A SIEM Migration Is Not Just a Technology Refresh. It Is a Security Risk Event.

 

The Most Dangerous Gap May Be Invisible

Security incidents rarely involve a single obvious event. An attacker may begin with phishing, obtain a credential, access a remote service, escalate privileges and extract sensitive data. Each step may appear harmless independently.

The SIEM connects these activities. If log sources remain split between old and new platforms, the complete attack sequence may no longer be visible in one place. Logs being collected is not the same as threat detection.

The important question is whether the organisation can still correlate related activity, detect critical attack scenarios and escalate alerts to the right responders in time.

Read more...

Three Reasons You Haven’t Been Hacked... Yet

 Cybersecurity is one of the few areas where success can look exactly like luck.

No incident. No headline. No ransomware. No crisis. No regulatory reporting. No public breach.

But silence alone tells us very little.

It may mean your security is working. It may mean attackers have not chosen you yet. Or it may mean someone is already inside, quietly making sure you do not notice.

The real challenge is not to say, “We have never been hacked.”

The real challenge is to understand why.

Read more from source...

From Technical to Financial

I have spent about 10 years working in IT technical field as an engineer and project manager.

Starting from 2013, I'm exploring new career as an IT Strategic Finance in Telco industry. What a drastic paradigm in my career change. 

Assimilating a technical and financial part is totally a new thing to me. Will share my experience on career diversion later. 

The Summary of Steve Jobs Journey

This is the summary of Steve Journey

Then I say:

iWant iPhone 5

iFollow

How to Unsubcribe Celcom Facebook SMS [RM1/Week]

type
STOP FB and send to 32665

JobStreet Scam Alert

I have received this alert. Good info for the job seeker out there.

We've noticed an increase in the amount of job scams recently. Scammers are pretending to be reputable Multinational Corporations, including Oil and Gas companies, and sending jobseekers an email confirming how they have been accepted for an interview overseas.


This would of course cost money to the jobseeker (air tickets, lodging, food etc.) but the letter states that the company is willing to 'sponsor' 100% of the jobseekers' expenses. The catch? Jobseekers will have to pay a 'refundable' deposit of USD$100 upwards. Needless to say once that fee has been paid, the victim realizes that no flights or lodgings have been reserved and that the interview offer is false.


A sample of communication emails from scammers, including screen shots, can be found on our JobStreet Forum at http://ow.ly/5QTS5.


Check out our Community Digest at http://ow.ly/5QTVC for more examples of common scam tactics.


We also have a Safe Job Search Guide at http://ow.ly/5QTXp with further tips and guidelines on what you can do if you do come across possible scams.


Thank you.


Best regards,
LiNA
JobStreet.com

NAT Firewall Setting for Aruba Wireless Controller

The setting of Network Address Translation (NAT) in Aruba Wireless controller can be done via rules in a firewall set or an entire VLAN can be NAT’d. The VLAN NAT uses a dynamic (DHCP or PPPoE) public interface as the IP address through a dynamic NAT pool and the use of the dynamic-session-acl. NAT rules in a firewall policy can also use this pool, or a NAT pool to be configured to provide an IP range for the NAT. You can configure a NATpool by navigating the Aruba UI to the 

Configuration > Network > IP > NAT Pools.

Aruba controller has three NAT options setting which are SRC-NAT, DST-NAT and DUAL-NAT.

•src-nat: Performs network address translation (NAT) on packets matching the rule. When this option is selected, you need to select a NAT pool. (If this pool is not configured, you configure a NAT pool by navigating to the 

Configuration > Network > IP > NAT Pools.

•dst-nat: This option redirects traffic to the configured IP address and destination port. An example of this option is to redirect a

ll HTTP packets to the captive portal port on the Aruba controller as used in the pre-defined policy called “captiveportal”.

•dual-nat: This option performs both source and destination NAT on packets matching the rule.