It has emerged that senior executives at Microsoft had their emails hacked and monitored by Russian threat actors for nearly 2 months. Microsoft network breached through password-spraying by Russian-state hackers | Ars Technica The attack was not sophisticated. The threat actors – Midnight Blizzard – using nothing more than a …
CISA Alerts including Patch Tuesday
The US government Cybersecurity and Infrastructure Security Agency (CISA) site is one of the “go to places” for me and my team to keep up with vulnerabilities in our client’s software. Although aimed at the US Government and US users it is still really useful. The alerts cover both software …
Russian offensive malware spreads outside Ukraine
We have not heard much recently about the cyber war between Ukraine and Russia but here is a story that illustrates what I have been saying about malware creep and collateral damage from deployed malware weapons. By the very nature of online commerce and communications these cyber-weapons will spread outside …
Continue reading “Russian offensive malware spreads outside Ukraine”
Because It’s Friday – It’s all about the moon
Because It’s Friday is all about finding something interesting to ease all of us into the weekend, following a week of usually stressful cyber security news. I have been away on leave for the last few weeks and space has taken centre stage whilst I have been away, with some …
Continue reading “Because It’s Friday – It’s all about the moon”
Phishing this is how the malware gets in!
I’ll start this story with an example of a phishing attack run by one of the Russian sponsored hacking groups currently involved in the Russian Ukraine conflict. You are not likely to be one of their carefully selected targets but it illustrates how other threat actors operate. The group is …
Continue reading “Phishing this is how the malware gets in!”