NSA Top Misconfigurations

Our industry and the vendors love to talk about CVE’s… this can often feel like playing ‘whack-a-mole’.

The NSA published a list of misconfigurations, which if addressed, should limit the attack surface quite a bit.

Mitigation examples include ideas such as disabling LLMNR, requiring SMB signing, enforcing segmentation, and others.

https://media.defense.gov/2023/Oct/05/2003314578/-1/-1/0/JOINT_CSA_TOP_TEN_MISCONFIGURATIONS_TLP-CLEAR.PDF

attack attack surface cve cybersecurity ideas industry limit list llmnr love misconfigurations mitigation nsa segmentation signing smb vendors whack-a-mole