Cybersecurity Starts in the Boardroom
I have just written this article, showing that more than 24billion stolen credentials are available for sale on the dark web: Now here is a voice mail phishing attack that is designed to steal your Microsoft credentials – so they can join the other 24 billion on the Dark Web: …
Continue reading “Threat actors come up with yet another way to steal your Microsoft credentials…”
Normally my cyber security posts are business orientated, but occasionally there is cyber security news that could have an impact on your and your friends and family. Microsoft has announced a step-up to it’s personal/family Microsoft 365 by adding a more advanced version of Microsoft Defender to the apps included …
Before any malware can carry out the malicious tasks it was designed to do – it has to get into and infect a host system. This can be done in a variety of ways. It can be something as simple as plugging in an infected USB stick into your computer …
Continue reading “How the threat actors can get ransomware onto your systems”
This post was originally made on 9 June 2022 Update 15 June 2022 Microsoft has included updates in it’s Patch Tuesday bundle to address this issue: Microsoft Patch Tuesday – Follina zero-day fixed – Smart Thinking Solutions Get the updates done as soon as possible. Let’s hope this is really …
Here is another excellent breakdown, with screen shots, of phishing emails exploiting the Microsoft Word/Follina/ms-msdt flaw. Being aware of the types of phishing emails the threat actors use is part of the defence in depth you need to have great cyber security. TA570 Qakbot (Qbot) tries CVE-2022-30190 (Follina) exploit (ms-msdt) …
Continue reading “Active exploit for Follina – the still unpatched flaw in Microsoft Word”
