Cybersecurity Starts in the Boardroom
Yesterday was the second Tuesday of the month that means our support team have been reviewing our client monitoring reports and the SOC to check that the Microsoft Patch Tuesday updates have been completed. Our team will keep an eye on the reports for the next day or two to check there …
…but sometimes they go wrong. Microsoft has had to fix a number of problems following the April Patch Tuesday. Microsoft says April Windows updates break VPN connections (bleepingcomputer.com) Microsoft: April Windows Server updates cause NTLM auth failures (bleepingcomputer.com) I included these stories in this week of device security as a …
Continue reading “There is no choice but to run cyber security updates…”
I recently wrote a series on the often overlooked cyber security tool encryption. Encryption – A Primer | Smart Thinking Solutions But you have to be able to rely on your encryption and you need the vendor to fix issues quickly as another word for encryption with out a working …
Here are a couple of examples from the recent cyber-tech press of examples of software vulnerabilities that need patching… Promptly! Microsoft releases Exchange hotfixes for security update issues – BleepingComputer ArcaneDoor hackers exploit Cisco zero-days to breach govt networks – BleepingComputer The first illustrates that management is needed as not …
Even though the US National Security Agency (NSA) reported this flaw to Microsoft and they patched it in their October 2022 Patch Tuesday, the threat group APT28 is still exploiting it. Microsoft: APT28 hackers exploit Windows flaw reported by NSA – BleepingComputer The Russian threat group uses a hacking tool …
It is never a good cyber security story, when I read there is a security issue with SharePoint – I have written many cyber security plans that depend on the integrity of Microsoft and SharePoint. New SharePoint flaws help hackers evade detection when stealing files (bleepingcomputer.com) Audit logs are a …
Continue reading “SharePoint – More pain for Microsoft but we still have a free gift for you…”
The US government Cybersecurity and Infrastructure Security Agency (CISA) is one of our go-to information sources for cyber security information. Here is a round-up of their latest alerts: Apple Released Security Updates for Safari and macOS | CISA Cisco Releases Security Updates for Multiple Products | CISA Fortinet Releases Security …
