Cybersecurity Starts in the Boardroom
This post was first made on 12 April 2022 Update 23 May 2022 Now it is School Districts as targets: K-12 school districts in New Mexico, Ohio crippled by cyberattacks – The Record by Recorded Future Ransomware attack exposes data of 500,000 Chicago students (bleepingcomputer.com) Update 20 May 2022 I …
Continue reading “Universities as targets UPDATED 23 May 2022”
If the patch is not effective or worse it breaks something else whilst fixing the vulnerability. This happened to Microsoft: Microsoft fixes Windows authentication woes • The Register But you still have to run those patches and updates as an unpatched system is a target for threat actors. Better to …
Continue reading “I love patches as part of a cyber security plan – but there is a problem!”
Having missed a week – the NCSC is back with it’s weekly report: Weekly Threat Report 20th May 2022 – NCSC.GOV.UK
Cyber security investigations often mean carrying out tasks that by the letter of the (US or UK) are illegal – it is the nature of the job. In the United Kingdom we have two critical pieces of legislation that a cyber security consultant could fall foul of: Computer Misuse Act …
Phishing campaigns usually depend on social engineering and threat actors are always looking for new ways to exploit your trust: Phishing scam adds a ‘chatbot-like’ twist to steal credit card information and more – The Record by Recorded Future
