Cybersecurity Starts in the Boardroom
This post was originally published on 17 May 2022 Update 19 May 2022 The numbers just keep getting bigger! This article in The Register, has the Irish Council on Civil Liberties, stating that our data is shared up to 987 times a day, when the Real Time Bidding (RTB) industry …
Continue reading “Just how much and often is your data shared? UPDATED 19 May 2022”
The US Government Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory of threat actors exploiting the software issues in the F5 systems: Threat Actors Exploiting F5 BIG IP CVE-2022-1388 | CISA
Following the emergence of Bumblebee malware as a significant threat, SANS INternet Storm has a post looking at the function of the malware and transferring ISO files. Bumblebee Malware from TransferXL URLs – SANS Internet Storm Centre This is an excellent post by Brad and not only shows you the …
Continue reading “More on Bumblebee malware – detailed attack examination”
Microsoft is reporting on a new variant of the Sysrv botnet malware – Sysrv-K, that infects both Windows and Linux servers. This malware can compromise a wide range of vulnerabilities including WordPress plug-ins and Spring Cloud. Once in the malware installs and operates the Monero cryptocurrency miner. Monero-mining botnet targets …
Continue reading “Windows and Linux server both targets for crypto-mining malware”
The US Cybersecurity and Infrastructure Security Agency has issued a joint advisory with the cyber security organisations from the UK, New Zealand, Netherlands and Canada listing ten regularly exploited weak security controls, poor configurations, and bad practices that allow threat actors to compromise networks. Here is the article: Weak Security …
Continue reading “CISA joint advisory on access control. Are you still missing MFA?”
