John W.

I found this in my notes app with a creation date of May 2023 I don’t recall when I worked on this or if I found these notes from somewhere, but this is a good reminder. 1. Be humble. Leadership is a honor. 2. Don’t act like you know everything. Ask smart questions 3. Listen. Ask for advice and heed it. 4. Treat people with respect. Take care your people and they will take care of you 5. Take ownership of failures and mistakes. 6. Pass credit for success up and down the chain 7. Work hard. No job is beneath you. 8. Have integrity. Do what say, say what you do. Don’t lie up or down the chain of command. 9. Be balanced. Extreme actions or opinions are usually not good. 10. Be decisive. When it’s time to make a decision, make one 11. Build relationships. That is your main goal. A team is a group of people who trust each other. 12. Get the job done. Lead the team in accomplishing the mission.

11

1 Comment

Ah, targeted ransomware attacks, the digital equivalent of a gremlin being fed after midnight (more like Stripe, not Gizmo) wreaking havoc in your business's carefully organized systems. Who needs a smooth, productive day when you can have encrypted chaos instead? 🦠💻 It's like waking up to find your files held hostage by this mischievous creature demanding money. But don't worry, business warriors! Amidst the chaos, there are shields to raise and strategies to deploy. Firstly, fortify your digital fortress with the mightiest of defenses. Update your software like your IT department's life depends on it (because it does), and deploy firewalls as robust as your best defenses. And never let your guard down, for Multi-Factor Authentication (MFA) can be your trusty sidekick, ready to fend off any cyber-rogue trying to break in. However, remember, MFA alone won't tame Stripe. Patching vulnerabilities is like calming the beast – it slows down its rampage through your systems. And for the love of sanity, resist the temptation to engage! In other words, don't click on suspicious links or open attachments from shady sources. More importantly, constant awareness and education are key. This isn't just about avoiding the obvious traps. Your team needs to be sharp, like a hawk spotting a mouse in a field. Regularly train your staff to recognize phishing attempts, unusual activity, and potential threats. Cybersecurity isn't a one-time seminar – it's an ongoing discipline. Make sure everyone knows that a single click can unleash chaos, and that vigilance is part of everyone's job description. And speaking of disaster, the stakes are higher than ever with state-sponsored ransomware attacks on the rise. Just look at the recent attack on Ascension Health – a stark reminder that these aren't just random acts of digital mischief. These are coordinated strikes, often with geopolitical motives, aiming to disrupt and cripple our critical infrastructure. So, think of it as ongoing gremlin-proofing of your business. Keep your team educated, alert, and ready to respond. Because the moment you relax, that's when they strike. We all saw what happened in the movie. Fear not the ransomware ruckus, for armed with knowledge and preparedness, your business can weather the storm. Stay vigilant, and let us toast to a future free from cyber-criminals. But keep those backup plans ready – because in this unpredictable world, you never know when you might need an extra layer of protection. And remember we need to be right 100% of the time, they only need to be right once.

6

I am happy to share that I have passed Core 2 of the CompTIA A+ Exam! This achievement marks another significant step in fortifying my foundation of IT knowledge. I look forward to furthering my professional development as I navigate this career transition. #Core1YoureNext #CompTIA 

30

6 Comments

HR: "We need to do mandatory security training for the team. Can you help set it up?" IT Support: "Sure. What’s the topic?" HR: "Basic IT security." IT Support: "So, no phishing, no sharing passwords, and no dodgy links?" HR: "Exactly. And if they fail the quiz, they have to retake it." IT Support: "Sounds like a great way to teach them the value of security. Or a great way to make them hate security training!" #ITSupport #CyberOly

2

1 Comment

My CompTIA Security+ certification is up for renewal in 2025, and I'm on the hunt for some awesome CEU training. I know there are tons of great options out there, so I figured I'd tap into the collective wisdom of LinkedIn. What are some of your recent favorite training courses or resources that helped you earn CEUs for your Security+ or other cybersecurity certs? #CompTIA #SecurityPlus #CEUs #CybersecurityTraining #LifelongLearning

My experience in IT, from desktop support, network buildouts and Cyber Sec has taught me one thing and confirmed another. We as IT professionals see things every day that can make us pull our hair out. Realistically thats our job security but also why we are hired to begin with. A user recognizes they need a technical professional to help them where they dont feel they have the knowledge to make desicions. It is a humble understanding of what they can’t do and that should be respected. Because we at some point started where they did. We just chose a path that allowed us to learn and experience computer systems and networks and become subject matter expects in various aspects. So I have learned to have the outmost patience even with the most irrational request. I can only do my best to educate and from that point the decision is the users. But regardless, go in with the goal of helping, educating and give the best service I can. This then confirmed the difference between imposter syndrom and having the humility that there is always more to learn. For me as long as I am completely honest with myself about what I know and don’t know, I don’t need worry about if I am at a certain level knowledge, as much as understanding what I need to know to grow and reach my goals.

2

The search for tech talent, measured by employer job postings, is as its highest peak in a year, according to today's "Tech Jobs Report.” Some highlights... * New job postings for tech occupations increased by 27,000 in May to 209,000, the highest total since June 2023. * AI occupations or positions requiring AI skills accounted for 12% of all tech job openings. * Tech companies added staff in May (2,181 new jobs). * The unemployment rate for tech occupations dropped to 2.5%, well below the national rate of 4%. #AI #Tech #TechJobs #Hiring #CompTIA https://lnkd.in/gwGwQUKx

9

I had a great conversation with a mentor the yesterday, and he asked me what my values were. It was an easy, yet deeply profound question that I had to answer. "What are your values, have you written them down?" he asked. "I have values that are important to me, but I have not yet written them down." I responded. "It is important to write these values on paper. You want to write them down, so that you can see them and understand that these values are who you are as a person. Once you have them written down, anything and everything you do from this point forward needs to align with these values." It was such profound wisdom, that I think could be shared with everyone here. As leaders, we need to understand what our core values are and how we can use them to help others succeed. I settled on these as my core values: 1. Integrity 2. Honor 3. Compassion 4. Humility 5. Patience 6. Service 7. Discipline 8. Curiosity 9. Innovation 10. Adaptability Follow up questions for those who read this, what are your core values, have you written them down? Do you apply them to everything that you do? #insightfulthoughts #leadership #mentorship

19

https://lnkd.in/dUNBgJJu 🚨 Security Advisory: Neiman Marcus Data Breach 🚨 Neiman Marcus has experienced a significant data breach, exposing 3.1 million email addresses. This incident underscores the ongoing risks to data security and the importance of remaining vigilant. Key Details: 📅 Incident: Neiman Marcus data breach 📧 Data Exposed: 3.1 million email addresses ⚠️ Potential Impact: Increased risk of phishing attacks and identity theft Security Awareness Tips: 1. Monitor Your Email: 👀 Be vigilant for any suspicious emails, especially those asking for personal information or containing unexpected attachments or links. 2. Update Passwords: 🔐 Change your passwords regularly and ensure they are strong and unique for each account. 3. Enable MFA: 📲 Use multi-factor authentication (MFA) where possible to add an extra layer of security. 4. Check Your Accounts: 🏦 Regularly review your financial and online accounts for any unauthorized activity Neiman Marcus is actively addressing this breach, but it is crucial for everyone to stay informed and take proactive steps to protect their personal information. How to Stay Protected: - Stay Informed: 📚 Keep up with the latest security news and updates. - Educate Yourself: 📘 Learn about phishing and other common cyber threats. - Be Skeptical: 🤨 Treat unsolicited emails and messages with caution, especially those that create a sense of urgency What to Do If You're Affected: 1. Report Suspicious Activity: 🚨 Contact your email provider and financial institutions if you notice any unauthorized activity. 2. Consider Identity Theft Protection: 🛡️ Use identity theft protection services to monitor your personal information Staying safe online requires continuous effort and awareness. Let’s all take steps to protect our digital lives and personal data. Stay safe and stay aware! 🌐 #CyberSecurity #DataBreach #SecurityAdvisory #InfoSec #CyberAwareness #StaySafeOnline #Phishing #IdentityTheft #MFA #DataProtection #CyberTips #DigitalSafety Cybersecurity #news and Learning, Security Awareness, Cyber Security Basics, Cybersecurity #Vulnerabilities This group is for Cyber Security Latest Trends, Latest Cyber Attacks, Cyber Security Vulnerabilities, Cyber Security Breaches, IT Security Training, Security Advisory and Best Practices. All Cyber Security Trainees, IT Security Aspirants, IT Security Experts, IT Engineers, IT Consultants, etc... all are welcome to Join. Regards, Ahsan Khan (Helping you to Start a Career in Cyber Security) & Cyber Security News and Learning Updated...Team https://lnkd.in/eqpPwT6R #cybersecurity #cyberattack #informationsecurityawareness #securityawarenesstraining #cybersec #cybersecurityawareness #learning #cybersecuritynews #cybersecuritytips #hackernews #securitybestpractices #cybersecuritynewsandlearningupdated #cybersecurityanalyst #cybersecurityexpert

2

Here's what you need to know about the ongoing "global IT outage": 1. What is it? It's computers running Microsoft Windows getting BSOD (Blue Screen of Death) after a recent application update (a faulty channel file). 2. Am I affected? Only if your organization uses CrowdStrike security platform (specifically CrowdStrike Falcon Sensor). If not, no need to worry. 3. What are they doing about it? CrowdStrike and Microsoft are working on a solution. 4. What to do if I am affected? Here's a workaround I got to know thanks to a colleague of mine. However, he emphasized that this workaround will not work if you have full disk encryption enabled or if you have disabled non-admin logins in safe mode: #microsoft #windows #bsod #crowdstrike https://lnkd.in/gGCg3iVH

2

This is for my former military network engineers/admins out there. When you exited the military how did you make up for the gap of knowledge? Ansible, terraform, kubernetes, Python, etc. are all tools we were restricted from using because of policy and security. Yet, these are the tools you need experience on to secure a job operating at the same level of expertise. Like most of us when learning something new, I have the home lab setup (CML, docker, proxmox, and VS Code with a git repository. I’m learning as much as possible but I don’t feel like it is enough. How have you all made that transition? How did you secure a job without real world experience in it?

2

4 Comments

Let’s be honest. 💬 Searching for a new job can be stressful and time-consuming. There are only so many hours in the day to scour job boards, send in applications, manage interviews, research hiring companies and keep track of your follow-ups. That’s where Vaco’s recruiters come in—to help you streamline and improve your job search. Interested in learning more? https://lnkd.in/gURAfSvh #recruiting | #recruitingfirm | #jobsearchtips | #jobsearchadvice

7

1 Comment

Breaking News: Hackers Love Supply Chains!!! Remember SolarWinds? Hackers have leveled up, and it's not just because of their espresso addiction. While you're safeguarding your networks, they’re targeting your third-party vendors because it's easier to exploit the weaker links and gain access to larger networks. Supply chain attacks are the new playground for cybercriminals, and they’re more common than a barista crafting a triple shot, non-fat, extra-foam, no-sugar, vanilla-caramel swirl, with almond milk, extra-hot, medium blend latte. So, what's a savvy business leader to do? Vet Your Vendors: Just like you wouldn't hire an employee without checking their references and qualifications (at least I hope you wouldn't), don’t blindly trust your suppliers. Perform thorough risk assessments and verify their security practices. Ensure they adhere to industry standards and have robust cybersecurity measures in place. Ask tough questions about their data protection protocols and incident response capabilities. Remember, your vendors are an extension of your security perimeter. Continuous Monitoring: It’s not enough to check once and forget. Keep an eye on your supply chain like you monitor critical business operations. Regularly review vendor performance and security posture to identify any potential vulnerabilities or changes that could impact your organization. Collaborate and Communicate: Work closely with your vendors to establish a culture of security. Share best practices (because sharing is caring, especially when it comes to cybersecurity), conduct joint training sessions, and foster open communication channels. Building strong relationships based on trust and transparency can strengthen your overall cybersecurity strategy. After all, what’s more exhilarating than trusting your vendors with your data? Education and Training: Make sure your team understands the critical role vendors play in your cybersecurity ecosystem. Provide ongoing education about supply chain risks and empower employees to recognize and report suspicious activity. Think of it as teaching your team to spot the difference between a legitimate email and a "phishy" one. Awareness is key to mitigating threats effectively. Incident Response Plan: Be prepared for the worst-case scenario. Develop and test a comprehensive incident response plan that includes specific procedures for handling supply chain breaches. Coordinate with vendors to ensure alignment and readiness in the event of an attack. Because dealing with a breach is just as delightful as finding out your office's emergency exits lead straight into a locked room—planning ahead avoids that awkward surprise. Remember, in the world of cybersecurity, you're only as strong as your weakest link. So, while you enjoy your next wild, customized latte, take a moment to think about the security of your supply chain. It might just save you from that next big breach. Stay caffeinated, stay secure!

8

Type of Technique: SIM Swapping Why SMS/Text based MFA is not a great solution. (But maybe better than nothing?) Remediation: - Have a port out/number transfer pin if your carrier offers this. - Behavior-based alerts if available. Any other ideas to protect yourself from this?

5

2 Comments

I get a lot of questions around what certifications people should pursue in cybersecurity. I believe there are two reasons to get a cert: 1. Competitive advantage (help you meet or exeeed job requirements) 2. To learn something that intrigues you If the job descriptions aren’t asking for it and you’re not interested in learning about the specific topic of the cert, save yourself time and money and find something that may have a better return on your investments.

18

4 Comments

Advice for those looking for a new role: 1) Print off your resume. How does it look? Are there extra pages? Does it have weird page breaks? Your resume serves the purpose of catching someone's attention. Extra black pages are not the attention that you want. If it's hard to read expect people to not read it. 2) How many pages is it? If I have to kill a tree to print your resume I am not impressed. Even with changing jobs frequently I will not look past what you have done in the last 5 years. If what you did 10 years ago is still applicable then I'm doing something wrong in my job (because I should not be a decade behind in technology). 3) Give it to a manager (who has had to hire people) and ask them to rate it compared to the other resumes they have seen. I have a stack of resumes about 24 inches tall. I can tell you if your resume will stand out or will fall into obscurity. #hiringadvice

23

5 Comments