Cybersecurity Starts in the Boardroom
This story was first published on 31 March 2022 and Updated on 5 April 2022 Update 26 April 2022 There has been a steady increase in the number of active attacks against this and related vulnerabilities: Hackers hammer SpringShell vulnerability in attempt to install cryptominers | Ars Technica This is …
Continue reading “Java vulnerabilities to look out for – Spring4Shell – UPDATE 23 April 2022”
Here are a couple of longer articles, that give you some idea into the scale of cyber security and information security responsibilities, owners, directors and senior managers face in the current threat landscape. Over 42 million people in the UK had financial data compromised | TechRepublic Report: Many SMBs wouldn’t …
Continue reading “Why you need to look at your cybersecurity risks and mitigations”
This was the ransomware that hit universities over the past weeks: Universities as targets – Smart Thinking Solutions The FBI has released a statement outlining other attacks of BlackCat ALPHV and the attack vectors and strategies the gang has been using. It includes suggested mitigation. BlackCat/ALPHV Ransomware Indicators of Compromise …
Continue reading “BlackCat ransomware tracked to at least 60 victims”
If you use these products then the details of the issues and updates are here: Drupal Releases Security Updates | CISA Cisco Releases Security Updates for Multiple Products | CISA
This post was first made on 24 March 2022 I wrote about this yesterday as it got caught up in Lapsus$/Microsoft story – but the network access company, Okta, has been compromised by Lapsus$: Hundreds of companies potentially hit by Okta hack – BBC News First Microsoft, then Okta: New …
Continue reading “Are you one of the 15,000 organisations using Okta? UPDATED 22 April 2022”
