Security Archives - DaveStork.nl

24/06/2021

I will be speaking at a WICCA online event next week!

It’s been a while, but I will be speaking at a WICCA online event next week. WICCA stands for “Women In Cybersecurity Community Association”. Their goal is “to bring infosec ladies and female security enthusiasts together to learn about exploits, hacking, incident response, forensics, the low-level stuff and make bad crypto jokes!” At their June virtual meetup, I will be...

Events/Security/SMTP Comments: 0

30/10/2020

Easily list mail DNS records via this PowerShell script

I get to investigate quite some mail environments in my work as a consultant. At a certain point you see some patterns emerging. One of those patterns is the correct configuration of mail related DNS records. It’s one of the first things I check when I must check an unfamiliar environment. I have talked about this anti-spoofing topic on numerous...

Compliance/Exchange/Office 365/Security/SMTP Comments: 5

05/08/2020

Quick tips to limit sending mail to the wrong recipient

It happened to all of us: sending a mail to the wrong recipient. Or disclosing the other recipients to each other.Let me show some quick tips that might help limit your users sending information to the wrong recipient. Embarrassing The Dutch Data Protection Agency (Dutch: Autoriteit Persoonsgegevens) is responsible for the supervision of correct handing of personal data. This agency...

Compliance/Exchange/Security Comments: 0

16/07/2020

How To: Exchange Authentication Policies

There are several ways how you can protect and limit access to Exchange Online. Conditional Access, Client Access Rules, the older ActiveSync Device rules and, the topic of this post, Authentication Policies. These policies are available in Exchange Online and Exchange Server 2019 since CU2. This article will show you how to implement this. Why use Authentication Policies? Authentication Policies...

Exchange/Office 365/Security Comments: 4

08/10/2018

I will be speaking at IT/Dev Connections 2018!

Next week I will be speaking at the IT/Dev Connection conference in Dallas (TX) during 16-18th October 2018, which is particularly exciting for me as it is the first time I will present in the USA! The session title is “Securing, Protecting, and Managing the Flow of Corporate Communications”. The session abstract tells you a bit more: Simple Mail Transport...

Events/Security/SMTP Comments: 0

30/03/2018

I will be speaking at the European Collaboration Summit 2018

Some exciting news! I’ll be speaking at the European Collaboration Summit 2018 in Mainz, Germany on May 28-30. My session is “Securing Exchange Online” and during that hour I will go through the capabilities of Exchange Online (Office 365) to further secure your email data and mail flow based on up-to-date know-how. It’s a topic I like, is quite relevant...

Events/Exchange/Security Comments: 0

10/01/2018

Office 365 to enforce TLS 1.2 per October 15, 2020

Update 21 July 2020 Microsoft has set a new date for the deprecation of TLS1.0 and 1.1, after a previous postponement due to the pandemic. You can find it in the Microsoft 365 Message Center message MC218794, which also references this Docs article. From October 15, 2020 onward, Microsoft will gradually enforce TLS1.2 on Office 365 services. Note that this...

Exchange/Office 365/Security Comments: 23

20/04/2017

I’ll be speaking at E-Communications & Collaboration Day 2017 (BE-COM.eu) on May 3rd 2017

In a few weeks, I’ll be travelling to Novotel Leuven in my neighboring country Belgium for the E-Communications & Collaboration Day 2017, a full-day (May 3rd 2017) of expert presentations and content about Office 365, Exchange, Skype for Business and related technologies. During this day, I will be presenting “Securing Exchange Online”: In this session, Dave Stork will go through...

Exchange/Office 365/Security Comments: 0

10/04/2017

Creating an Activity alert in Office 365

Within Office 365 you can use Audit Logging to monitor specific actions admins and users take. It’s comparable with Auditing within Exchange, but for most of all actions available in your Office 365 tenant. However, you need to do a search to find those actions perhaps long after the fact. That might be adequate for most organizations, but it would...

Office 365/Security Comments: 0

11/04/2016

The end is nigh for Exchange 2007: support nearing end and some other reasons to upgrade

The Exchange Team blog reminded us today that in about a year the extended support for Exchange Server 2007 will end. This means no more updates of any kind, not even security updates. Feature updates already stopped 4 years earlier when Mainstream support ended. The product will continue to run, but how longer it’s being kept in production that will...

Exchange 2007/Security/Support Comments: 0

14/09/2015

In light of Windows 10: Comparing Service and Privacy agreements

There’s been a lot of media attention regarding Windows 10 and privacy concerns. Unfortunately not all reports contain correct facts while others suggest some of the implemented technology is unique for Windows 10. There’s a lot of bad reporting (do some of them even fact check?) or even malicious FUD (Fear, Uncertainty and Doubt) out there. Now, don’t get me...

Security/Windows 8/10 Comments: 0

07/06/2015

Checking security protocols and ciphers on your Exchange servers

Microsoft states that Exchange 2010 and 2013 are secure out of the box. With this they mean that every traffic coming in and out of Exchange is one way or another encrypted with security protocols. Whether this is web traffic or specific for SMTP. Even IMAP and POP are enabled with mandatory encryption (although the services are disabled by default). However...

Exchange/Management/Security/Uncategorized Comments: 2

18/04/2015

IIS Exploit can reboot your Windows Server; install patch KB3042553 ASAP

This week Microsoft release a patch for Windows 7/Windows Server 2008 R2 and up that fixed a critical remote execution bug, see MS15-034 and CVE-2015-1635 for more info. Unfortunately the patch was reversed engineered and now an exploit is available. This was detected and described by ISC SANS. They added Denial of Service (DoS) as possible impact, next to Remote Code Execution....

Issue/Security/Update Comments: 0

11/11/2013

Exchange RBAC might be more granular than you think

Most Exchange admins probably know (or should know ) the permission model since Exchange 2010 is Role Based Access Control, RBAC for short. With it, you can regulate quite granularly what admins and end-user are able to do, without the hassles of Access Control Lists (ACLs). However, it recently became clear that it might be more granular than you think....

Exchange 2010/Exchange 2013/Management/Question of the day/Security Comments: 0

23/09/2013

Apple iPhone 5s TouchID and Exchange ActiveSync (updated)

2013/10/17: Added support statement by Microsoft below Just today I was curious how the Apple biometric convenience solution TouchID on the iPhone 5s would impact password policies enforced by Exchange ActiveSync(EAS). I frequently run into complaints from Android users who previously used a Pattern Lock instead of a PIN to unlock their phones. When my EAS policy sets specific password...

ActiveSync/Exchange/Exchange 2010/Exchange 2013/Issue/Question of the day/Security/Windows Phone / Mobile Devices Comments: 0

Category: Security