Patches were pushed out last week to address serious vulnerabilities in both Google Chrome and Microsoft Edge (based on Chromium the open-source web browser project from Google). Google Chrome, Microsoft Edge updated to close security hole • The Register If you do not think you got the updates automatically – …
IcedID Malware – something you do not want run – so check your Exchange server
There are reports of hackers exploiting Microsoft Exchange servers, that have not been patched, to distribute spam email infected with IcedID malware. If you do run IcedID on your PC, the malware compromises the security of your machine opening a backdoor for other malware to be injected into your computer. …
Continue reading “IcedID Malware – something you do not want run – so check your Exchange server”
MFA is essential but it has it’s issues
We are always insisting that our clients always use multi-factor authentication (MFA) for absolutely every service they use. It is a prerequisite of any client we manage Microsoft 365 for that MFA is activated and enforced for everyone of their users. However, of course, there are ways that hackers exploit …
Security company changes it’s story – Okta and Lapsus$
Following the breach by Lapsus$, Okta has issued more statements on what has happened. Okta acknowledges ‘mistake’ in handling of Lapsus$ attack • The Register Are you one of the 15,000 organisations using Okta? – Smart Thinking Solutions Has Microsoft been compromised? Check your Microsoft independent backups. UPDATED – Smart …
Continue reading “Security company changes it’s story – Okta and Lapsus$”
National Cyber Security Centre Threat Report 25 March 2022
Weekly Threat Report 25th March 2022 – NCSC.GOV.UK