Patches were pushed out last week to address serious vulnerabilities in both Google Chrome and Microsoft Edge (based on Chromium the open-source web browser project from Google). Google Chrome, Microsoft Edge updated to close security hole • The Register If you do not think you got the updates automatically – …
Active Mass Scanning for a Movable Type Vulnerability – If you do not know if this impacts you – then your business continuity documentation is not up to date!
SANS Internet Storm Diary is reporting a dramatic increase in the scanning for a vulnerability in the CMS Movable Type – software similar in function to WordPress for the development of web sites and web content. Scans for Movable Type Vulnerability (CVE-2021-20837) – SANS Internet Storm Centre National Vulnerability Database …
The log4j threat has not gone away
Here is an attack in the world targeting machines with malicious rootkits. Even though their code is poor, it is still an issue. Linux botnet exploits Log4j flaw to hijack Arm, x86 systems • The Register Log4j at Smart Thinking Solutions
This is what happens when you do not run patches and updates
The Information Commissioner’s Office has issued a £98,000 penalty to Tuckers Solicitors based in London. The solicitors firm suffered a ransomware attack where confidential information including, PII and case material was lost. UK lawyer fined for not patching fast enough before attack • The Register
QNAP device vulnerability – UPDATED
This post was first published on 26 January 2022 There have been further warnings to update QNAP devices that are vulnerable to a Linux bug: QNAP warns severe Linux bug affects most of its NAS devices (bleepingcomputer.com) Today is a day of minority device vulnerabilities – here is another for …
