I have gathered here just a selection of the ransomware stories that have made the headlines – for these there are many more that go unreported in the media or even outside the organisation. ‘Lives are at stake’: hacking of US hospitals highlights deadly risk of ransomware | Hacking | …
I have told everyone to use MFA so I do not need to think about more cyber security! UPDATED 14 July 2022
This post was original published on 27 June 2022 Update 14 July 2022 Here is an article from the Microsoft Threat Intelligence Center (MSTIC) and the Microsoft 365 Defender Research Team outlining how the big phishing campaigns backed by experienced and skilled hackers can bypass the security of multi-factor authentication: …
CISA adds one known vulnerability to it’s database for Microsoft Windows
The US Cybersecurity and Infrastructure Security Agency has added one new vulnerability to it’s Known Exploited Vulnerabilities Catalog for a Microsoft Windows privilege escalation vulnerability – this has been addressed in Microsoft’s July 2022 Patch Tuesday. CISA Adds One Known Exploited Vulnerability to Catalog  | CISA
CISA security patch advisories
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued several advisories about security patches available from a range of vendors, including Adobe and Citrix: Adobe Releases Security Updates for Multiple Products | CISA SAP Releases July 2022 Security Updates | CISA Citrix Releases Security Updates for Hypervisor | CISA
Spectre-based attack on older AMD chips
A hardware flaw like Spectre and Meltdown are always going to be a big issue for users and vendors alike. Patches and fixes are probably going to impact the performance of the CPUs and hardware. They are also going to an attack vector threat actors will constantly return as it …
