Going back as far as the 2004 release of Windows XP SP2, Windows has offered various GUIs to help users understand the security state of their PC. In modern Windows 10 (RS2+) and Windows 11, the latest version of this graphical user interface is called the “Windows Security Center/App“. The Windows Security App (WSA) isContinue reading “The Windows Security App”
Tag Archives: security
Attack Technique: AI Clones
Attackers are adept at using new technologies to enhance their attacks. Earlier this afternoon, for example, I got call from “American Express” suggesting that I needed to “verify a transaction.” The caller used a robotic voice similar to the one used by American Express’ automated systems, and only obvious signals that it was a scamContinue reading “Attack Technique: AI Clones”
Attack Techniques: Fake Captive Portals
When a device first joins a network, the upstream network hardware has full control over its traffic and can allow/block any packets sent from the device from reaching the Internet. Many public networks (typically Wi-Fi, but sometimes wired), located in hotels, coffee shops, mass transit, schools, etc. require that the user accept Terms of UseContinue reading “Attack Techniques: Fake Captive Portals”
Offboarding from Microsoft Defender for Endpoint
Microsoft Defender for Endpoint is a paid security product that extends Microsoft Defender Antivirus (included for free in Windows) with enterprise capabilities, including a full EDR product that reports security telemetry into a security operations center (SOC). Some recently-retired Microsoft employees have been surprised to discover that their personal PCs that had previously been usedContinue reading “Offboarding from Microsoft Defender for Endpoint”
Guidelines for URL Storage and Comparison
This document contains some thoughts about the storage and comparison of URLs, common operations crucial to the correct function of security software like Microsoft SmartScreen. Importantly, URLs are also displayed on security surfaces to enable the user to make a decision based on their contents. Eight years ago, I wrote the Guidelines for URL Display.Continue reading “Guidelines for URL Storage and Comparison”