With Microsoft’s Patch Tuesday other vendors also release patches and updates around the same time. Here are the notifications from the US government Cybersecurity and Infrastructure Security Agency (CISA) – a good resource for keeping up with the major vendor patches: First of course their notification for Microsoft’s releases: Microsoft …
ESXiArgs Ransomware Recovery Advice
Following the discovery of a coding flaw in the ESXiArgs Ransomware, the US government Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have released a document outlining how to use the various scripts and processes to recovery data after an attack: CISA and FBI Release ESXiArgs Ransomware Recovery Guidance …
The bad guys do not always get it right…
I write a lot of bad news stories here, it is the nature of a cyber security news site – that’s why we have Because It’s Friday – but here is a good news story when the threat actors get it wrong: First Linux variant of Clop ransomware targeted universities, …
CISA had a busy day yesterday
I regularly check the The US government Cybersecurity and Infrastructure Security Agency (CISA) site s it is a good source for patch and vulnerability alerts. Yesterday they posted security advisories for a range of products including Cisco, Drupal, and VMware: Cisco Releases Security Advisories for Multiple Products | CISA Drupal …
CISA adds a software development tool vulnerability to the Known Exploited Vulnerabilities Catalog and security advisories
The US government Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability for Telerik, a software development tool, to it’s Known Exploited Vulnerabilities Catalog: CISA Has Added One Known Exploited Vulnerability to Catalog | CISA This week CISA also released a security advisory for a range of Apple products, …