I recently wrote a series on the often overlooked cyber security tool encryption. Encryption – A Primer | Smart Thinking Solutions But you have to be able to rely on your encryption and you need the vendor to fix issues quickly as another word for encryption with out a working …
Manage your security patching
Here are a couple of examples from the recent cyber-tech press of examples of software vulnerabilities that need patching… Promptly! Microsoft releases Exchange hotfixes for security update issues – BleepingComputer ArcaneDoor hackers exploit Cisco zero-days to breach govt networks – BleepingComputer The first illustrates that management is needed as not …
Why patching is important
Even though the US National Security Agency (NSA) reported this flaw to Microsoft and they patched it in their October 2022 Patch Tuesday, the threat group APT28 is still exploiting it. Microsoft: APT28 hackers exploit Windows flaw reported by NSA – BleepingComputer The Russian threat group uses a hacking tool …
SharePoint – More pain for Microsoft but we still have a free gift for you…
It is never a good cyber security story, when I read there is a security issue with SharePoint – I have written many cyber security plans that depend on the integrity of Microsoft and SharePoint. New SharePoint flaws help hackers evade detection when stealing files (bleepingcomputer.com) Audit logs are a …
Continue reading “SharePoint – More pain for Microsoft but we still have a free gift for you…”
Catching up with CISA
The US government Cybersecurity and Infrastructure Security Agency (CISA) is one of our go-to information sources for cyber security information. Here is a round-up of their latest alerts: Apple Released Security Updates for Safari and macOS | CISA Cisco Releases Security Updates for Multiple Products | CISA Fortinet Releases Security …