Cybersecurity Starts in the Boardroom
Microsoft has issued it’s monthly round of patches and updates, SANS Internet Storm Centre has a round-up here: Microsoft August 2022 Patch Tuesday – SANS Internet Storm Center This update addresses the DogWalk zero-day vulnerability. Here are the Microsoft release notes: August 2022 Security Updates – Release Notes – Security …
Continue reading “Yesterday was Patch Tuesday – Exchange server gets a special mention”
They steal them: Email marketing firm hacked to steal crypto-focused mailing lists (bleepingcomputer.com) Email marketing firms are prime targets.
We practice what we preach: DrayTek routers offer great value and functionality to many micro to medium businesses, so a flaw with them could be an issue to an organisation without IT or cybersecurity support: Critical RCE vulnerability impacts 29 models of DrayTek routers (bleepingcomputer.com)
Here are a couple of stories showing that ransomware hits large and small organisations: Luxembourg energy companies struggling with alleged ransomware attack, data breach – The Record by Recorded Future At least 34 healthcare orgs affected by alleged ransomware attack on OneTouchPoint – The Record by Recorded Future The Bromford …
I have published a lot on the log4j and log4shell exploits and vulnerability. CISA issued a special warning about the long term impact of the issue: CISA advisory for continued exploitation of Log4Shell in VMware Horizon Systems – Smart Thinking Solutions Here is another real world example of the exploitation …
