Here is yet another email attachment, examined by Xme, at SANS Internet Storm and for you to look out for: XLSB Files: Because Binary is Stealthier Than XML – Sans Internet Storm Centre For phishing attacks to succeed the hackers need to exploit your trust – for them to fail …
A question I am often asked…
I am frequently asked what I think of DropBox or other method for organisations to share files across the internet with other organisations, often after I have been speaking about Microsoft 365, OneDrive and SharePoint. Possibly after I have mentioned that these services that have, authentication, authorisation and accountability (AAA) …
Active Mass Scanning for a Movable Type Vulnerability – If you do not know if this impacts you – then your business continuity documentation is not up to date!
SANS Internet Storm Diary is reporting a dramatic increase in the scanning for a vulnerability in the CMS Movable Type – software similar in function to WordPress for the development of web sites and web content. Scans for Movable Type Vulnerability (CVE-2021-20837) – SANS Internet Storm Centre National Vulnerability Database …
Credential leaks
It is always an issue when websites lose control of your credentials – it is a real worry when it is a site used by cyber security professionals. Credentials Leaks on VirusTotal – San Internet Storm Centre
Patch Tuesday
Patch Tuesday was yesterday – and I am patching away as should you be. Microsoft March 2022 Patch Tuesday – SANS Internet Storm Centre Microsoft patches 71 security vulnerabilities, 3 critical • The Register Watch out for those patches for Exchange Server if you have one. I thought I had …