US Cybersecurity and Infrastructure Security Agency advisories on security updates – Chrome, Oracle, Drupal, Apple, Cisco and Atlassian

Patch now logo

CISA has issued advisories on the following: Google Releases Security Updates for Chrome | CISA Drupal Releases Security Update  | CISA Oracle Releases July 2022 Critical Patch Update | CISA Apple Releases Security Updates for Multiple Products | CISA – SANS had a good round-up of these updates here. Cisco …

More ransomware money returned – but your cyber security plan should not depend on that. Do you have a cyber security plan?

Masterclass September 2022

This time the US Department of Justice has returned about half a million dollars worth of Bitcoin to two hospital groups who had paid ransomware ransoms to North Korean threat actors. US seizes stolen funds from suspected North Korean hackers – BBC News However it is better to have not …

Ransomware attacks delivered and monetised with little technical knowledge

The model of ransomware attacks has definitely moved for a backroom hackers sending malware out, to a corporation style operation, complete with updates, support and marketing of the illicit tools. Small opportunist threat actors remain, and always will, hackers have to start somewhere, as is shown by this article at …

And it’s back – Microsoft reinstates, default blocking in Office apps of macros from the internet.

Office macros slide

This story has gone back and forth. How can Microsoft wobble on what has been a well used attack vector, by threat actors for years and years? Microsoft to block downloaded Office macros – at last – Smart Thinking Solutions Oh No! Microsoft appears to have rolled back it’s macro …