vulnerability Archives - The Silicon Underground

The update is already installed on this system

Dave Farquhar — Wed, 13 Sep 2017 11:00:28 +0000

I had an update on my work laptop in a partially installed state. Our vulnerability scanner determined one file, MSO.dll, was still out of date. It recommended a patch to apply. Running it gave me an error message. Here’s what

The post The update is already installed on this system appeared first on The Silicon Underground.

The meaning of superseded patches

Dave Farquhar — Mon, 17 Jul 2017 11:00:46 +0000

One of my clients asked me to explain superseded patches and how they relate to vulnerability management and patch management. This is a common question about a common complaint. Knowing the meaning of superseded patches and how to handle them

The post The meaning of superseded patches appeared first on The Silicon Underground.

Patch management strategy

Dave Farquhar — Mon, 03 Apr 2017 11:00:47 +0000

Vulnerability management and patch management are close relatives. In most companies, think of them as siblings who hate each other. That’s usually how it plays out. It doesn’t always have to be that way, but it takes some thought and

The post Patch management strategy appeared first on The Silicon Underground.

Convert a list of hostnames to a list of IP addresses

Dave Farquhar — Thu, 12 Jan 2017 12:00:53 +0000

I had a client with a huge list of hostnames that they needed to convert to IP addresses so they could scan them. That’s common. I used to have a Windows batch file to convert a list of hostnames to a

The post Convert a list of hostnames to a list of IP addresses appeared first on The Silicon Underground.

Asuswrt-Merlin vs Cisco

Dave Farquhar — Fri, 16 Dec 2016 12:00:14 +0000

I recently saw advice to buy a Cisco RV130W instead of buying an Asus router such as an RT-AC66U and souping it up with Asuswrt-Merlin. I can see both sides of the argument but in the end I favor the

The post Asuswrt-Merlin vs Cisco appeared first on The Silicon Underground.

How to set up and optimize an Asus RT-AC66U

Dave Farquhar — Mon, 05 Dec 2016 12:00:03 +0000

Consumer routers drive security professionals like me crazy. I’m happy to say I finally found a router that doesn’t drive me nuts. I want you to buy an Asus RT-AC66U. I’m going to tell you why, and I’m going to

The post How to set up and optimize an Asus RT-AC66U appeared first on The Silicon Underground.

How hard is CISSP?

Dave Farquhar — Tue, 18 Oct 2016 11:00:34 +0000

CISSP difficulty is one of the most frequent questions I get once someone finds out I have it. “How hard is CISSP?” or “Could you pass CISSP again?” are two questions I get a lot. They’re fair questions, and the

The post How hard is CISSP? appeared first on The Silicon Underground.

Do I have enough CISSP work experience?

Dave Farquhar — Wed, 15 Jun 2016 11:00:15 +0000

It seems like about once a month an aspiring coworker asks me how to get enough CISSP work experience. I think this shows a misunderstanding of the requirement, so I’m going to try to clear it up. You don’t have

The post Do I have enough CISSP work experience? appeared first on The Silicon Underground.

Catch up on Microsoft patching fast

Dave Farquhar — Mon, 23 May 2016 11:00:13 +0000

Last week, Microsoft quietly released its convenience update pack for Windows 7, 8.1., and Server 2008R2. This is a great opportunity to catch up on Microsoft patching, as it incorporates all of Microsoft’s OS-level updates from the release of Service

The post Catch up on Microsoft patching fast appeared first on The Silicon Underground.

My first blog post for Qualys

Dave Farquhar — Wed, 11 May 2016 23:44:55 +0000

A chance conversation with a Qualys customer a few weeks ago veered off topic really fast, but it led to another conversation, which caught a manager’s attention and led to my first blog post for them. Placing a value on

The post My first blog post for Qualys appeared first on The Silicon Underground.