Do you know what an .xlsb file is? The hackers do and it is another way to obscure their malicious payloads

Here is yet another email attachment, examined by Xme, at SANS Internet Storm and for you to look out for: XLSB Files: Because Binary is Stealthier Than XML – Sans Internet Storm Centre For phishing attacks to succeed the hackers need to exploit your trust – for them to fail …

Active Mass Scanning for a Movable Type Vulnerability – If you do not know if this impacts you – then your business continuity documentation is not up to date!

SANS Internet Storm Diary is reporting a dramatic increase in the scanning for a vulnerability in the CMS Movable Type – software similar in function to WordPress for the development of web sites and web content. Scans for Movable Type Vulnerability (CVE-2021-20837) – SANS Internet Storm Centre National Vulnerability Database …

Credential leaks

It is always an issue when websites lose control of your credentials – it is a real worry when it is a site used by cyber security professionals. Credentials Leaks on VirusTotal – San Internet Storm Centre

Patch Tuesday

Patches and Updates

Patch Tuesday was yesterday – and I am patching away as should you be. Microsoft March 2022 Patch Tuesday – SANS Internet Storm Centre Microsoft patches 71 security vulnerabilities, 3 critical • The Register Watch out for those patches for Exchange Server if you have one. I thought I had …