ESXiArgs ransomware targets VMware ESXi virtualisation systems – usually used by larger companies, data centres, cloud providers etc, but we have used this software in the past – and exploits a vulnerability that was patched by VMware two years ago. However it appears not everyone has applied the patches. Thousands of …
CISA had a busy day yesterday
I regularly check the The US government Cybersecurity and Infrastructure Security Agency (CISA) site s it is a good source for patch and vulnerability alerts. Yesterday they posted security advisories for a range of products including Cisco, Drupal, and VMware: Cisco Releases Security Advisories for Multiple Products | CISA Drupal …
Windows 10 is on it’s way out
Microsoft has stopped directly selling Windows 10 licenses as of yesterday – directing customers to Windows 11. It is time for you to be planning your replacement of your Windows 10 devices – we are. You still have some time as Windows 10 will remain supported with security updates until …
If you have a QNAP NAS then get t patched
QNAP NAS devices are becoming very popular in smaller organisations that want a back-up and/or storage device, mainly we think because of their rich feature set, price and availability through Amazon. But a vulnerability has been discovered in the firmware and the vendors have a patch for it – so …
Continue reading “If you have a QNAP NAS then get t patched”
CISA adds a software development tool vulnerability to the Known Exploited Vulnerabilities Catalog and security advisories
The US government Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability for Telerik, a software development tool, to it’s Known Exploited Vulnerabilities Catalog: CISA Has Added One Known Exploited Vulnerability to Catalog | CISA This week CISA also released a security advisory for a range of Apple products, …