Cybersecurity Starts in the Boardroom
Device security has definitely been the theme of this week and I thought this article by Dan Goodin on Ars Technica illustrated the problem of insecure devices – especially routers. Hacked and used by both threat actors and national espionage teams. Hacker free-for-all fights for control of home and office …
Continue reading “Let’s finish the week with another device security article”
It is so easy to forget about those boxes in the cupboard, that your organisation depends on. I often find routers, switches and other devices left off my initial investigation document when I start an IT and Cyber Security Audit. Here is the reason why you must make sure they …
Recently we covered the issues of hardware vulnerabilities and how network devices and other hardware are often missed when it comes to cyber security patching. Here are two more examples of why you should not miss the hardware… New Condi malware builds DDoS botnet out of TP-Link AX21 routers (bleepingcomputer.com) …
You may not be targeted but a vulnerable and then compromised small office router modem would be a step along the way for a bigger attack by Chinese hackers: Research reveals a malicious firmware implant for TP-Link routers, linked to Chinese APT group (checkpoint.com) This is why your network hardware, …
Continue reading “Why even small offices need to check their hardware”
Selling redundant gear and wiping hard drives on computers has pretty much become standard over the last few years – whether the machines are going for resale, donation, upcycling or recycling. But what happens when it comes to cyber security critical network devices? These bits of kit can be eye-wateringly …
Continue reading “So selling redundant gear sounds like a good idea…”
The US government Cybersecurity and Infrastructure Security Agency (CISA) has issued security advisories for Drupal web content creation software and Juniper Networking products: Drupal Releases Security Update to Address Vulnerability in Private Taxonomy Terms | CISA Juniper Networks Releases Security Updates for Multiple Products | CISA Cisco has issued advisories …
Netgear have issued a security advisory – you should check your Netgear equipment. Impacted equipment should be patched as soon as possible: Security Advisory for Pre-Authentication Buffer Overflow on Some Routers, PSV-2019-0208 | Answer | NETGEAR Support
