The threat actors are still attempting to exploit the Follina flaw in Microsoft Word – looking for those of you out there who have not bothered to run the updates: XFiles info-stealing malware adds support for Follina delivery (bleepingcomputer.com) Have you checked all the machines in your organisation have run …
Mozilla releases security updates for a range of products
Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird | CISA
Knowledge of the current state of ransomware is an essential step in everyone’s cyber security plan
Various departments of the US Government have issued a joint advisory about MedusaLocker ransomware as part of their #stopransomware initiative. #StopRansomware: MedusaLocker | CISA Knowledge of circulating ransomware malware helps all organisations and individuals respond to the threats, when organisations that have been compromised, delay reporting the attacks or even …
Blockchain security
Often it the online processes around blockchain and cyrpto-currencies that are exploited by the threat actors, not the blockchain itself – which remains secure. Following a year of research, a report by Trail of Bits, commissioned by the US Government Defense Advanced Research Projects Agency (DARPA) shows that the blockchain …
Microsoft 365 timeouts to mitigate data leaks
Microsoft 365 administrators can now set a site wide timeout for users. This can be a benefit to mitigate data leakage from unmanaged machines left logged in. Microsoft 365 now prevents data leaks with new session timeouts (bleepingcomputer.com)