The US government Cybersecurity and Infrastructure Security Agency (CISA) is one of our go to location for information about exploited vulnerabilities and patching – the type of resource I discuss in this week’s CyberAwake article: The Zero-day Threat – What can you do about it? Keeping up with these issues …
Freaky Leaky
With a name like ‘Freaky Leaky SMS’ I had to cover this research. Freaky Leaky SMS: Extracting User Locations by Analyzing SMS Timings (arxiv.org) At the moment this a research paper, the “attack” has only be carried out in the lab and it takes a large amount of preparatory work. …
Routers and NAS Devices
Recently we covered the issues of hardware vulnerabilities and how network devices and other hardware are often missed when it comes to cyber security patching. Here are two more examples of why you should not miss the hardware… New Condi malware builds DDoS botnet out of TP-Link AX21 routers (bleepingcomputer.com) …
Because It’s Friday – Tomorrow’s World
Last week we looked at the internet of 1994, this week we are looking at an “internet” of the 1970s as shown on Tomorrow’s World. For those younger readers; Tomorrow’s World was a popular TV programme on BBC looking at science and technology – it ran for 38 years. It …
Apple patches everything
SANS has an excellent article looking at the Apple updates and what they apply to: Apple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari – SANS Internet Storm Centre Get them done.
