CubedCorps helps small and medium-sized businesses comply with clients, insurance companies, and relevant frameworks to mitigate cyber security risks by providing cyber-security consulting services.
I am documenting how to update the Greenbone Security Scanner feed in OpenVAS running on Ubuntu 18.04. OpenVAS is a great tool for scanning your system for known vulnerabilities. How to manually update the Security Scanner Feed sudo systemctl stop openvas-scanner sudo systemctl stop openvas-manager sudo greenbone-nvt-sync sudo greenbone-certdata-sync sudo greenbone-scapdata-sync sudo systemctl start openvas-scanner […]
I have been in the Information security sector informally for many years, and in the past 5 years, much more formally. I have used mostly NIST and ISO 27001 frameworks for clients although I have used others like PCI and Cobit. I like the framework that ISO 27001 and supporting ISO documentation (ISO 27002-5), especially […]
Have you ever been sitting, maybe waiting for an appointment at a company and watched people interacting with each other? Have you looked at door locks and wondered if you could open them? Have you ever sat in a lobby with open Ethernet ports and wondered what would happen if you plugged your computer into […]
First off, if you are reading this blog and wondering what OpenVAS is, take a look at their website. OpenVAS product is a vulnerability scanner. OpenVAS does much of the same things that Nessus does, Nessus split away from the original code base years ago and provides a paid version. Nessus is a great alternative […]
At its most basic OWASP stands for Open Web Application Security Project. Many people that I work with or do business with have never heard of this organization. The first issue is that OWASP is an open worldwide community of security professionals. I do not think there are many security professionals that are also good solid […]
As an occasional DBA and full time troubleshooter, I have had a number of complex interactions with SQL server. Most of the time, I do not blog about them, In this instance I decided to document the solution to this problem for everyone, but also in case I need it again in the future. I […]
The U.K. Cyber Essentials Security Scheme – a useful framework for small businesses in other countries! In October 2014 the UK government created a low-cost, light-touch scheme called Cyber Essentials. It doesn’t introduce new concepts, controls or processes. It takes items from existing standards such as the ISO 27000 and NIST SP 800-53 publications and […]
Having helped many small organizations troubleshoot problems with Microsoft Active Directory, I thought I would put a few of my favorite trouble shooting tips and tricks in a blog for reference and for my later reference. First: how do you determine that something may be wrong with the current active directory configuration? Here are a […]
I was looking back at some of my very early policy that I wrote back in 2004. After reviewing some of my initial policy, I realized that creating a good policy can be a hard thing to perform correctly the first time. I decided to help people new to policy writing by outlining a template […]
As more and more businesses are either voluntarily or forced to increase their security posture, the first step is developing and documenting good security policy and procedure. There are only a few times where I have not performed this essential step before making changes to the environment. Writing security policy is a large task that […]