Cybersecurity Starts in the Boardroom
The week of Microsoft’s Patch Tuesday is a always a busy time for security advisories on the the US government’s Cybersecurity and Infrastructure Security Agency (CISA) website. Here are the current notifications, including Microsoft (of course), Apple, Mozilla and Adobe: Microsoft Releases April 2023 Security Updates | CISA (Patch Tuesday …
Why is Patch Tuesday important? For that answer why Patch Tuesday is important, have a look here: How Microsoft Patch Tuesday can help your cyber security planning Patch Tuesday for April 2023 One of the patches in this release is for the zero-day vulnerability CVE-2023-28252, which is a privilege elevation …
Continue reading “Patch Tuesday – It comes around so quickly!”
This is all just academic research (at the moment) but here is a story about exploiting the range of voice assistants, Siri, Google Assistant, Alexa and Cortana, using voice commands, issued from one device, that are inaudible to the human owners, but can activate another device. To do what? Here …
CISA is the US government’s Cybersecurity and Infrastructure Security Agency and a very good source cyber security and software patching information. Last week they posted several software patching updates and known vulnerabilities that are being exploited and mitigations for them. Samba Releases Security Updates for Multiple Versions of Samba | …
I have been asked about ChatGPT in the last couple of talks I have given, with people asking about the cyber security implications and how they can make money out of it! Here are a couple of ChatGPT articles from the weekend – the first I thought was an April’s …
