack – How Google’s Web Crawler Bypasses Paywalls (Bonus: Extension to bypass paywalls)
• Hacked – Who Hacked Us
• Hack – I Dared Two Expert Hackers To Destroy My Live. Here’s What Happened.
• Training – Learn SQL in 20 Minutes’ish
• Controversial Nerd Stuff – Why use www?
• Law – IT Manager Gets 30 Months in Prison for Trashing Ex-Employer’s Servers
• Automation – 19-year-old made a free robot lawyer that has appealed $3 million in parking tickets
• Security – Comodo AV Tech Support Feature Lets Anyone Connect to Your PC
• Security – Angler Exploit Kit Learns New Tricks, Finds Home on Popular Website
• Containerization – Introduction to Docker
• Security – Obscurity is a Valid Security Layer
• Security – Forthcoming OpenSSL Releases – High Severity!
• Security – Silverlight 0-day pwn’d Mac & Windows
• Privacy – Microsoft Telemetry Data Collection Explained by MS
• M&A – MS Acquires Xamarin
• Networking – University of Washington Researches Make Low-Power Wi-Fi Breakthrough
• Apple – Apple plans Siri for Mac for this fall’s OS X 10.12 Launch
• Powershell – Quick Test for Updates That Aren’t Installed
• Powershell – Install the AD Powershell Module on Windows 10
• Cloud – Explain Cloud Computing to Your Grandma
• Microsoft – Best Practices for Meetings Using Skype for Business – Large Audiences
• Mail – Common Errors in SPF Records
• Mail – Remote Exchange Monitoring and Reporting Using Email
• PM – Information Technology Risk Management
• Security – Tip: Quick Analysis of Office Maldoc
• Cloud – Spotify moves from AWS to Google Cloud Platform
• Powershell – Powershell Gallery Officially Goes Public
• Powershell – Use WMI the Modern Way

• VMWare: New White Paper: What’s New with VMWare Virtual SAN 6.2
• Microsoft: Hyper-V Optimization Tips (Part 2)
• Microsoft: Some Remote Desktop Session Host Guidelines
• Microsoft: Hyper-V Virtualization 101: Some Basics Around Hyper-V Setups
• Microsoft: Microsoft Releases Azure Active Directory Connect 1.1
• Compliance: PCI DSS 3.2 slated for early 2016
• Security: A Locky Ransomware Story worth sharing: How Just Opening an MS Word Doc Can Hijack Every File On Your System
• VMWare: VMware reissues patch to fix RCE vulnerability in vCenter Server
• Security/Microsoft: February’s Patch Tuesday (February 10, 2016)
• Security: Do you trust NTP and time sources implicitly on networks you connect to? What about your users? Warning — Setting This Date On iPhone Or iPad Will Kill Your Device Permanently
• Security: Here’s How to Decrypt Hydracrypt & Umbrecrypt Ransomware Files
• Microsoft: What’s new on the Office Roadmap – 2016-02-14
• GlibC: Dan Kaminsky is an expert on DNS security – and he’s saying: Patch right God damn now
• O365: Updated people profile experience coming soon to Office 365
• Exchange: Using Exchange Transport Rules to Add Email Signatures to Messages
• Google/Data: What it looks like to process 3.5 million books in Google’s cloud
• Exchange: How to display SMTP info on Outlook Web App
• Exchange: Improvements to Compliance in Exchange 2016 (Part 2)
• AWS: AWS Webinars for February & Early March 2016
• Exchange: Remote Exchange Monitoring and Reporting using Email (Part 1)
• Identity: Easy Parsing of ADFS Security Audit Events
• Docker: How to use it in a practical way
• PowerShell: Ping Alert Script
• PowerShell: Friday Fun: A SysInternals PowerShell Workflow
• PowerShell: List AD Users CSV
• Security: Hunting for Executable Code in Windows Environments, (Thu, Feb 18th)
• Linux: Linux 4.3 Reached End of Life; Users Need To Move To Linux 4.4