This post was first published on 4 June 2022 Following the CISA alert, about vulnerability and active exploits, Atlassian has released new versions of their collaboration software, Confluence Server and Confluence Data Center. Atlassian Releases New Versions of Confluence Server and Data Center to Address CVE-2022-26134 | CISA Update 8 …
Microsoft seizes threat actor domains
The Microsoft Digital Crimes Unit has gone to court to seize 41 domains alleged to have been used by an Iranian cybercrime group called Bohrium. The Bohrium group ran a targeted email spear-phishing operation against organizations in the US, Middle East, and India. As part of the operation they would pose …
It’s that Conti gang again
The prolific cyber criminal gang is back in the news – if it was ever out. Conti spotted working on exploits for Intel ME flaws • The Register The data extortion gang Karakurt is believed to be associated with the Conti gang. Not ransomware this time that encrypts your data …
Ransomware attacks – just in case you have forgotten that any organisation can be compromised – three tips to help you face up to the threat
Bored with ransomware stories? Read this one, it has a very nice Hitchhiker’s Guide to the Galaxy reference. There have been a flurry of ransomware attacks in the news recently – but these are only the ones that make the headlines. Louisiana authorities investigating ransomware attack on city of Alexandria …
Ransomware via IoT
I have written before about the security limitations of “Internet of Things” (IoT) devices. Many of them are simple devices, possibly based on older tech, they tend to lack the hardware to allow for regular security updates, etc, etc etc. At least the UK Government is enacting laws to make …
