This is a description of how a vulnerability in the Microsoft Windows Network File System (NFS) could be exploited – which was discovered by Trend Micro Vulnerability Research Service. Zero Day Initiative — CVE-2022-30136: Microsoft Windows Network File System v4 Remote Code Execution Vulnerability This vulnerability was patched in Microsoft’s …
More Lenovo Laptop firmware vulnerabilities
This is not the first time Lenovo laptops have been found to have firmware issues – we do not specify Lenovo to our clients! New UEFI firmware flaws impact over 70 Lenovo laptop models (bleepingcomputer.com) Do you have a Lenovo laptop? If so then this post is for you. – …
Continue reading “More Lenovo Laptop firmware vulnerabilities”
The Follina threat has not gone away just because Microsoft has issued a patch – Octagon has the solution
The threat actors are still attempting to exploit the Follina flaw in Microsoft Word – looking for those of you out there who have not bothered to run the updates: XFiles info-stealing malware adds support for Follina delivery (bleepingcomputer.com) Have you checked all the machines in your organisation have run …
Why we do not recommend USB memory sticks as data storage for our clients
It has been a long standing thing at Octagon Technology that we advise our clients not to store important data on memory sticks – as they are easily lost: Japanese man loses USB stick with entire city’s personal details – BBC News By not allowing the use of USB sticks, …
Continue reading “Why we do not recommend USB memory sticks as data storage for our clients”
How the threat actors can get ransomware onto your systems
Before any malware can carry out the malicious tasks it was designed to do – it has to get into and infect a host system. This can be done in a variety of ways. It can be something as simple as plugging in an infected USB stick into your computer …
Continue reading “How the threat actors can get ransomware onto your systems”