Cybersecurity Starts in the Boardroom
Here is an interesting article from the team at Apache dealing with patching the Log4j problem: The Apache Log4j team talks about the Log4Shell patching process – The Record by Recorded Future But the exploits in the wild are still happening: Threat actor target Ubiquiti network appliances using Log4Shell exploits …
Continue reading “Log4j exploits and behind the scenes with the Apache patching team”
Here is another example of a phishing attack, from SANS Internet Diary – although I am not sure the average user will know what to do with an ISO file? The attack is interesting as it uses Base 64 to obscure it from detection. Malicious ISO Embedded in an HTML …
Continue reading “Training is everything when it comes to phishing emails”
This a complex, but easily implemented by the hackers, hoax, being run by cyber criminals right now. It is based around COVID-19 home testing kits and the subsequent results. Cybercriminals are exploiting COVID-19 tests in phishing attacks – TechRepublic Phishing Emails The vector for the attack is primarily through email …
Continue reading “Be aware of COVID-19 testing scams – get trained to deal with these threats”
WE all get it – spam email – there is so much of it that whole industries have been created to stop it and create it. There is so much of it, because phishing email is the easiest way for the bad actors to reach you! Here is an example …
Continue reading “The easiest way for hackers to reach you – phishing email”
So yesterday was Patch Tuesday – and we all know what that means. Get the updates and patching done now! Here here are my favourite round-up articles: Microsoft Patch Tuesday – January 2022 – SANS Internet Storm Centre Microsoft starts 2022 with 96 CVEs for Patch Tuesday • The Register …
