Cybersecurity Starts in the Boardroom
This story was first published on 31 March 2022 and Updated on 5 April 2022 Update 26 April 2022 There has been a steady increase in the number of active attacks against this and related vulnerabilities: Hackers hammer SpringShell vulnerability in attempt to install cryptominers | Ars Technica This is …
Continue reading “Java vulnerabilities to look out for – Spring4Shell – UPDATE 23 April 2022”
Here are a couple of longer articles, that give you some idea into the scale of cyber security and information security responsibilities, owners, directors and senior managers face in the current threat landscape. Over 42 million people in the UK had financial data compromised | TechRepublic Report: Many SMBs wouldn’t …
Continue reading “Why you need to look at your cybersecurity risks and mitigations”
This was the ransomware that hit universities over the past weeks: Universities as targets – Smart Thinking Solutions The FBI has released a statement outlining other attacks of BlackCat ALPHV and the attack vectors and strategies the gang has been using. It includes suggested mitigation. BlackCat/ALPHV Ransomware Indicators of Compromise …
Continue reading “BlackCat ransomware tracked to at least 60 victims”
If you use these products then the details of the issues and updates are here: Drupal Releases Security Updates | CISA Cisco Releases Security Updates for Multiple Products | CISA
Other cyber security stories have really overtaken the log4j/log4shell issue, but it is still out there and sometimes, because developers are so dependent on the framework, patches lead to more issues. Here is an example where even the biggest organisations have problems: Amazon Web Services Log4j patches blew holes in …
