I read about attackers abusing legitimate MSP360 remote-management software to maintain access and then deploying ScreenConnect as a second remote-access tool. That got me thinking about how organizations…
Has anyone else run into Bitdefender GravityZone failing to install on a fresh Windows 11 Pro 26H2 VM when deployed through Ninja? The package downloads, but installation stops…
Has anyone else had trouble installing Bitdefender GravityZone on a fresh Windows 11 Pro 26H2 virtual machine through Ninja? The package downloads successfully, but installation fails with an…
We're a 10-person business that suffered a serious ransomware attack about three years ago. Fortunately, immutable cloud backups let us recover with very little data loss. At the…
I'm looking for practical ways to manage removable USB storage in an environment where most devices are locked down. We currently block USB storage through Intune on roughly…
I'm looking for practical ways to manage removable USB storage in a business environment. We block USB storage through Intune on roughly 95% of our devices, but one…
We recently evaluated Palo Alto's AI Access Security for Prisma and found it reasonably capable and more affordable than expected. The main limitation is that it's deployed at…
I've been seeing more ClickFix attacks where a fake CAPTCHA or verification page tricks someone into opening Run, PowerShell, or Terminal and pasting in a command. That seems…
I'm managing a Windows Active Directory environment and want to review how built-in administrative shares such as \PC-001C$ and \PC-001ADMIN$ should be handled in production. These shares are…
I used to work at a CPA firm with an in-house IT department, and I could usually install approved hardware utilities and software updates myself, such as Logitech…
My company is hiring a senior security engineer for a fully cloud-based Microsoft environment with no on-premises infrastructure. I have been participating in interviews, but many candidates struggle…
I'm managing Windows endpoints in a Microsoft 365 environment and want to improve application patching. I understand that Intune and Windows Update for Business can handle operating system…
We don't have a 24/7 SOC, so we're considering automatic isolation for servers and other high-value devices when Microsoft Defender for Endpoint triggers custom, high-confidence detections—for example, a…
I'm planning to open a support ticket, but I'm curious whether anyone else has dealt with SentinelOne sending thousands of emails for a single remediation event. In this…
I recently had a user request administrator credentials just to change their default PDF reader, which made me consider using application allowlisting instead. The problem is that some…
I'm looking for endpoint detection and response software for my own desktop and laptop. I considered CrowdStrike Falcon Pro, but it appears to be available only to business…
Has anyone else seen CrowdStrike interfere with Microsoft Edge after updating to version 151? When Edge is launched, the executable either disappears immediately or Windows reports that the…
I discovered that an AI coding CLI had stored hundreds of session transcripts locally: about 787 JSONL files totaling 1.1 GB, with one project accounting for most of…
I had one of those exceptionally bad IT days. An executive handed me a laptop with every major browser hijacked, plus a couple of questionable extra browsers and…
I discovered that an AI coding CLI had stored hundreds of session files under the user profile: 787 JSONL files totaling about 1.1 GB, with one project accounting…