How can you stay updated on computer security threats during an IT project?

Para mi el mejor sitio para encontrar fuentes confiables esta en la web del NIST y en el Marco de Gestión de Riesgos (RMF), además de poder optar por distintas web que tiene las distintas compa?ías que desarrollan los sistemas operativos para ver las vulnerabilidades más recientes

Firstly, ensure that you/your team is well Educated/trained and stay updated on the latest threats. Ensure you keep your software up to date and keep performing system monitoring to be aware of what is going on on your network.

Uma vez ouvi dizer que o melhor antivírus que existe somos nós mesmos, portanto, além da utiliza??o de softwares de seguran?a, devemos sempre estar preparados para lidar com potenciais amea?as. Uma sugest?o além das já dadas aqui seria ficar de olho nos eventos que aparecem na mídia, de casos de empresas que foram invadidas ou em que houve uma falha de seguran?a. Dessa forma, podemos aprender com os erros destes casos.

I agree, subscribing to reliable sources you will learn about the latest security threats and how the hackers are using these threats to exploit networks. As a professional you can pivot from this information and look for ways that will enable you to protect your network and data from such threats.

Seguir fontes confiáveis é meio caminho andado para estar atualizado acerca do estado da arte das principais amea?as à seguran?a atuais e forma de as combater.

To stay updated on computer security threats: 1. Use Comprehensive Security Software: Select tools with features like virus scanning and intrusion detection, and keep them updated. 2. Enable Real-Time Monitoring: Implement tools that alert you immediately to any suspicious activities. 3. Conduct Regular Scans: Regularly scan your systems to detect and remove threats early.

Only trusted websites should be allowed access from the web browsers on the users' computers. This should help prevent intentional or unintentional connections to malicious websites.

Ensure that the protection used combats against all threats. You dont want to deal in combofix if not necessary. implement a vpn or firewall such as a sonic wall

Yes i believe these tools can be useful and regularly perform penetration tests on the network and infrastructure. This will help to see where there are gaps that need to be attended

Sua cyberseguran?a n?o é algo que deve ser tratado como "Eu sei me proteger de virus, basta n?o abrir programas desconhecidos", sua seguran?a deve ser tratada com respeito, basta um arquivo enviado por um amigo, um APK desconhecido ou um site falso para as vezes ser exposto, utilize de VPNs, protetores de senha unificados, antivírus e firewalls. ---English--- Your cybersecurity should not be approached with a mindset of "I know how to protect myself from viruses, I just won't open unknown programs." Your security should be treated with respect. It only takes one file sent by a friend, an unknown APK, or even a fake website for your privacy to be compromised sometimes. Make use of VPNs, unified password managers, antivirus, and firewalls.

Educating oneself is very vital because there are so many security threats yet to be learned or discovered daily. Enlightening oneself gives an avenue to discover new methods of security breaches. The knowledge is inexhaustible and sharing it makes it even better.

One correction in this article... If possible, computer sharing between colleagues/employees should be avoided, as a good security practice.

To stay updated on computer security threats through education: 1. Continuous Learning: Regularly update your knowledge on the latest security trends, threats, and best practices through courses, webinars, and industry publications. You can use platforms like OWASP, for example. 2. Awareness Training: Conduct regular training sessions for your team to recognize and avoid common security pitfalls, reinforcing a culture of security awareness.

Pour se cultiver, Google est ton ami. Effectivement on peut se perdre avec des milliers de contenus mais au bout du compte on finit par y trouver. On dit que ??la confiance c’est bien, le contr?le c’est mieux??

always study and conduct research, test the threat on a test pc, learn about it, how it works, and the key to stopping it could come before someone else comes up with it

To stay updated on computer security threats through system and software updates: 1. Implement Regular Updates: Consistently update your operating system and all software to patch vulnerabilities and enhance security features. 2. Automate Update Processes: Use automated tools for updating systems and software, ensuring timely application of critical security patches. 3. Monitor Update Releases: Stay informed about new updates and patches released by software vendors, especially those addressing security issues.

Updating to latest OS updates gives the maximum security to your devices. Also to do manufacturer updates (e.g dell updates).

Before starting the project make sure present devices up to date and also deny internet service if the device does not need internet further more up to date your devices with os and antivirus the last dat or signature file...

Actualiza??es s?o super importantes, porque há sempre actualiza??es de seguran?a, n?o só actualiza??es nas máquinas, nós como analistas também temos que nos actualizar

Paramétrer votre ordinateur pour qu’il installe automatiquement les mises à jour requises. Effectivement dans la majorité des cas, les mises à jour apportent leur lot de correctifs, rendent le système ou le logiciel plus stable, c’est toujours cela de pris.

If possible enable virus scanning of files(from email or browser) before they are downloaded to the system. Allow access to any links on the browser only after they are scanned.

Toujours paramétrer le réseau en mettant des mots de passe fort et les noter sur le papier à votre discrétion. Le mappage du réseau local permet de voir quel périphérique est connecté, cela requiert des connaissances avancées mais, une fois de plus, Google est votre ami.

Agree, To keep your computer safe, regularly check for any unusual signs that might indicate a problem. Look at things like system logs, processes, disk usage, and network activity. Use simple tools like Task Manager or Resource Monitor to understand what's happening on your computer. Also, keep an eye on your network using tools like Netstat or WireShark. This helps you catch and stop any potential attacks on your computer.

Permitir o uso de seu Wi-Fi pelo vizinho pode parecer boa a??o, mas você sabe das consequências e riscos? - Sua provedora pode cortar sua conex?o. - Abre espa?o para altera??es de configura??es de rede. - Permite acesso aos seus dispositivos em rede. - Causa lentid?es em conex?es. - Pode ocorrer um ataque via rede. - Ataques via rede como uma infec??o que se replica por rede. Neste caso, é sugerido manter sua senha de modem atualizada e secreta, sub-mascaras, a cria??o de uma sub-rede de convidados com firewall próprio, n?o facilitar acesso a rede e monitorar regularmente por dispositivos desconhecidos, outra sugest?o também é de adicionar uma whitelist para os dispositivos conhecidos e autorizados a se conectarem.

Microsoft Defender, which comes standard on Windows 10+, does a fantastic job at taking care of average threats. Some more advanced bugs can sneak past it sometimes, but realistically in a Windows environment, forcing it on and leaving it on will be enough. For audit purposes, though, especially in heavily regulated environments, knowing how to access logs and read them is important. Even in a macOS environment, I'd wager Microsoft Defender ATP would be acceptable. It certainly is in Linux, picking up on vulnerabilities in Python and Apache packages as they hit and giving you remediation options on the fly.

CISA, the Cybersecurity and Infrastructure Agency for the US has great updates of current threats. If you combine that information with the National Vulnerability Database from NIST, you will have a fairly complete view of the current threat landscape. I also find subscribing to newsletters like ZDnet, MUO, and Tech Republic are good resources for full articles about recent breaches or even about threats being found in the wild. They are also a good source to tell you about hardware and software that have new vulnerabilities and need to be patched.

To stay updated on computer security threats by reviewing and improving security posture: 1. Conduct Regular Security Audits: Periodically assess your security infrastructure and policies to identify vulnerabilities and areas for improvement. 2. Adapt to Emerging Threats: Regularly update your security strategies and tools in response to new and evolving cyber threats.

OWASP es una web donde hay documentación muy útil para aquellos que desarrollan aplicaciones web y algo fundamental en cuanto información de seguridad es la página del NIST

Perhaps two more points may be considered, a) The project data should be placed and accessed only within the secure perimeter like on a jump server. b) Regular backups of the project data, to provide protection against unexpected data loss or corruption.

I would consider setting up additional Hardware like a PI hole to filter out malicious content upfront. Also consider managing your entire network with additional Hardware or Software to monitor suspicious network activities, attacks etc.

When it comes to vital tools, time disappears. All I can see is the mission and how I am focused to accomplish it. When I become absorbed in the mission, nothing else matters. Digestion stops. My surroundings become a blur. I am hyper focused on the mission. Fixing a computer? Sure. It depends upon what is at stake. If it becomes a matter of National Security, then you have my perspective. I worked for a decade at an Agency where I spent hours of boredom followed by moments of terror. This is the mentality to have. Semper Fi. Always viligent. If we treat repairs without considering the context and consequences, then we miss the mark. Consider the computer repairman who serviced Hunter’s laptop. Do you feel the tingle yet 7-up? I do.

You need to run a vulnerability scanning to identify vulnerabilities throughout the project lifecycle so that when onboarded into production it’s free of vulnerabilities.

Fiscalizar para que as normas de seguran?a sejam seguidas e automatizar e restringir as buscas e comunica??o de maneira a evitar o máximo possível que más práticas sejam adotadas. Afinal, o caráter e postura s?o itens individuais e mais difíceis de controlar. Redobrar a aten??o com firewall e ferramentas de seguran?a é válido também. Salientando que de nada tudo isso adianta se o pessoal da organiza??o n?o tiver uma boa educa??o.