Cybersecurity Starts in the Boardroom
Here is an interesting article from the team at Apache dealing with patching the Log4j problem: The Apache Log4j team talks about the Log4Shell patching process – The Record by Recorded Future But the exploits in the wild are still happening: Threat actor target Ubiquiti network appliances using Log4Shell exploits …
Continue reading “Log4j exploits and behind the scenes with the Apache patching team”
The discovery of data storage and communications devices can be critical in any cyber security investigation – now the Digital Investigations and Intelligence Unit. (DIIU) of Wiltshire police have Bonny and Dora. Wiltshire Police ‘Digi-dogs’ trained to sniff out technology – BBC News The dogs have been trained to sniff …
Continue reading “I should have run this story on a Friday! Tech sniffer dogs”
This is an interesting article looking at cyber attacks in 2021. Personal identifying information for 1.5 billion users was stolen in 2021, but from where? – TechRepublic
This a complex, but easily implemented by the hackers, hoax, being run by cyber criminals right now. It is based around COVID-19 home testing kits and the subsequent results. Cybercriminals are exploiting COVID-19 tests in phishing attacks – TechRepublic Phishing Emails The vector for the attack is primarily through email …
Continue reading “Be aware of COVID-19 testing scams – get trained to deal with these threats”
A darknet website, UniCC, that since 2013, has sold stolen credit card information to criminals is closing. But not because of international police co-operation but because the criminals running it are retiring! How much is their estimated retirement fund? £260m. Largest darknet stolen credit card site closes – BBC News …
Continue reading “Access to stolen credit card data stopped”
If you are involved in software development or use open source software, this article from the Google Cloud team, makes for interesting reading and can add some clarity to using this type of resource. Cloud CISO Perspectives: December 2021 | Google Cloud Blog
Latest update about Log4j from SANS Internet Diary. Log4j 2 Security Vulnerabilities Update Guide – SANS Internet Storm Centre
