The title says it all – here is Johannes’ article for the details: An Update on CVE-2022-26809 – MSRPC Vulnerability – PATCH NOW – SANS Internet Storm Centre Microsoft’s advice: CVE-2022-26809
“…bombarded with ransomware.”
Ransomware is one of the biggest cyber security threats organisations and individuals have to deal with and it is so easy for the hacker to get the malware to you – just send you and email. In your rush to deal with your email you mistakeningly open an attachment or …
New botnet in the wild targeting routers and IoT devices
The cyber criminal group Keksec is using Enemybot to attack routers and IoT devices, exploiting a remote code execution (RCE) vulnerability CVE-2022-27226. Enemybot: a new Mirai, Gafgyt hybrid botnet joins the scene | ZDNet New Enemybot botnet blends Linux backdoor bot Gafgyt, Mirai • The Register This botnet is part …
Continue reading “New botnet in the wild targeting routers and IoT devices”
Sophos report even government agencies can miss hackers in their network
Hacker spent nearly five months inside a US regional government network, downloading files, using software and deleting logs, before deploying Lockbit ransomware. Sophos recreated the attack from what was left of the logs and believe the attackers got in through a public facing remote desktop protocol (RDP) port – something …
Continue reading “Sophos report even government agencies can miss hackers in their network”
Why keeping up with the cyber security news is important
Here is something I wrote for the Octagon Technology blog last month. It started out looking at the zero-day issue and then explored the tools available to create “defence in depth” cyber security and finished with an explanation of how you can keep up with this blog in using Outlook …
Continue reading “Why keeping up with the cyber security news is important”