This report focuses on the cyber attacks on the Ukraine. An overview of Russia’s cyberattack activity in Ukraine (microsoft.com) The hybrid war in Ukraine – Microsoft On the Issues
Joint advisory on the top exploits
The UK’s National Cyber Security Centre with it’s partners in the Five Eyes, has issued an advisory for the top exploited software vulnerabilities in 2021 – meaning they could continue being the top exploits in 2022. 2021 Top Routinely Exploited Vulnerabilities | CISA Microsoft Exchange server, VMware, SonicWall and Log4j …
VMware make sure you have it patched
I have written a couple of time about the vulnerabilities in VMware – they are patched now but the article below shows there are groups still trying to attack those organisations, slow to patch, with an active exploit. Iran’s Rocket Kitten likely behind VMware exploitation • The Register Why bother. …
Exchange servers at risk and being exploited right now
An offshoot of the Hive ransomware gang is actively trying the exploit Exchange servers – if you have one then you or your IT team have to ensure patches and other basic security precautions are in place. Hive ransomware affiliate zeros in on Exchange servers • The Register
CISA adds several Windows vulnerabilities to the ” Known Exploited Vulnerabilities Catalogue”
The US Government, Cybersecurity and Infrastructure Security Agency (CISA) has added several new Microsoft Windows, vulnerabilities to it’s database. These all need patches – so again it is a good time to check that your “auto-updating” is working or time to get an Octagon IT monitoring package and let experts monitor the …